$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa File: ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa (raw, json) Hash identifier: CRasZp/oyn1DwqWCL4qfoEWGyilu4yrU8s38/DOzwiM= Subject key identifier: C5:A4:E6:A7:91:03:59:DB:B2:16:9A:5B:5D:EF:A9:5F:29:9F:19:91 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F43285849DF5A77CE6CA63DD722F0F390 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 209854 IP address blocks: 216.158.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:77:ce:6c:a6:3d:d7:22:f0:f3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=64cf9fbb-3586-4605-95c3-ef04f911fbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:a6:98:3c:ca:32:54:db:d2:83:29:e8:02: bb:08:70:c7:ae:2c:48:49:69:11:0d:4d:8a:0d:1c: ba:47:f5:1e:d8:89:da:37:2d:33:08:00:b0:57:1c: 73:2e:cb:96:70:f2:fd:ca:39:f9:ad:ec:f0:d7:8a: 40:fc:d0:b7:f0:9e:6f:18:06:73:0d:84:64:85:e0: 9a:63:72:5b:ec:8b:e6:61:cd:b4:88:16:0b:01:4e: e6:4e:1d:ca:25:a8:ed:99:d9:a7:6c:f5:88:95:c1: a0:e6:1f:3a:2c:23:2f:5b:e3:24:09:4a:f3:69:d8: 33:a6:bc:48:a1:66:65:4e:eb:b8:08:6a:51:60:fd: a9:b2:74:eb:ee:a6:27:67:a6:87:12:0d:12:7c:cb: 85:65:42:b8:ed:29:96:93:af:05:d9:5b:e3:59:e7: 71:e9:75:e3:87:62:1e:86:b3:31:88:9b:50:47:ca: d4:2f:f5:76:ae:6c:41:6e:ce:71:19:2a:2d:60:90: 6e:d1:94:37:82:69:aa:9b:ee:c3:4b:5d:26:d9:d5: 14:bb:ff:e3:1a:2b:ad:2c:31:1a:db:ab:a2:01:d7: 61:c8:07:43:3b:9e:d4:12:5a:85:b9:d3:6b:35:f8: 9d:9e:2e:07:9b:4e:a5:f8:ed:99:3a:de:e2:d8:53: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A4:E6:A7:91:03:59:DB:B2:16:9A:5B:5D:EF:A9:5F:29:9F:19:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2c:46:6f:03:41:d8:d7:d0:23:57:d7:ea:de:75:05:9b:96: 68:f6:79:ae:d8:d8:78:43:76:44:25:bd:f4:88:78:98:7f:4d: c2:28:c9:56:9c:67:85:35:8f:d0:9e:67:6a:a5:ca:9b:60:ed: d0:f1:2d:64:4e:3e:e0:66:33:46:81:07:7d:9b:24:15:ee:a0: 1a:a6:7a:43:74:d5:40:d0:a7:92:49:09:d6:89:69:31:82:cc: b8:ad:95:c1:bb:6f:0c:bf:69:01:e3:ab:ae:f8:20:98:95:8e: 42:da:61:d9:82:d8:ca:61:77:c4:34:45:c2:54:cf:70:5b:85: 72:7c:11:f6:3c:26:bb:28:25:1e:05:bc:a5:6e:b1:e2:b9:fd: 51:9f:46:af:df:8e:11:2e:ce:40:0c:30:5c:58:88:ad:2d:d3: 38:20:82:35:ba:e6:27:ed:9e:39:61:b7:eb:2a:f6:21:33:1c: 06:32:7c:63:24:1f:61:c9:a2:67:d8:5c:63:e9:c7:4c:da:29: b4:c3:49:ca:62:8d:ae:4a:e8:e6:e1:64:a3:18:1d:43:0b:12: 21:a0:f7:37:36:b7:fe:a8:a6:9d:ec:70:fe:5d:66:a4:eb:5f: f3:d0:4b:79:7e:54:ef:dc:75:75:ec:43:5b:00:bb:f7:3c:84: 3d:3f:4f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnfObKY91yLw85AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjRjZjlmYmItMzU4Ni00NjA1LTk1YzMtZWYwNGY5MTFmYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGCmmDzKMlTb0oMp6AK7CHDHrixISWkRDU2K DRy6R/Ue2InaNy0zCACwVxxzLsuWcPL9yjn5rezw14pA/NC38J5vGAZzDYRkheCa Y3Jb7IvmYc20iBYLAU7mTh3KJajtmdmnbPWIlcGg5h86LCMvW+MkCUrzadgzprxI oWZlTuu4CGpRYP2psnTr7qYnZ6aHEg0SfMuFZUK47SmWk68F2VvjWedx6XXjh2Ie hrMxiJtQR8rUL/V2rmxBbs5xGSotYJBu0ZQ3gmmqm+7DS10m2dUUu//jGiutLDEa 26uiAddhyAdDO57UElqFudNrNfidni4Hm06l+O2ZOt7i2FM9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWk5qeRA1nbshaaW13vqV8pnxmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZWJlYjBjMmYtZDRlMi0z NmEwLWI5MjMtMTY2NmFiMzNjNDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEsRm8DQdjX0CNX1+redQWblmj2ea7Y2HhDdkQlvfSIeJh/TcIoyVac Z4U1j9CeZ2qlyptg7dDxLWROPuBmM0aBB32bJBXuoBqmekN01UDQp5JJCdaJaTGC zLitlcG7bwy/aQHjq674IJiVjkLaYdmC2Mphd8Q0RcJUz3BbhXJ8EfY8JrsoJR4F vKVuseK5/VGfRq/fjhEuzkAMMFxYiK0t0zgggjW65iftnjlht+sq9iEzHAYyfGMk H2HJomfYXGPpx0zaKbTDScpija5K6ObhZKMYHUMLEiGg9zc2t/6opp3scP5dZqTr X/PQS3l+VO/cdXXsQ1sAu/c8hD0/T0A= -----END CERTIFICATE-----Generated at Sun Jun 15 05:17:53 2025 by rpki-client