$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa File: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (raw, json) Hash identifier: Y43GnukTszugTZNUg4is+SyshgGzRmzsJS2f1tA4i8g= Subject key identifier: C2:5C:C5:42:03:15:A3:9E:B8:C2:A7:DB:BA:32:05:E2:F5:8C:BD:D3 Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584A07D52A2724ABBBA0C7EE8B00 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 6579 IP address blocks: 192.75.24.0/24 maxlen: 24 192.219.31.0/24 maxlen: 24 208.85.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2a:27:24:ab:bb:a0:c7:ee:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=ef21bb51-8134-4679-9835-386d78893284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:6e:5f:33:34:5a:75:96:c9:c3:8c:6b:d3: 82:f5:46:31:76:b2:8e:1e:38:d8:fa:cf:65:55:44: 68:fd:64:cb:8b:5b:53:f5:b9:ed:1c:83:08:be:c2: 50:28:34:da:95:a0:74:4a:57:56:ce:5d:3d:6f:a8: da:93:f0:9f:1c:9c:3a:3d:6a:b5:b5:78:71:8a:15: a3:11:c0:1f:68:e1:3b:00:d7:72:46:c7:bc:57:d5: 70:86:b4:e3:bd:6c:10:45:cc:88:31:89:fb:d2:c1: 2a:d0:66:bf:c7:d7:0e:5a:db:12:06:52:59:8e:de: fa:25:2f:25:00:4d:86:9d:01:de:b7:33:a4:7b:e5: 9f:14:72:3e:e1:fe:28:6b:8f:c8:41:02:f6:0a:5e: 67:c5:aa:e3:00:3a:7a:83:53:4b:96:dd:98:07:0d: 8b:65:09:ed:b1:7f:36:37:f4:ac:76:47:d0:3b:81: 34:11:ab:6e:3f:0f:89:a9:bc:73:58:1d:30:ad:fd: 50:11:ce:fd:31:7e:0c:8c:6d:fc:b4:f9:38:51:4f: ac:78:ae:94:8f:b2:c4:55:d3:62:b7:dc:72:38:3e: 10:c7:00:63:f3:f4:d3:ef:ca:4f:78:d5:ca:af:57: 94:57:d9:f4:3e:69:f1:9a:c0:20:dd:42:39:2f:f5: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5C:C5:42:03:15:A3:9E:B8:C2:A7:DB:BA:32:05:E2:F5:8C:BD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: 192.75.24.0/24 192.219.31.0/24 208.85.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d0:cb:fa:f1:d9:07:01:21:15:39:05:1a:65:9f:7a:de:cf: 32:b7:e0:90:0b:e7:8f:f5:c3:cb:d4:2c:fb:78:14:d1:f5:71: 67:c5:a8:8a:e2:f6:44:35:6b:2c:8a:55:3b:68:8a:81:14:7c: 6a:dc:24:91:51:42:38:57:37:bd:1b:31:c7:62:56:d5:26:f2: 6b:bf:ba:9d:40:7e:32:e0:5c:8b:52:91:78:29:7b:a4:d4:5b: c5:7f:ba:1a:1c:86:13:0b:a3:1a:de:e8:03:3c:44:ba:b8:b9: 08:b2:a1:f8:a3:54:ca:60:b4:ef:a9:fe:df:eb:01:8b:3c:07: 23:1c:98:45:66:71:29:be:a3:a9:2b:9e:24:90:a7:df:13:f1: 94:90:9a:84:20:43:57:af:72:5a:34:34:1e:a9:6e:49:89:c8: 00:2d:c0:7e:99:4b:e3:cc:8a:54:20:ec:96:92:23:39:8b:72: ae:08:7d:7a:ef:f8:70:27:39:e7:2e:5d:dd:cc:94:4a:59:93: af:dc:6f:b2:19:17:32:c0:80:d3:4f:03:c2:20:75:06:21:39: 92:f6:02:f8:ea:ba:08:8b:7e:8e:0b:a2:d2:79:bc:4a:aa:bf: d5:1a:93:c0:3f:57:fc:f3:88:01:e1:a9:00:fa:c1:4d:04:c8: 2b:32:9e:19 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEoH1SonJKu7oMfuiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWYyMWJiNTEtODEzNC00Njc5LTk4MzUtMzg2ZDc4ODkzMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsRuXzM0WnWWycOMa9OC9UYxdrKOHjjY+s9l VURo/WTLi1tT9bntHIMIvsJQKDTalaB0SldWzl09b6jak/CfHJw6PWq1tXhxihWj EcAfaOE7ANdyRse8V9VwhrTjvWwQRcyIMYn70sEq0Ga/x9cOWtsSBlJZjt76JS8l AE2GnQHetzOke+WfFHI+4f4oa4/IQQL2Cl5nxarjADp6g1NLlt2YBw2LZQntsX82 N/SsdkfQO4E0EatuPw+JqbxzWB0wrf1QEc79MX4MjG38tPk4UU+seK6Uj7LEVdNi t9xyOD4QxwBj8/TT78pPeNXKr1eUV9n0PmnxmsAg3UI5L/X2WwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMJcxUIDFaOeuMKn27oyBeL1jL3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvNmZhODAxZTMtMzM0Mi0z ZjFjLWEzOTYtNmY5MjAxYzBkNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwEsYAwQA wNsfAwQC0FVQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACTQy/rx2QcBIRU5BRpln3rezzK34JAL54/1w8vU LPt4FNH1cWfFqIri9kQ1ayyKVTtoioEUfGrcJJFRQjhXN70bMcdiVtUm8mu/up1A fjLgXItSkXgpe6TUW8V/uhochhMLoxre6AM8RLq4uQiyofijVMpgtO+p/t/rAYs8 ByMcmEVmcSm+o6krniSQp98T8ZSQmoQgQ1evclo0NB6pbkmJyAAtwH6ZS+PMilQg 7JaSIzmLcq4IfXrv+HAnOecuXd3MlEpZk6/cb7IZFzLAgNNPA8IgdQYhOZL2Avjq ugiLfo4LotJ5vEqqv9Uak8A/V/zziAHhqQD6wU0EyCsynhk= -----END CERTIFICATE-----Generated at Mon Jun 16 03:22:38 2025 by rpki-client