$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d65606df-b71a-32a2-8dd0-028629b4b24f.roa File: d65606df-b71a-32a2-8dd0-028629b4b24f.roa (raw, json) Hash identifier: 0/7zUxuGOqAr/1doBS4q5SsZpxSfPLAJCR0OWcxT8HU= Subject key identifier: 72:B1:87:B2:A2:53:88:EA:23:DA:38:4F:AF:B4:3D:EB:CE:1C:9A:55 Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F43285849DF5A5FAB9746336A42CD4000 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d65606df-b71a-32a2-8dd0-028629b4b24f.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 16509 IP address blocks: 192.151.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5f:ab:97:46:33:6a:42:cd:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=653de2bc-4919-4ef3-a426-0d234d411179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:17:21:33:8c:e1:2a:d9:54:d0:5f:48:cd: cd:ce:20:dc:7f:69:cf:58:12:a7:0b:81:e3:91:4e: dd:c1:57:ad:36:8e:26:22:31:18:5e:31:86:f4:f6: 61:d9:af:98:8a:db:94:53:55:79:01:72:6d:a8:39: 87:df:41:76:cc:8c:b0:15:6b:16:9b:c8:aa:94:c6: 30:aa:67:13:63:15:87:d3:08:02:ad:bd:26:f7:2a: 3b:41:ab:5e:46:f3:f7:bf:f0:96:45:c7:ff:66:42: ff:cb:5a:97:89:33:13:dd:88:3d:a1:11:85:f2:53: f7:c8:87:6a:1f:98:68:f0:86:a3:76:49:77:59:2f: 7f:98:39:9e:6a:5d:d8:d1:7c:d0:73:91:3d:b8:a0: 8f:5c:99:22:91:1d:c0:06:9b:c6:c1:d6:29:2e:26: cd:0c:87:83:c7:4c:0a:74:e3:ce:50:5c:9c:4e:26: b9:eb:6b:40:ec:30:19:d6:9d:53:9e:23:27:0c:cb: 37:9e:1b:ae:9c:c6:07:c6:91:1b:28:5c:70:04:b0: 6c:fc:b5:2f:64:40:d4:03:a4:f1:45:d9:23:ef:c7: a7:fd:44:36:c3:65:74:84:8b:0b:89:df:31:20:9a: 43:98:2b:a4:bd:4a:67:65:f0:64:a1:d3:46:79:99: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B1:87:B2:A2:53:88:EA:23:DA:38:4F:AF:B4:3D:EB:CE:1C:9A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d65606df-b71a-32a2-8dd0-028629b4b24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.151.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6a:ef:c5:c0:be:e2:0d:45:6e:2e:76:8d:75:5c:1c:48:e2: a0:25:d4:31:c6:c1:de:b1:e2:27:3d:cb:83:24:50:83:ee:f2: d3:64:48:fe:9d:3d:46:76:af:b7:be:34:43:37:ad:1d:54:61: 1c:1d:11:99:89:41:de:47:eb:05:b7:b2:35:03:e7:bb:09:98: 11:4b:cd:17:b7:16:c7:ce:7f:e3:df:ff:58:dc:4e:39:75:41: 97:7d:46:45:98:3a:e2:96:34:ca:f0:6c:c4:6b:56:3f:b9:c4: b9:ac:94:33:dc:2d:72:b6:dc:e6:4e:c6:ec:e6:6c:5b:d2:35: ac:1c:66:b2:e4:95:71:90:dc:2b:8b:9a:73:8d:6b:11:81:18: a4:60:94:48:f9:a9:cf:c4:1d:98:29:1f:07:51:7f:6b:94:a2: df:af:03:7a:f3:85:e1:59:5a:85:39:20:f3:18:6c:a0:d4:d8: b2:c6:cd:3a:a4:e1:19:c8:8b:d9:a5:ff:6d:82:12:04:ae:89: c7:cb:0e:25:18:1a:3a:e0:02:a2:1f:5c:b2:ad:3b:9b:63:c7: 16:59:f2:4f:47:4d:6f:3d:9a:59:cd:40:f3:d9:07:f1:2b:52: b2:dd:be:ea:62:a2:1f:f4:a3:7a:10:4d:26:ce:35:76:d5:59: 9e:16:fd:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWl+rl0YzakLNQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjUzZGUyYmMtNDkxOS00ZWYzLWE0MjYtMGQyMzRkNDExMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg4XITOM4SrZVNBfSM3NziDcf2nPWBKnC4Hj kU7dwVetNo4mIjEYXjGG9PZh2a+YituUU1V5AXJtqDmH30F2zIywFWsWm8iqlMYw qmcTYxWH0wgCrb0m9yo7QateRvP3v/CWRcf/ZkL/y1qXiTMT3Yg9oRGF8lP3yIdq H5ho8Iajdkl3WS9/mDmeal3Y0XzQc5E9uKCPXJkikR3ABpvGwdYpLibNDIeDx0wK dOPOUFycTia562tA7DAZ1p1TniMnDMs3nhuunMYHxpEbKFxwBLBs/LUvZEDUA6Tx Rdkj78en/UQ2w2V0hIsLid8xIJpDmCukvUpnZfBkodNGeZnxxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKxh7KiU4jqI9o4T6+0PevOHJpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvZDY1NjA2ZGYtYjcxYS0z MmEyLThkZDAtMDI4NjI5YjRiMjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJcdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRq78XAvuINRW4udo11XBxI4qAl1DHGwd6x4ic9y4MkUIPu8tNkSP6d PUZ2r7e+NEM3rR1UYRwdEZmJQd5H6wW3sjUD57sJmBFLzRe3FsfOf+Pf/1jcTjl1 QZd9RkWYOuKWNMrwbMRrVj+5xLmslDPcLXK23OZOxuzmbFvSNawcZrLklXGQ3CuL mnONaxGBGKRglEj5qc/EHZgpHwdRf2uUot+vA3rzheFZWoU5IPMYbKDU2LLGzTqk 4RnIi9ml/22CEgSuicfLDiUYGjrgAqIfXLKtO5tjxxZZ8k9HTW89mlnNQPPZB/Er UrLdvupioh/0o3oQTSbONXbVWZ4W/aA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:09 2025 by rpki-client