$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e8b1a2de-db29-3c0e-843b-2204be6c7077.roa File: e8b1a2de-db29-3c0e-843b-2204be6c7077.roa (raw, json) Hash identifier: URjo5XpQbXCvlvlDxM2PAOWQP3TFXVRKwsEv4vLP1rg= Subject key identifier: 51:45:3D:A1:D2:97:94:73:28:22:EA:E2:C3:9F:71:E1:15:D8:27:48 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584A074AC5118A00B9FB62D4FCA0 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e8b1a2de-db29-3c0e-843b-2204be6c7077.roa Signing time: Fri 30 May 2025 20:22:04 +0000 ROA not before: Fri 30 May 2025 20:22:04 +0000 ROA not after: Thu 28 Aug 2025 20:22:04 +0000 asID: 174 IP address blocks: 206.228.112.0/21 maxlen: 24 207.13.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:4a:c5:11:8a:00:b9:fb:62:d4:fc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 30 20:22:04 2025 GMT Not After : Aug 28 20:22:04 2025 GMT Subject: CN=0ea198b0-c45b-44cd-8db7-81d8c56f5474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:62:13:81:58:b4:9b:60:a3:ef:bb:8f:dd: f4:27:a1:52:4a:8c:bd:0a:4f:25:24:7b:dc:b0:b3: 81:63:bf:65:4f:eb:0b:3d:15:cd:a6:60:17:10:a7: 05:b0:3d:69:1c:54:29:19:2b:43:10:3c:a5:1a:90: c7:86:3f:19:3b:a7:a2:14:91:40:d3:db:ae:bf:44: 79:a6:a7:49:2c:6e:90:f0:d4:a1:38:ad:dd:21:8e: b7:98:0e:af:b1:e2:00:65:6e:51:1f:b6:49:f6:38: 91:c9:9f:17:f1:e7:16:07:2a:be:07:91:34:9c:95: fb:81:39:6b:5a:37:4a:7b:ab:72:a4:29:0a:99:63: 51:29:9e:99:2c:ec:29:c4:fe:9d:4d:31:39:da:83: 09:e1:11:37:a4:53:72:dc:8d:87:ce:75:66:a9:09: d0:c1:7a:91:5c:78:f5:07:cb:b7:ea:4e:8a:19:e3: e2:f4:94:fd:aa:15:1d:15:4e:ad:fa:85:f6:3c:94: 43:8d:7e:46:34:6f:47:6f:1f:8a:03:be:22:11:39: db:10:63:58:47:c6:e1:a7:3e:f2:70:8f:f3:38:e4: f6:86:e3:7b:3d:f2:c9:22:0f:b2:77:75:e4:2b:72: 64:9e:9b:4c:43:5a:1d:e3:fa:8c:2d:66:48:43:cf: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:45:3D:A1:D2:97:94:73:28:22:EA:E2:C3:9F:71:E1:15:D8:27:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e8b1a2de-db29-3c0e-843b-2204be6c7077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 206.228.112.0/21 207.13.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d4:2d:b1:7f:4f:5c:19:e3:57:e9:7c:66:09:90:82:03:c3: 6f:62:e5:c4:a4:54:fe:7f:17:59:02:ce:1f:2d:92:d4:f4:fc: 04:43:c1:98:01:18:0b:bb:f2:0a:54:cc:77:c8:06:ff:75:99: 17:d4:25:bb:18:7a:7e:96:9b:48:c5:b3:ba:63:92:ab:49:99: 72:71:d3:ec:02:1c:19:1c:82:dc:6b:dc:72:fe:45:89:80:91: c2:48:65:ad:37:34:23:55:d2:d6:95:f5:b6:39:b6:b2:a8:a5: 1c:01:34:95:89:48:08:4a:c3:a7:64:37:00:65:15:3b:11:12: cf:37:46:08:ca:82:74:95:9c:07:7d:55:ef:e1:1c:ea:b5:6b: 80:c6:c0:db:a1:24:af:b6:0d:ac:ca:df:0c:3a:0f:e1:74:41: db:48:06:6a:14:75:d5:61:8a:f4:1d:8a:db:73:93:b6:e8:a4: 8c:94:78:20:52:dc:a0:5f:47:45:49:17:6f:7e:cf:66:09:df: d2:f1:a8:3c:25:1a:f7:51:69:c0:1f:95:69:52:6b:59:25:80: 49:21:d3:9b:d6:a2:05:9c:1f:02:00:86:7c:30:75:e2:17:43: 5d:72:94:86:83:9f:38:44:79:a6:bc:d6:aa:fd:36:36:d2:b5: 2c:91:86:37 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoHSsURigC5+2LU/KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDUzMDIwMjIwNFoXDTI1MDgyODIwMjIwNFowLzEtMCsGA1UEAxMk MGVhMTk4YjAtYzQ1Yi00NGNkLThkYjctODFkOGM1NmY1NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2piE4FYtJtgo++7j930J6FSSoy9Ck8lJHvc sLOBY79lT+sLPRXNpmAXEKcFsD1pHFQpGStDEDylGpDHhj8ZO6eiFJFA09uuv0R5 pqdJLG6Q8NShOK3dIY63mA6vseIAZW5RH7ZJ9jiRyZ8X8ecWByq+B5E0nJX7gTlr WjdKe6typCkKmWNRKZ6ZLOwpxP6dTTE52oMJ4RE3pFNy3I2HznVmqQnQwXqRXHj1 B8u36k6KGePi9JT9qhUdFU6t+oX2PJRDjX5GNG9Hbx+KA74iETnbEGNYR8bhpz7y cI/zOOT2huN7PfLJIg+yd3XkK3JknptMQ1od4/qMLWZIQ89WaQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFFFPaHSl5RzKCLq4sOfceEV2CdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZThiMWEyZGUtZGIyOS0z YzBlLTg0M2ItMjIwNGJlNmM3MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDzuRwAwQA zw3HMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH3ULbF/T1wZ41fpfGYJkIIDw29i5cSkVP5/F1kCzh8tktT0 /ARDwZgBGAu78gpUzHfIBv91mRfUJbsYen6Wm0jFs7pjkqtJmXJx0+wCHBkcgtxr 3HL+RYmAkcJIZa03NCNV0taV9bY5trKopRwBNJWJSAhKw6dkNwBlFTsREs83RgjK gnSVnAd9Ve/hHOq1a4DGwNuhJK+2DazK3ww6D+F0QdtIBmoUddVhivQdittzk7bo pIyUeCBS3KBfR0VJF29+z2YJ39LxqDwlGvdRacAflWlSa1klgEkh05vWogWcHwIA hnwwdeIXQ11ylIaDnzhEeaa81qr9NjbStSyRhjc= -----END CERTIFICATE-----Generated at Sun Jun 15 16:50:23 2025 by rpki-client