$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa File: cea6a4db-b45f-38c8-ba93-dab3703d562c.roa (raw, json) Hash identifier: IfaCvsLhxFD3ZFDYljPxV6ngDplSTDtEIsPAb7tng7s= Subject key identifier: CD:51:71:32:2D:8E:15:DA:63:F6:C4:A3:0A:D5:3B:B1:8A:A0:83:8A Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F43285849F9DFC66D9A8282429B809100 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 23158 IP address blocks: 192.16.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c6:6d:9a:82:82:42:9b:80:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=2deddd63-1fb6-476f-8aaa-91d4c9310129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:8d:c8:18:74:d2:c5:d3:bd:a6:03:85:08: 04:47:e0:c1:fe:df:14:98:53:5e:b9:16:0a:01:9e: d3:65:72:c7:cd:ea:5f:e2:d0:49:1e:0d:e3:55:42: 35:88:be:2f:c4:06:ee:c3:ef:e0:48:78:45:24:02: 45:c9:19:66:9c:4d:11:c8:56:a7:9f:86:c6:58:7e: 22:16:67:9e:d5:7e:d1:97:a4:f3:4a:2a:42:93:32: d1:64:0d:00:98:02:d8:49:78:36:48:69:cc:ae:03: 7b:8b:78:67:78:88:9b:fe:8e:c1:16:3b:66:b0:2c: dd:0e:a4:73:8f:d6:16:96:45:38:26:d1:41:b3:88: 80:20:b7:20:50:7f:9d:dc:a6:5a:32:9c:e7:cb:1e: d7:5d:27:1b:79:2f:7a:3f:a3:a8:eb:00:c5:29:8f: 98:4a:c0:c8:6e:53:4b:57:a3:e4:4b:33:d0:52:64: 77:66:81:4b:b7:1b:0c:08:56:39:7c:3c:5d:22:06: 8c:c0:ef:a2:41:68:ba:b2:08:91:51:a9:0d:b5:87: 30:0c:76:85:54:bf:08:d0:ca:86:bf:6a:b0:1c:a4: 4f:37:ef:e2:98:ea:d7:60:62:4b:44:f0:c1:47:46: e7:7e:99:ca:5e:ae:bc:9f:8e:4f:b8:9b:c2:32:8c: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:51:71:32:2D:8E:15:DA:63:F6:C4:A3:0A:D5:3B:B1:8A:A0:83:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 192.16.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8b:e6:78:25:9f:f9:c3:ef:53:7d:d2:21:e9:82:ee:a0:c2: 5c:17:d1:90:be:02:66:02:1b:d6:28:3b:a3:08:bb:7b:a8:7d: 54:9f:95:14:2d:b5:70:fc:a5:5d:c5:87:ac:17:01:cc:db:51: 32:07:47:48:7d:81:bc:55:9a:76:77:10:c9:30:01:2e:11:e3: f4:a5:a6:fd:01:92:71:c9:b6:de:00:bd:7e:83:b4:12:99:48: ac:03:c0:ce:35:5c:95:8a:84:8d:86:96:96:28:c3:d0:0f:d3: 8e:99:59:e4:61:cd:a9:ac:8a:3f:38:a5:75:f1:2d:18:5c:5b: 21:c5:bd:15:b3:90:b3:77:89:d8:5c:d7:f9:89:42:ca:3f:22: c6:e2:fc:7b:df:98:b4:1f:cb:af:fc:b1:6c:e9:00:7a:51:3c: c3:53:3e:c3:f9:fe:ae:3c:58:0e:97:a7:07:a2:49:d9:0f:9d: b5:d6:4c:12:3f:fb:06:3b:96:a7:af:1e:7c:29:d8:7f:99:22: a9:63:fe:63:33:8f:fe:83:c7:91:0f:33:a4:1a:10:ef:cb:78: 6f:8f:d3:ca:86:45:c8:a5:49:44:80:ca:28:4a:de:38:3f:ac: 6e:aa:16:9d:3f:f9:ee:c8:13:9f:6c:4b:db:49:e8:ad:9d:73: 28:35:82:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538ZtmoKCQpuAkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MmRlZGRkNjMtMWZiNi00NzZmLThhYWEtOTFkNGM5MzEwMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJiNyBh00sXTvaYDhQgER+DB/t8UmFNeuRYK AZ7TZXLHzepf4tBJHg3jVUI1iL4vxAbuw+/gSHhFJAJFyRlmnE0RyFann4bGWH4i Fmee1X7Rl6TzSipCkzLRZA0AmALYSXg2SGnMrgN7i3hneIib/o7BFjtmsCzdDqRz j9YWlkU4JtFBs4iAILcgUH+d3KZaMpznyx7XXScbeS96P6Oo6wDFKY+YSsDIblNL V6PkSzPQUmR3ZoFLtxsMCFY5fDxdIgaMwO+iQWi6sgiRUakNtYcwDHaFVL8I0MqG v2qwHKRPN+/imOrXYGJLRPDBR0bnfpnKXq68n45PuJvCMoziNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1RcTItjhXaY/bEowrVO7GKoIOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvY2VhNmE0ZGItYjQ1Zi0z OGM4LWJhOTMtZGFiMzcwM2Q1NjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWL5ngln/nD71N90iHpgu6gwlwX0ZC+AmYCG9YoO6MIu3uofVSflRQt tXD8pV3Fh6wXAczbUTIHR0h9gbxVmnZ3EMkwAS4R4/Slpv0BknHJtt4AvX6DtBKZ SKwDwM41XJWKhI2GlpYow9AP046ZWeRhzamsij84pXXxLRhcWyHFvRWzkLN3idhc 1/mJQso/Isbi/HvfmLQfy6/8sWzpAHpRPMNTPsP5/q48WA6XpweiSdkPnbXWTBI/ +wY7lqevHnwp2H+ZIqlj/mMzj/6Dx5EPM6QaEO/LeG+P08qGRcilSUSAyihK3jg/ rG6qFp0/+e7IE59sS9tJ6K2dcyg1gkg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:38:16 2025 by rpki-client