$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa File: a6d9c75c-5577-314d-80e9-b351715ba777.roa (raw, json) Hash identifier: l1mC8gY/MRpgPpBEjLwermK03oE+6dcE8YuZCR4vf28= Subject key identifier: F8:3B:BD:77:60:CA:CD:25:08:AB:52:63:68:98:BA:7D:CF:50:42:4C Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285849ED4FCBE2EF14B38798A53F80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 13926 IP address blocks: 192.200.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cb:e2:ef:14:b3:87:98:a5:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=3cd37311-acb9-45c7-85d5-046f2c5c2ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:4e:97:e1:1d:4a:f2:9c:d4:a2:f8:3c:75: c5:64:fa:5e:6d:e5:60:6c:03:01:bb:4a:99:25:03: 64:23:fe:06:e8:c8:c4:99:a0:8d:ab:ac:b1:07:59: 19:81:33:5e:1a:e4:1d:f8:44:e1:c4:11:f3:75:7e: 1e:1b:5f:b6:7d:e5:91:a4:71:66:d3:a7:78:29:0c: bf:4d:b5:be:8b:4b:12:b4:5a:f1:8b:79:11:6b:ea: d4:52:a9:e0:16:de:d6:41:14:a4:43:d9:60:00:27: a7:11:b1:2f:27:e7:53:32:d0:1d:a8:ea:4d:b3:4a: 5d:d9:30:17:86:f8:fb:e8:b2:8a:2c:13:cd:58:09: ad:6d:32:0c:3d:30:b4:07:18:a2:1e:6f:b5:2c:69: 4f:b8:47:be:7e:cb:3a:be:b9:b2:d4:8a:dd:be:b2: ea:ce:a0:88:0a:9a:17:d2:29:3e:08:bd:e3:d5:3a: ef:9d:6a:80:ea:89:5d:72:d9:da:9b:dd:c8:f3:dc: 6d:09:86:88:7d:c3:81:ea:53:a5:60:b6:48:7c:4e: 15:b7:0a:21:e9:1d:a9:b7:79:7d:82:63:76:74:0d: ea:1b:cf:ef:eb:56:c1:72:45:48:24:8e:7a:a7:31: 00:88:03:2b:4c:31:64:fb:9a:62:1f:21:fe:11:a1: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3B:BD:77:60:CA:CD:25:08:AB:52:63:68:98:BA:7D:CF:50:42:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 192.200.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a7:fd:bc:53:f4:89:c9:ed:03:ca:59:5f:52:cd:fd:dd:eb: b7:85:0c:c0:c1:c3:bc:f0:8e:7b:68:1c:e1:f3:33:49:73:dc: 8d:e9:3a:f0:3a:de:d1:dc:45:ce:eb:31:92:b5:38:75:0a:92: dc:b6:7b:de:f4:13:00:99:ee:d2:78:7d:cb:a1:b8:e4:5b:d5: 11:dd:8e:cd:9e:ca:43:8e:d0:65:33:1f:19:6c:f1:87:10:99: 1f:67:db:e0:ed:df:70:db:c8:3c:52:1a:60:18:f1:98:18:6d: 20:7f:c7:05:bb:e8:0e:61:4c:c6:14:b5:e8:e5:cb:34:85:08: 17:b2:5c:b4:b7:69:d2:fa:7f:ed:f0:90:2c:5b:0b:89:10:4f: af:af:ae:99:6d:5d:61:b6:34:47:6d:c6:21:86:6c:2c:30:b5: f1:18:e1:b5:32:d4:cc:93:c6:e4:dd:dd:8e:41:19:c3:41:ec: 91:76:13:13:8d:83:b3:ed:2c:9c:62:7f:aa:86:55:64:aa:f3: 65:e0:82:64:30:19:5f:8c:76:be:d4:8c:d5:a6:34:fe:ed:5c: e6:a4:18:b0:ec:ac:3f:fa:ea:92:98:d1:a3:08:cd:22:ad:27: 04:ab:ae:42:69:2b:37:be:b7:6d:91:3e:a2:63:1a:32:3d:3e: 53:a1:10:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8vi7xSzh5ilP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk M2NkMzczMTEtYWNiOS00NWM3LTg1ZDUtMDQ2ZjJjNWMyZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm75Ol+EdSvKc1KL4PHXFZPpebeVgbAMBu0qZ JQNkI/4G6MjEmaCNq6yxB1kZgTNeGuQd+EThxBHzdX4eG1+2feWRpHFm06d4KQy/ TbW+i0sStFrxi3kRa+rUUqngFt7WQRSkQ9lgACenEbEvJ+dTMtAdqOpNs0pd2TAX hvj76LKKLBPNWAmtbTIMPTC0BxiiHm+1LGlPuEe+fss6vrmy1IrdvrLqzqCICpoX 0ik+CL3j1TrvnWqA6oldctnam93I89xtCYaIfcOB6lOlYLZIfE4Vtwoh6R2pt3l9 gmN2dA3qG8/v61bBckVIJI56pzEAiAMrTDFk+5piHyH+EaHl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg7vXdgys0lCKtSY2iYun3PUEJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYTZkOWM3NWMtNTU3Ny0z MTRkLTgwZTktYjM1MTcxNWJhNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6n/bxT9InJ7QPKWV9Szf3d67eFDMDBw7zwjntoHOHzM0lz3I3pOvA6 3tHcRc7rMZK1OHUKkty2e970EwCZ7tJ4fcuhuORb1RHdjs2eykOO0GUzHxls8YcQ mR9n2+Dt33DbyDxSGmAY8ZgYbSB/xwW76A5hTMYUtejlyzSFCBeyXLS3adL6f+3w kCxbC4kQT6+vrpltXWG2NEdtxiGGbCwwtfEY4bUy1MyTxuTd3Y5BGcNB7JF2ExON g7PtLJxif6qGVWSq82XggmQwGV+Mdr7UjNWmNP7tXOakGLDsrD/66pKY0aMIzSKt JwSrrkJpKze+t22RPqJjGjI9PlOhEN0= -----END CERTIFICATE-----Generated at Wed Jun 18 03:03:42 2025 by rpki-client