$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa File: 1d5b64a0-14ba-398c-be22-b579612157ce.roa (raw, json) Hash identifier: vfbZ59515Cg2a5yEbxjjStK5rDMt9in2hkIrQWtRPE8= Subject key identifier: 76:9D:A8:3C:6F:C0:1B:FB:97:8D:C9:11:75:BC:F0:8B:31:22:1B:CA Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A1B600322167AC031BDC6F200 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 21949 IP address blocks: 199.167.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:03:22:16:7a:c0:31:bd:c6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=db3fe67c-0e13-49fc-a8ac-3686d533f5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:ab:37:8e:14:3f:72:e3:2e:ef:cd:0a:c2: 3c:34:f5:51:b8:d5:11:c3:ea:c2:b2:22:79:7d:82: a7:7e:e2:ca:37:68:a3:9e:7f:78:fa:a7:2a:f9:41: 49:cd:8b:0e:12:5b:0a:d6:2b:2c:4e:69:1f:60:83: ba:20:b3:96:01:e6:6f:aa:06:77:72:a0:c0:58:3a: c3:b3:c3:47:ed:28:f5:89:a0:98:9c:94:3c:cc:96: e4:68:68:e6:da:01:ff:9e:68:36:13:71:dd:de:c4: 60:e5:d9:f6:72:c4:b6:a5:d9:b7:dc:f1:13:c2:03: 71:cb:f0:48:fa:cf:54:03:42:be:34:05:1b:44:63: c7:6f:27:29:4d:01:7b:89:01:ef:fd:60:53:0d:71: 06:4f:6d:16:e6:49:31:b2:ba:66:7d:a1:d6:e3:96: 50:70:12:11:8a:8f:b1:1e:7d:78:4c:aa:77:30:e5: 7f:a6:b5:c0:01:d9:57:cc:f5:9e:15:a1:a3:5d:a9: 29:c2:4b:99:3f:9f:bf:90:cd:9a:2f:4d:4f:bf:14: eb:2f:8c:83:bb:aa:95:85:9b:91:1e:d5:20:b5:8e: f7:75:6e:6a:b2:30:96:d0:fb:2a:73:89:e1:85:c3: ef:32:77:c6:d8:70:21:af:60:94:51:f1:3a:fe:26: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9D:A8:3C:6F:C0:1B:FB:97:8D:C9:11:75:BC:F0:8B:31:22:1B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.167.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3a:93:7c:64:67:30:50:96:8e:4e:e1:b7:87:c5:71:ff:f1: fc:2c:a5:54:a1:46:25:f4:24:79:31:5b:8e:0f:8b:a9:89:95: db:ee:96:02:36:78:89:73:61:3e:97:ac:e3:9e:ba:e6:fd:a6: 43:c1:c2:6b:9c:b4:8a:98:12:7c:db:b5:ab:98:f6:88:85:05: b2:56:6e:0b:50:3b:0e:13:ef:f1:58:ec:ef:12:84:cc:0a:07: cb:2c:32:dc:7d:e6:b1:7c:3c:45:79:b0:f9:49:38:5b:f4:e7: 1e:b6:c4:df:81:ce:bb:21:60:dd:93:2f:7d:f1:70:86:b6:65: 19:4f:21:6d:dc:09:76:5d:4b:79:b4:e4:e5:75:d2:a0:4b:98: 37:40:61:7c:8a:4d:f7:f6:0b:1a:a8:35:1d:6e:e1:93:0f:43: f5:af:5b:bf:6d:b3:cf:f7:97:6c:78:d9:3c:f9:b1:19:f5:12: 99:b4:e8:7d:2b:20:3c:8d:77:c7:6a:7b:f5:f4:8a:6e:be:e8: 40:aa:cc:44:3c:f5:c3:62:bf:56:40:b3:41:c7:c1:31:53:0f: 8f:73:d7:ab:89:d9:1d:b6:61:58:27:be:45:08:88:35:d5:74: d0:55:9a:1a:73:1b:37:2b:7d:22:95:8c:7a:61:6c:e9:1e:7d: 4c:78:bd:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAMiFnrAMb3G8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZGIzZmU2N2MtMGUxMy00OWZjLWE4YWMtMzY4NmQ1MzNmNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllerN44UP3LjLu/NCsI8NPVRuNURw+rCsiJ5 fYKnfuLKN2ijnn94+qcq+UFJzYsOElsK1issTmkfYIO6ILOWAeZvqgZ3cqDAWDrD s8NH7Sj1iaCYnJQ8zJbkaGjm2gH/nmg2E3Hd3sRg5dn2csS2pdm33PETwgNxy/BI +s9UA0K+NAUbRGPHbycpTQF7iQHv/WBTDXEGT20W5kkxsrpmfaHW45ZQcBIRio+x Hn14TKp3MOV/prXAAdlXzPWeFaGjXakpwkuZP5+/kM2aL01PvxTrL4yDu6qVhZuR HtUgtY73dW5qsjCW0Psqc4nhhcPvMnfG2HAhr2CUUfE6/iZYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHadqDxvwBv7l43JEXW88IsxIhvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWQ1YjY0YTAtMTRiYS0z OThjLWJlMjItYjU3OTYxMjE1N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI86k3xkZzBQlo5O4beHxXH/8fwspVShRiX0JHkxW44Pi6mJldvulgI2 eIlzYT6XrOOeuub9pkPBwmuctIqYEnzbtauY9oiFBbJWbgtQOw4T7/FY7O8ShMwK B8ssMtx95rF8PEV5sPlJOFv05x62xN+BzrshYN2TL33xcIa2ZRlPIW3cCXZdS3m0 5OV10qBLmDdAYXyKTff2CxqoNR1u4ZMPQ/WvW79ts8/3l2x42Tz5sRn1Epm06H0r IDyNd8dqe/X0im6+6ECqzEQ89cNiv1ZAs0HHwTFTD49z16uJ2R22YVgnvkUIiDXV dNBVmhpzGzcrfSKVjHphbOkefUx4vUY= -----END CERTIFICATE-----Generated at Mon Jun 16 16:54:49 2025 by rpki-client