$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/dd353f43-84b3-38d4-9bb0-3c74c9e62184.roa File: dd353f43-84b3-38d4-9bb0-3c74c9e62184.roa (raw, json) Hash identifier: 4lfp00CVSN1u5tZbhkJ+xKh3t/aeRkYKylB55vhmDKU= Subject key identifier: 5E:C2:E2:2C:8B:5F:59:F0:8F:91:BF:9B:FE:48:8F:23:FC:57:AF:B5 Certificate issuer: /CN=7d31536a-f667-4473-abbf-040b249fa39f Certificate serial: 010D0C9F43285849F7151A026116A287D7A52A00 Authority key identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/dd353f43-84b3-38d4-9bb0-3c74c9e62184.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 216164 IP address blocks: 216.73.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:1a:02:61:16:a2:87:d7:a5:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d31536a-f667-4473-abbf-040b249fa39f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=4427c20f-0bd2-4ac3-aa3c-1e7875676f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:e9:87:a7:4e:d0:95:e3:9e:80:4b:8a:d8: 49:f2:5a:1d:75:ff:93:e5:51:85:d4:a9:5e:b9:e7: 57:da:a1:82:61:2a:15:93:6e:ee:68:d0:75:a9:9d: 24:06:27:d1:0e:18:be:88:13:0a:b7:96:4d:22:83: 64:6a:30:b1:6d:78:6a:21:59:a7:32:e2:61:93:12: 21:5d:c7:91:d9:32:23:99:0e:f0:d6:63:18:1c:bd: cb:08:65:e6:ac:b6:f1:d4:9c:98:fa:ed:62:bf:92: 1e:6a:3a:80:dc:a1:44:d4:06:e1:1d:90:32:c9:af: 87:2f:18:6a:6c:58:f7:ef:28:6a:0e:0f:1d:3b:1d: 42:88:0a:37:1b:ea:be:c7:22:cc:74:cd:01:07:43: ae:06:bf:86:ec:02:9c:68:aa:fe:42:bd:0c:1c:82: 76:fa:19:3f:be:c3:2a:b0:a0:46:a4:3c:63:61:b0: 01:8b:39:d6:d0:66:19:5d:be:de:0a:77:a8:13:cd: 64:1c:17:1c:66:18:91:91:8e:b5:96:ec:98:64:96: 4a:3b:b7:9b:86:18:87:df:ca:50:ba:18:93:8d:ec: 46:4a:bc:04:b2:e1:32:97:92:8e:db:79:fc:63:d4: 4f:ec:64:c1:19:d7:b2:62:ca:96:60:b9:6a:a1:54: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C2:E2:2C:8B:5F:59:F0:8F:91:BF:9B:FE:48:8F:23:FC:57:AF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/dd353f43-84b3-38d4-9bb0-3c74c9e62184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl X509v3 Authority Key Identifier: keyid:D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer sbgp-ipAddrBlock: critical IPv4: 216.73.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1d:36:8d:85:1d:b4:40:f3:5b:1b:52:ec:93:67:75:85:d3: eb:2b:13:bf:8e:36:3d:8d:8c:15:76:39:1d:2a:6a:32:4e:71: a9:ce:6b:0d:33:4b:32:46:4f:94:ea:bc:ad:ac:5c:ef:e5:39: d1:09:b5:4f:7c:b9:ed:f3:ea:a6:09:4a:a5:3d:80:97:b7:d7: c4:ef:43:b1:ec:81:a8:5c:d7:7d:8a:4e:ee:cd:c6:50:5f:aa: be:b3:f8:b6:9f:51:a7:c9:52:37:77:18:e8:bf:ac:0a:d2:b8: ea:f7:6d:3c:5f:17:99:5c:49:65:1a:22:25:d2:22:2f:51:51: f7:3c:a2:7f:a9:15:5f:d8:d9:64:8d:7d:85:14:1f:40:6b:4d: 30:ce:95:4b:ee:eb:89:72:53:73:3e:32:09:75:7a:6f:db:5e: bb:9c:5a:47:c0:69:d4:50:7f:f4:d6:56:fa:11:09:a4:31:13: e1:8f:6e:c3:54:86:1a:19:c1:f7:b8:e3:2d:da:a8:28:75:d2: f6:5a:f6:14:6d:eb:44:2d:60:7e:57:3e:bd:45:2f:53:f6:7b: 3e:96:a2:6a:49:ee:b0:a4:6f:6d:98:65:ef:e0:eb:b4:65:a6: 87:6a:dc:40:1b:96:13:21:73:4b:3f:f5:f8:be:39:bd:dc:a5: 9e:d5:8d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRoCYRaih9elKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QzMTUzNmEtZjY2Ny00NDczLWFiYmYtMDQwYjI0OWZh MzlmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NDQyN2MyMGYtMGJkMi00YWMzLWFhM2MtMWU3ODc1Njc2ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKfph6dO0JXjnoBLithJ8loddf+T5VGF1Kle uedX2qGCYSoVk27uaNB1qZ0kBifRDhi+iBMKt5ZNIoNkajCxbXhqIVmnMuJhkxIh XceR2TIjmQ7w1mMYHL3LCGXmrLbx1JyY+u1iv5IeajqA3KFE1AbhHZAyya+HLxhq bFj37yhqDg8dOx1CiAo3G+q+xyLMdM0BB0OuBr+G7AKcaKr+Qr0MHIJ2+hk/vsMq sKBGpDxjYbABiznW0GYZXb7eCneoE81kHBccZhiRkY61luyYZJZKO7ebhhiH38pQ uhiTjexGSrwEsuEyl5KO23n8Y9RP7GTBGdeyYsqWYLlqoVS/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7C4iyLX1nwj5G/m/5IjyP8V6+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZDMx NTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBiMjQ5ZmEzOWYvZGQzNTNmNDMtODRiMy0z OGQ0LTliYjAtM2M3NGM5ZTYyMTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2QzMTUzNmEtZjY2Ny00NDczLWFi YmYtMDQwYjI0OWZhMzlmLzdkMzE1MzZhLWY2NjctNDQ3My1hYmJmLTA0MGIyNDlm YTM5Zi5jcmwwHwYDVR0jBBgwFoAU0tIApymGnDfXKvUTWR9UiOfoZbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZDMxNTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBi MjQ5ZmEzOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2EmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYdNo2FHbRA81sbUuyTZ3WF0+srE7+ONj2NjBV2OR0qajJOcanOaw0z SzJGT5TqvK2sXO/lOdEJtU98ue3z6qYJSqU9gJe318TvQ7Hsgahc132KTu7NxlBf qr6z+LafUafJUjd3GOi/rArSuOr3bTxfF5lcSWUaIiXSIi9RUfc8on+pFV/Y2WSN fYUUH0BrTTDOlUvu64lyU3M+Mgl1em/bXrucWkfAadRQf/TWVvoRCaQxE+GPbsNU hhoZwfe44y3aqCh10vZa9hRt60QtYH5XPr1FL1P2ez6WompJ7rCkb22YZe/g67Rl podq3EAblhMhc0s/9fi+Ob3cpZ7VjdE= -----END CERTIFICATE-----Generated at Tue Jun 17 13:46:18 2025 by rpki-client