$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a2f7fe8-996d-3862-9d84-52f78959e38b.roa File: 5a2f7fe8-996d-3862-9d84-52f78959e38b.roa (raw, json) Hash identifier: X3JWHxxTLiSzyHNBbqlow2qqq102hc9iwzYTcIUGFhI= Subject key identifier: 86:5A:22:D6:2B:F4:11:97:D8:EC:E4:8D:41:B0:FA:06:44:FB:64:40 Certificate issuer: /CN=5a060f48-6584-4864-ba80-2bac55c51550 Certificate serial: 010D0C9F432858499F24953C29C74206E65DE740 Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a2f7fe8-996d-3862-9d84-52f78959e38b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 40861 IP address blocks: 216.168.18.0/24 maxlen: 24 216.168.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:95:3c:29:c7:42:06:e6:5d:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=99ef26cd-af49-459a-8ad3-f451be8b1580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:da:1f:3f:42:05:a1:83:8d:2e:4a:10:9a: 47:3f:4b:8e:c8:87:2e:23:e1:64:b6:0b:8a:97:be: 69:a4:99:0d:e6:b0:d4:70:0f:26:23:49:83:7f:7f: 8a:f8:fe:3c:c7:4c:bd:9b:14:8a:f6:3d:1a:d2:0a: 86:75:61:08:a9:6f:ed:01:8a:63:82:ef:3f:e9:31: 2a:f9:3a:a6:18:eb:a1:c9:57:c3:ed:73:b3:32:93: a5:44:65:a1:fe:74:24:82:84:d4:e1:67:3d:9a:83: 03:81:25:b8:be:32:de:69:f5:47:41:37:b7:4d:7b: 20:ba:c0:d7:5f:52:1e:f6:e5:ea:75:d3:c6:dc:4b: 2e:31:73:fc:3d:fe:51:7e:fa:10:b0:fd:d6:31:c3: fd:d0:4f:89:ed:82:74:68:32:a1:26:14:a7:1f:b3: 89:bc:19:14:69:e4:6c:1b:ce:31:a8:63:03:15:dd: e1:32:f5:01:57:92:ce:9c:b2:00:3a:69:62:7e:1a: 92:f7:59:16:35:a5:91:ec:cb:0f:27:b4:a3:96:d6: 4d:15:a6:2c:97:1c:36:c6:86:74:33:41:25:15:48: 82:b2:a6:fd:67:6f:13:72:46:9b:44:c3:9c:67:bc: c7:98:ed:cf:b7:08:25:5f:07:16:0e:a1:af:f0:92: 36:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5A:22:D6:2B:F4:11:97:D8:EC:E4:8D:41:B0:FA:06:44:FB:64:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a2f7fe8-996d-3862-9d84-52f78959e38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl X509v3 Authority Key Identifier: keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer sbgp-ipAddrBlock: critical IPv4: 216.168.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b0:1f:d2:41:5e:87:76:4f:66:9c:89:47:14:cf:bb:35:b4: 1c:4a:5d:61:fe:32:8e:9c:b1:b9:07:99:0c:a5:a2:bc:ce:22: bc:ce:8c:9a:64:ef:95:4e:d4:0a:ea:84:46:23:7e:0f:55:ff: 95:d3:1e:19:5d:d8:be:30:2d:97:e1:32:84:c0:f7:7d:0f:29: 99:9b:2f:27:80:aa:9a:0f:f3:47:bb:20:5a:b0:3c:6c:a9:39: 7d:56:79:21:cf:d9:fc:9a:66:3f:f2:cf:31:c7:b6:0b:68:56: a1:05:34:99:5c:8b:4b:fd:bf:21:48:ad:79:5e:50:82:af:4b: 08:c8:29:01:1f:6f:85:9f:eb:1c:79:b2:ed:6d:c3:7b:fb:82: ce:60:37:fa:51:fb:d4:82:19:5a:f0:1d:50:25:fd:25:8f:e2: ca:31:67:7a:ed:0f:05:8d:21:c1:37:7d:1e:89:b0:ea:43:45: e3:84:41:03:6c:74:86:5b:15:4f:57:89:29:1f:6b:b0:d3:91: c3:67:91:2b:89:38:7f:ac:d9:7d:fa:c1:7f:78:25:2d:c6:7e: f8:c8:68:a0:21:6a:56:08:8f:5f:72:4a:be:bf:d6:91:5f:95: fc:b9:8c:4a:ef:80:86:a2:df:e7:44:09:3d:65:e3:72:57:1e: d1:23:3d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJU8KcdCBuZd50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEwNjBmNDgtNjU4NC00ODY0LWJhODAtMmJhYzU1YzUx NTUwMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTllZjI2Y2QtYWY0OS00NTlhLThhZDMtZjQ1MWJlOGIxNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA7aHz9CBaGDjS5KEJpHP0uOyIcuI+FktguK l75ppJkN5rDUcA8mI0mDf3+K+P48x0y9mxSK9j0a0gqGdWEIqW/tAYpjgu8/6TEq +TqmGOuhyVfD7XOzMpOlRGWh/nQkgoTU4Wc9moMDgSW4vjLeafVHQTe3TXsgusDX X1Ie9uXqddPG3EsuMXP8Pf5RfvoQsP3WMcP90E+J7YJ0aDKhJhSnH7OJvBkUaeRs G84xqGMDFd3hMvUBV5LOnLIAOmlifhqS91kWNaWR7MsPJ7SjltZNFaYslxw2xoZ0 M0ElFUiCsqb9Z28TckabRMOcZ7zHmO3PtwglXwcWDqGv8JI2xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZaItYr9BGX2OzkjUGw+gZE+2RAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTA2 MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFjNTVjNTE1NTAvNWEyZjdmZTgtOTk2ZC0z ODYyLTlkODQtNTJmNzg5NTllMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWEwNjBmNDgtNjU4NC00ODY0LWJh ODAtMmJhYzU1YzUxNTUwLzVhMDYwZjQ4LTY1ODQtNDg2NC1iYTgwLTJiYWM1NWM1 MTU1MC5jcmwwHwYDVR0jBBgwFoAUPxfSXY53djI6hokJ3aRnjedM7wwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YTA2MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFj NTVjNTE1NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KgSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJywH9JBXod2T2aciUcUz7s1tBxKXWH+Mo6csbkHmQylorzOIrzOjJpk 75VO1ArqhEYjfg9V/5XTHhld2L4wLZfhMoTA930PKZmbLyeAqpoP80e7IFqwPGyp OX1WeSHP2fyaZj/yzzHHtgtoVqEFNJlci0v9vyFIrXleUIKvSwjIKQEfb4Wf6xx5 su1tw3v7gs5gN/pR+9SCGVrwHVAl/SWP4soxZ3rtDwWNIcE3fR6JsOpDReOEQQNs dIZbFU9XiSkfa7DTkcNnkSuJOH+s2X36wX94JS3GfvjIaKAhalYIj19ySr6/1pFf lfy5jErvgIai3+dECT1l43JXHtEjPV8= -----END CERTIFICATE-----Generated at Mon Apr 28 04:14:04 2025 by rpki-client