$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa File: 9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa (raw, json) Hash identifier: eqnRmbwXoLosmTv3hlyd2E/lrJF/LtzwcJ1hBlxY4ws= Subject key identifier: 48:BE:AA:21:6D:6F:DB:36:8E:18:13:18:C1:12:E8:F8:6F:AA:73:6E Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584A82AB4D1712F902192FFA1D80 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 54840 IP address blocks: 192.30.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4d:17:12:f9:02:19:2f:fa:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=c13c3aef-0165-4094-be1d-438fad250fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fd:f8:37:51:87:8c:7b:b8:29:df:c3:06:b1: 19:99:0f:47:19:6b:84:5b:4f:14:fd:d0:41:0a:6e: 55:56:9a:27:52:63:16:59:b3:2b:94:85:31:f9:35: bc:3c:3e:15:8d:a4:8e:c3:12:1b:73:5f:47:7b:ed: 5f:a8:f0:b4:6e:6e:40:9e:89:39:66:63:4f:65:10: 55:51:eb:18:54:92:7c:dd:15:7c:16:19:45:26:b7: 89:c1:3d:a5:a9:9c:3b:ce:23:38:2b:d3:d8:83:7e: b3:59:b7:fc:72:45:79:4e:29:28:58:03:eb:20:e8: 04:3e:87:b7:7b:f7:d5:d4:a4:a4:7f:a8:4a:09:f7: cd:f8:eb:f1:f0:e0:2e:65:c2:d9:1f:30:d1:63:33: b1:80:28:fb:19:cb:7d:b1:7f:80:26:4d:69:76:41: 41:96:dd:6d:5c:f6:a3:d6:05:10:c9:eb:81:f1:1f: b2:54:38:48:20:cc:75:41:f1:31:ef:89:c6:a7:4c: 79:ca:9a:8a:d8:de:71:6f:b2:0f:d8:eb:62:7b:fd: 5e:ca:9c:e9:0a:1e:73:8e:32:b6:7f:ea:8b:47:bc: 37:2e:35:73:91:c1:1d:3a:91:a7:85:1a:ae:96:e7: 85:dc:43:e8:e5:bd:90:3e:33:62:da:44:c3:87:0f: df:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:AA:21:6D:6F:DB:36:8E:18:13:18:C1:12:E8:F8:6F:AA:73:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2b:a6:59:fa:db:de:f3:b2:34:dc:83:ca:24:86:e2:d9:df: 9e:a3:91:8b:e6:97:94:00:1d:a8:9b:51:97:a8:47:2d:95:fa: d2:ff:66:77:d3:17:b5:9b:e7:ea:40:ae:66:2c:d9:4d:47:99: bf:f5:27:bb:e5:68:57:25:26:60:f7:25:18:10:c0:90:80:a0: d3:d6:69:38:91:d3:77:76:77:4f:62:27:31:9f:a5:f9:cc:22: bf:5b:cc:5c:03:7f:95:1b:14:b0:c4:73:01:eb:dc:79:1d:e4: 8b:05:7b:65:f5:76:50:17:4f:10:ef:8b:f6:d2:1b:5c:08:2c: f7:80:6f:6b:9a:b6:33:54:8c:13:25:b3:2e:e8:ca:1f:5b:72: 47:79:44:d6:38:2f:d8:74:f0:3a:c6:1b:32:39:b1:b2:27:6c: 9c:0d:b0:cd:9d:dd:a7:a2:0c:22:65:9d:42:8e:56:a1:a9:3d: fd:98:4c:3d:7c:b5:1e:58:68:11:51:e0:3e:bd:ff:e0:f2:de: 15:a5:e4:75:ae:c5:de:b4:6e:7b:0e:aa:3c:76:af:be:ae:2b: 0c:2e:8d:7e:74:07:5e:cc:61:0c:18:86:3c:0b:d8:4e:4d:82: a2:1c:3a:ae:9a:12:e8:d0:41:38:7a:d2:e0:f4:14:51:64:98: e5:66:b7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq00XEvkCGS/6HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk YzEzYzNhZWYtMDE2NS00MDk0LWJlMWQtNDM4ZmFkMjUwZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/34N1GHjHu4Kd/DBrEZmQ9HGWuEW08U/dBB Cm5VVponUmMWWbMrlIUx+TW8PD4VjaSOwxIbc19He+1fqPC0bm5Anok5ZmNPZRBV UesYVJJ83RV8FhlFJreJwT2lqZw7ziM4K9PYg36zWbf8ckV5TikoWAPrIOgEPoe3 e/fV1KSkf6hKCffN+Ovx8OAuZcLZHzDRYzOxgCj7Gct9sX+AJk1pdkFBlt1tXPaj 1gUQyeuB8R+yVDhIIMx1QfEx74nGp0x5ypqK2N5xb7IP2Otie/1eypzpCh5zjjK2 f+qLR7w3LjVzkcEdOpGnhRqulueF3EPo5b2QPjNi2kTDhw/frQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi+qiFtb9s2jhgTGMES6PhvqnNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOWEwZmZkYWUtM2E5MC0z ZWUyLTllMjktN2M3ZWUyMzIyNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKArpln6297zsjTcg8okhuLZ356jkYvml5QAHaibUZeoRy2V+tL/ZnfT F7Wb5+pArmYs2U1Hmb/1J7vlaFclJmD3JRgQwJCAoNPWaTiR03d2d09iJzGfpfnM Ir9bzFwDf5UbFLDEcwHr3Hkd5IsFe2X1dlAXTxDvi/bSG1wILPeAb2uatjNUjBMl sy7oyh9bckd5RNY4L9h08DrGGzI5sbInbJwNsM2d3aeiDCJlnUKOVqGpPf2YTD18 tR5YaBFR4D69/+Dy3hWl5HWuxd60bnsOqjx2r76uKwwujX50B17MYQwYhjwL2E5N gqIcOq6aEujQQTh60uD0FFFkmOVmt1M= -----END CERTIFICATE-----Generated at Sat Aug 9 10:34:30 2025 by rpki-client