$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa File: 0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa (raw, json) Hash identifier: 36B/Dy6wABhZEsdu7+WKfKSlKBszkRIG+iiJjbabtNs= Subject key identifier: 8D:3D:AE:76:10:D0:C2:A4:16:C7:A8:1D:13:EC:30:82:4A:51:E0:65 Certificate issuer: /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Certificate serial: 010D0C9F43285849F71528D9FB854DD2E9BEAE80 Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 40100 IP address blocks: 208.68.156.0/24 maxlen: 24 208.68.157.0/24 maxlen: 24 208.68.158.0/24 maxlen: 24 208.68.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:28:d9:fb:85:4d:d2:e9:be:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=a5f7419b-8f08-4a91-ae3c-d14b9581a8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:24:10:35:5d:20:7c:a4:4b:2d:09:56:ae: cb:25:33:37:39:a7:c7:5d:3a:60:12:dd:1c:fe:94: 66:4c:9b:67:08:02:3b:31:90:02:7e:2f:75:a4:c3: 3f:8a:5d:21:e7:d1:72:e0:a4:bb:b4:1f:c7:92:d8: ee:91:5e:b4:b6:b6:18:c2:58:08:b6:97:b4:c2:aa: 8e:e3:3a:39:f2:74:ad:a1:41:8d:0f:a9:4e:59:59: df:fb:d4:b9:1f:e4:72:d0:fb:4c:ba:b4:7e:4a:4a: 78:30:60:4a:07:3a:09:d7:58:28:3e:ef:b2:ad:25: 2e:2d:09:71:a2:88:50:16:78:f3:b0:7f:de:39:e8: c0:82:ac:ec:bd:c9:60:52:e6:eb:fb:42:0c:d6:98: c6:95:e7:71:77:84:ea:a6:64:d2:0f:76:f1:03:b8: aa:56:84:7a:ec:32:67:1b:1e:64:ec:79:58:4c:1c: 6e:16:37:ec:9e:89:36:72:d0:b2:f9:44:c3:55:f4: 66:15:b3:a9:20:f6:56:cc:40:0c:4f:32:9a:02:2a: 32:5b:b4:2e:56:06:b4:fe:3f:f6:fd:28:de:d1:27: fc:ba:e8:bf:93:eb:c4:62:c8:55:e3:13:79:a3:9f: f8:ae:4e:e8:65:2e:48:4b:4d:a4:8d:1c:5e:06:d5: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3D:AE:76:10:D0:C2:A4:16:C7:A8:1D:13:EC:30:82:4A:51:E0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl X509v3 Authority Key Identifier: keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer sbgp-ipAddrBlock: critical IPv4: 208.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c6:cc:96:fb:a6:b8:37:b8:23:a4:3e:6e:80:12:4f:92:68: b5:bf:cc:57:f3:a7:a4:38:01:7a:d1:7d:8f:22:f4:98:d4:c0: 06:af:73:d2:8a:2a:1f:3e:de:c2:33:91:2c:d1:12:ce:ca:16: c8:4b:fc:cc:04:cb:89:56:2b:60:f4:d5:f1:ea:74:17:6f:e2: 1f:dd:d4:29:86:76:91:be:9d:58:a4:02:5b:2a:6a:66:38:f2: 19:86:64:7a:33:aa:d1:04:cc:d2:cc:67:66:77:e1:b8:58:40: 13:98:f0:15:d4:3f:b1:6f:26:8a:a7:ab:7d:1d:55:a5:b0:1b: 74:35:83:d1:c8:1e:3b:47:8d:e8:ba:76:88:67:54:54:52:6d: 99:74:ca:e4:17:29:fc:e1:3a:77:7f:1b:e5:1d:b2:64:be:3a: 7d:32:06:8a:7d:ea:47:b0:a9:6a:0f:88:59:be:76:b9:6c:8f: a1:1a:38:f4:30:69:0d:5b:6a:53:32:5d:c1:ef:4f:ee:2f:83: 00:ba:c2:fa:f4:82:05:a2:08:20:7d:fb:fc:d3:b4:86:cf:c9: 3c:4c:b8:4d:8c:f7:f1:e1:e3:ca:fd:aa:6f:99:e1:c5:b0:77: 63:eb:60:83:70:4e:85:ec:09:83:c9:47:66:aa:cb:75:7e:df: e5:c9:1f:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSjZ+4VN0um+roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVhNGVmNjctM2VkMC00ZGU5LWFmYWItYWIxZWI0ZGMz YjBkMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YTVmNzQxOWItOGYwOC00YTkxLWFlM2MtZDE0Yjk1ODFhOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOMkEDVdIHykSy0JVq7LJTM3OafHXTpgEt0c /pRmTJtnCAI7MZACfi91pMM/il0h59Fy4KS7tB/HktjukV60trYYwlgItpe0wqqO 4zo58nStoUGND6lOWVnf+9S5H+Ry0PtMurR+Skp4MGBKBzoJ11goPu+yrSUuLQlx oohQFnjzsH/eOejAgqzsvclgUubr+0IM1pjGledxd4TqpmTSD3bxA7iqVoR67DJn Gx5k7HlYTBxuFjfsnok2ctCy+UTDVfRmFbOpIPZWzEAMTzKaAioyW7QuVga0/j/2 /Sje0Sf8uui/k+vEYshV4xN5o5/4rk7oZS5IS02kjRxeBtWqKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI09rnYQ0MKkFseoHRPsMIJKUeBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80NWE0 ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFlYjRkYzNiMGQvMGYwZWFkZjAtN2FjZi0z Y2U3LTk5ZjgtODgzZTc2NGZhOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDVhNGVmNjctM2VkMC00ZGU5LWFm YWItYWIxZWI0ZGMzYjBkLzQ1YTRlZjY3LTNlZDAtNGRlOS1hZmFiLWFiMWViNGRj M2IwZC5jcmwwHwYDVR0jBBgwFoAUZHP0/sCp2Tpv5nmwPPeHGId5EX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80NWE0ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFl YjRkYzNiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzGzJb7prg3uCOkPm6AEk+SaLW/zFfzp6Q4AXrRfY8i9JjUwAavc9KK Kh8+3sIzkSzREs7KFshL/MwEy4lWK2D01fHqdBdv4h/d1CmGdpG+nVikAlsqamY4 8hmGZHozqtEEzNLMZ2Z34bhYQBOY8BXUP7FvJoqnq30dVaWwG3Q1g9HIHjtHjei6 dohnVFRSbZl0yuQXKfzhOnd/G+UdsmS+On0yBop96kewqWoPiFm+drlsj6EaOPQw aQ1balMyXcHvT+4vgwC6wvr0ggWiCCB9+/zTtIbPyTxMuE2M9/Hh48r9qm+Z4cWw d2PrYINwToXsCYPJR2aqy3V+3+XJH64= -----END CERTIFICATE-----Generated at Mon Jun 16 10:43:43 2025 by rpki-client