$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa File: 5cea7fe7-35eb-332d-a713-9768d64cc717.roa (raw, json) Hash identifier: JcX+hOH6pIlE+ieaLDLhzzy4kNhoLHzsXxBmWZtYHk0= Subject key identifier: 95:9F:D8:D1:42:BC:6B:BF:6E:FB:22:26:80:29:07:2C:90:FA:6B:59 Certificate issuer: /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2 Certificate serial: 010D0C9F43285849F87A81FA14CF84AF2B57EA00 Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 20205 IP address blocks: 168.245.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:81:fa:14:cf:84:af:2b:57:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=d0889235-3f2f-4bff-ab7d-49fe7cbed442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:9e:3a:8b:1a:2a:41:54:14:ef:e8:77:90: a7:69:87:1c:e9:7b:a4:b6:ec:13:9b:28:4d:99:b6: df:12:2f:74:7d:ca:1c:a2:fb:62:51:ea:50:ae:91: 9e:a0:91:41:82:e3:4b:32:67:05:27:20:ad:fa:9e: c9:47:81:ce:06:06:1a:4a:5d:0e:c2:2b:e1:4b:82: 54:85:02:a2:20:65:53:62:1e:33:00:45:99:14:92: 8f:a9:3e:1b:41:93:3e:b3:dd:bd:22:44:8c:63:7f: 3f:60:a2:19:09:ba:e8:0b:ad:6a:a5:e4:df:4e:59: f8:a5:b7:a8:bd:b8:60:94:d1:ea:a9:c2:f3:b3:a6: ee:55:b3:1f:23:12:37:99:95:11:1b:b6:f6:35:af: d8:5e:6c:ca:c0:8a:c4:34:ad:8d:50:2e:90:99:26: 28:78:a1:b7:a2:1f:46:45:21:03:20:86:4c:71:4d: 68:f1:a2:5d:4b:a2:fe:e5:df:7d:3c:20:7b:20:f3: 08:78:8c:ff:9b:33:18:ba:b9:42:fa:c2:9a:24:da: de:19:85:3a:e3:b7:b2:3e:f9:53:fd:fb:b3:3e:63: 0b:a6:d8:6e:92:13:61:98:80:53:08:a8:a6:0a:75: 58:20:ec:79:ff:37:7f:91:86:48:bc:6b:a5:c4:f5: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9F:D8:D1:42:BC:6B:BF:6E:FB:22:26:80:29:07:2C:90:FA:6B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl X509v3 Authority Key Identifier: keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer sbgp-ipAddrBlock: critical IPv4: 168.245.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:50:c3:6f:63:5a:ad:ed:f6:3b:d0:56:5e:21:4b:3c:1d:cd: a3:91:64:f5:99:df:c3:ab:15:cb:96:d7:65:92:c1:75:9c:28: b3:ea:97:c2:33:b9:c6:62:56:ed:a4:e7:25:5a:d5:62:95:f5: dc:fc:ba:86:74:00:21:a2:e9:52:93:9d:b8:48:74:dc:1a:e4: 22:e2:a4:dd:3e:be:9e:91:04:97:b1:ab:54:0c:b9:04:51:c2: cc:78:b1:79:79:92:c8:12:bd:25:2e:14:35:d9:06:85:f3:b5: a6:9b:8b:d8:c2:9a:00:db:3d:6b:e4:11:44:d0:ee:19:5d:c1: 69:0c:54:a9:db:ea:13:80:ce:48:81:08:62:b3:49:1b:d1:de: 07:1b:56:2a:0d:c2:80:59:c3:e2:7d:0a:c6:14:eb:4a:ca:84: 2b:ab:62:26:e0:0a:18:3a:0a:b8:43:ab:9a:e7:5f:ea:ba:25: 8f:65:15:fb:18:7e:3d:46:7e:74:fa:14:ed:7f:5f:1e:d6:c4: fe:a7:da:95:c5:41:46:08:da:7f:bb:dd:d1:53:fd:04:e5:c7: 5a:5c:da:73:ce:da:ac:fa:5f:2c:91:9e:52:00:20:ab:6d:eb: d4:66:52:f1:4f:49:50:97:5f:ea:e4:bc:5b:cc:68:51:b5:1e: 9e:4a:0a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eoH6FM+ErytX6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2 NmEyMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZDA4ODkyMzUtM2YyZi00YmZmLWFiN2QtNDlmZTdjYmVkNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbGeOosaKkFUFO/od5CnaYcc6XuktuwTmyhN mbbfEi90fcocovtiUepQrpGeoJFBguNLMmcFJyCt+p7JR4HOBgYaSl0OwivhS4JU hQKiIGVTYh4zAEWZFJKPqT4bQZM+s929IkSMY38/YKIZCbroC61qpeTfTln4pbeo vbhglNHqqcLzs6buVbMfIxI3mZURG7b2Na/YXmzKwIrENK2NUC6QmSYoeKG3oh9G RSEDIIZMcU1o8aJdS6L+5d99PCB7IPMIeIz/mzMYurlC+sKaJNreGYU647eyPvlT /fuzPmMLpthukhNhmIBTCKimCnVYIOx5/zd/kYZIvGulxPVXZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWf2NFCvGu/bvsiJoApByyQ+mtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0 NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvNWNlYTdmZTctMzVlYi0z MzJkLWE3MTMtOTc2OGQ2NGNjNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2 OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy YzgzMjY2YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqPW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9Qw29jWq3t9jvQVl4hSzwdzaORZPWZ38OrFcuW12WSwXWcKLPql8Iz ucZiVu2k5yVa1WKV9dz8uoZ0ACGi6VKTnbhIdNwa5CLipN0+vp6RBJexq1QMuQRR wsx4sXl5ksgSvSUuFDXZBoXztaabi9jCmgDbPWvkEUTQ7hldwWkMVKnb6hOAzkiB CGKzSRvR3gcbVioNwoBZw+J9CsYU60rKhCurYibgChg6CrhDq5rnX+q6JY9lFfsY fj1GfnT6FO1/Xx7WxP6n2pXFQUYI2n+73dFT/QTlx1pc2nPO2qz6XyyRnlIAIKtt 69RmUvFPSVCXX+rkvFvMaFG1Hp5KCnk= -----END CERTIFICATE-----Generated at Sun Jun 15 16:06:45 2025 by rpki-client