$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/cd8d28b4-9fab-3f86-89d9-e873b6c3f7c3.roa File: cd8d28b4-9fab-3f86-89d9-e873b6c3f7c3.roa (raw, json) Hash identifier: 6yUt5NvSjw+aTSYH/tTv1XHjSN/evxUztCI3j8eSFxs= Subject key identifier: 88:54:06:54:61:A0:FE:49:D8:0E:2E:6D:6B:99:83:4C:22:1A:57:BB Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F4328584A03A542C9515DC796F9579140 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/cd8d28b4-9fab-3f86-89d9-e873b6c3f7c3.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 216.230.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:42:c9:51:5d:c7:96:f9:57:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=972954d5-4355-482e-987e-3796df785617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:ae:6c:12:5b:ff:8f:d5:f3:4c:62:10:ea: 13:cc:8c:72:cd:13:66:08:50:a9:63:bb:d2:d8:2a: 9c:ca:1b:ad:5a:8e:db:e1:41:21:de:cd:da:5a:90: ae:53:85:68:b3:ae:bd:dd:e7:11:78:d9:ed:35:f1: 27:f3:bf:35:48:ea:a6:2c:d3:b3:0b:df:97:9e:d3: 0b:c6:1b:b3:89:d3:bc:86:08:04:dc:b6:9e:a2:3d: 02:75:e6:5f:00:aa:8f:70:37:0d:7a:52:e9:c5:58: be:80:65:f1:07:23:48:ca:63:2d:f3:3a:68:a2:0e: 01:cb:4c:f2:02:81:38:ac:6a:c1:44:c0:c9:f5:a7: 0c:d3:b1:38:f7:13:09:e6:bf:d8:0f:95:2c:08:8c: 8e:d7:74:97:c3:e3:ec:44:51:6b:37:db:5b:27:27: 3d:6a:bd:33:63:9c:10:11:35:fa:07:78:28:3f:74: 67:b5:82:5b:8f:db:33:2c:6c:f5:2a:be:e8:7b:38: 08:c7:6c:cf:31:b9:80:2f:d1:46:b5:52:12:9a:86: b2:62:b2:b4:c2:f5:77:5b:70:37:59:94:b8:19:f1: 4c:a1:f1:34:e9:bb:ca:1b:49:72:83:5d:35:28:06: 65:8a:ad:c6:41:b6:7e:74:d1:cc:02:00:5b:ed:8d: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:06:54:61:A0:FE:49:D8:0E:2E:6D:6B:99:83:4C:22:1A:57:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/cd8d28b4-9fab-3f86-89d9-e873b6c3f7c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 216.230.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:30:9c:87:c2:a8:44:92:35:7f:87:89:a1:51:bf:92:5b:c2: 8d:e6:6d:ef:18:e9:dc:21:b2:9d:a4:3d:f4:c7:0e:82:d5:7a: 46:40:8c:35:df:ab:bd:04:f5:4a:cd:de:8e:19:49:d3:62:9b: 6f:25:ef:ec:97:31:f0:84:17:d4:41:55:f6:8c:58:53:3f:d6: 6f:66:79:99:a8:36:3e:bd:2e:4d:10:22:4a:bb:d3:f8:3f:e0: 2c:d4:67:ba:f7:65:fe:c7:67:34:52:80:81:7e:ad:15:d1:d7: 41:db:82:9b:2c:25:28:1f:ab:88:5d:32:c3:b8:45:04:c9:55: 91:f5:01:7b:76:ba:fe:f7:7b:9a:a5:b2:48:13:07:7d:c3:9b: 73:64:97:2f:be:66:7a:01:dd:b2:ed:c8:84:cf:a5:b7:2d:ec: 11:82:e8:cd:a1:ad:b1:c3:9c:89:5b:6a:fb:61:f9:cd:d2:8c: bc:e0:45:7d:31:6f:b9:94:46:c8:65:92:27:01:82:3a:b6:9c: 47:f0:f9:39:a2:a2:94:63:68:a2:d5:77:ce:28:93:c3:99:39: 63:47:f9:83:6c:dd:46:9b:66:a4:a2:d8:f4:e6:61:6d:8e:98: 68:fd:62:f0:87:53:92:c6:12:20:77:5c:0e:f9:74:1f:bf:5d: 75:fa:6f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpULJUV3HlvlXkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk OTcyOTU0ZDUtNDM1NS00ODJlLTk4N2UtMzc5NmRmNzg1NjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBeubBJb/4/V80xiEOoTzIxyzRNmCFCpY7vS 2CqcyhutWo7b4UEh3s3aWpCuU4Vos6693ecReNntNfEn8781SOqmLNOzC9+XntML xhuzidO8hggE3Laeoj0CdeZfAKqPcDcNelLpxVi+gGXxByNIymMt8zpoog4By0zy AoE4rGrBRMDJ9acM07E49xMJ5r/YD5UsCIyO13SXw+PsRFFrN9tbJyc9ar0zY5wQ ETX6B3goP3RntYJbj9szLGz1Kr7oezgIx2zPMbmAL9FGtVISmoayYrK0wvV3W3A3 WZS4GfFMofE06bvKG0lyg101KAZliq3GQbZ+dNHMAgBb7Y2/nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhUBlRhoP5J2A4ubWuZg0wiGle7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvY2Q4ZDI4YjQtOWZhYi0z Zjg2LTg5ZDktZTg3M2I2YzNmN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAwnIfCqESSNX+HiaFRv5Jbwo3mbe8Y6dwhsp2kPfTHDoLVekZAjDXf q70E9UrN3o4ZSdNim28l7+yXMfCEF9RBVfaMWFM/1m9meZmoNj69Lk0QIkq70/g/ 4CzUZ7r3Zf7HZzRSgIF+rRXR10HbgpssJSgfq4hdMsO4RQTJVZH1AXt2uv73e5ql skgTB33Dm3Nkly++ZnoB3bLtyITPpbct7BGC6M2hrbHDnIlbavth+c3SjLzgRX0x b7mURshlkicBgjq2nEfw+TmiopRjaKLVd84ok8OZOWNH+YNs3UabZqSi2PTmYW2O mGj9YvCHU5LGEiB3XA75dB+/XXX6b0k= -----END CERTIFICATE-----Generated at Sun Jun 15 09:03:57 2025 by rpki-client