$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa File: 4674c542-a229-3daa-8f2c-4c5ff78cf657.roa (raw, json) Hash identifier: G1pQ1AUcGDClxaalaMRPkhYNPCT/KKXxUMz2Gk451f0= Subject key identifier: E3:88:21:AD:4F:36:21:17:84:70:E7:92:F1:EA:3E:E5:7D:14:D3:B5 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F43285849E225177ABE22D51FCBD89A00 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 1273 IP address blocks: 206.128.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:17:7a:be:22:d5:1f:cb:d8:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=16736312-f356-4a0c-bb1a-d3511c3cc73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:6c:72:d3:0d:8a:68:ae:24:95:8e:1c:3e: 3e:39:55:34:3f:84:34:01:42:40:3e:d1:39:bf:03: 9e:57:6f:bb:6f:de:4e:33:89:0b:02:71:60:b2:20: b0:10:21:c7:02:f4:b5:00:99:bb:3b:95:ff:1f:b3: f2:a7:1e:35:ab:2b:c3:b5:fb:19:ab:b2:88:91:62: b4:a1:f6:bd:1e:14:da:ee:22:2e:06:50:46:f0:ba: 8c:ad:96:af:78:7a:61:88:c5:6d:f6:64:f7:68:55: e5:0f:31:e9:63:26:1f:e7:9d:f8:d1:3c:98:35:26: ff:1b:61:39:62:58:a6:0d:8e:c3:93:46:7e:d9:52: fe:20:82:c5:f8:a6:f8:b9:eb:be:f2:76:de:a3:e9: 6e:6c:09:0f:c8:c3:16:ad:6b:08:19:57:26:76:1a: d8:3b:42:40:8f:b7:fc:4c:a4:11:d9:6e:83:0c:c1: 66:19:e4:54:6a:e5:1d:43:4e:94:50:fd:09:8a:0c: 29:1e:98:5a:e6:da:30:03:5a:c6:b6:cc:71:7e:66: 6b:d2:17:c8:e6:34:4c:35:a1:de:61:a2:8b:58:1f: eb:30:a0:77:84:0d:99:93:11:a1:a9:2b:03:50:ae: 7a:96:0a:f9:29:9e:45:e9:55:c5:5f:56:25:4d:b5: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:88:21:AD:4F:36:21:17:84:70:E7:92:F1:EA:3E:E5:7D:14:D3:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 206.128.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fe:67:da:dc:cf:cf:4b:f1:b6:27:fe:07:c3:8b:c6:46:bc: 08:56:cd:81:df:4c:af:f1:fb:b0:32:36:de:b1:ea:cb:1b:47: af:3a:ee:d6:c1:99:a4:b2:2e:7c:0c:c3:c6:7c:88:f3:62:cb: 44:72:54:3a:0a:18:67:24:b0:5c:f1:1e:93:9d:bb:a7:a7:17: 81:1c:33:26:9a:0b:30:0d:12:95:98:9f:a0:f8:d6:00:e0:28: 00:b0:ee:da:3e:cd:3d:e8:e9:45:8c:d9:34:c5:48:b7:fa:2a: 92:96:59:e0:3c:8b:16:fe:08:0c:b8:f6:ec:94:13:2f:51:6c: 87:1a:fb:82:f4:f5:50:bc:54:9e:0e:01:7b:54:09:d0:b0:33: df:97:48:c9:bf:07:7b:20:a9:24:88:f8:fb:aa:d4:72:ba:30: 65:5c:2a:84:ea:73:d1:6e:41:94:1b:c9:35:a7:f9:84:b5:48: 47:7f:5a:c4:0a:b8:04:99:ff:68:2b:6c:d4:85:71:48:4d:1d: 1e:d1:9c:02:6d:fe:45:3f:36:e1:3a:f1:40:a9:80:a1:e1:3b: 05:0a:f3:e6:47:36:62:8c:da:dd:cc:52:ab:6e:df:0c:55:e0: e2:5e:36:9b:82:b5:c2:19:ff:5b:87:f3:32:69:da:3c:7e:94: 93:c7:49:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRd6viLVH8vYmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MTY3MzYzMTItZjM1Ni00YTBjLWJiMWEtZDM1MTFjM2NjNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nlsctMNimiuJJWOHD4+OVU0P4Q0AUJAPtE5 vwOeV2+7b95OM4kLAnFgsiCwECHHAvS1AJm7O5X/H7Pypx41qyvDtfsZq7KIkWK0 ofa9HhTa7iIuBlBG8LqMrZaveHphiMVt9mT3aFXlDzHpYyYf55340TyYNSb/G2E5 YlimDY7Dk0Z+2VL+IILF+Kb4ueu+8nbeo+lubAkPyMMWrWsIGVcmdhrYO0JAj7f8 TKQR2W6DDMFmGeRUauUdQ06UUP0JigwpHpha5towA1rGtsxxfmZr0hfI5jRMNaHe YaKLWB/rMKB3hA2ZkxGhqSsDUK56lgr5KZ5F6VXFX1YlTbVF7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOIIa1PNiEXhHDnkvHqPuV9FNO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvNDY3NGM1NDItYTIyOS0z ZGFhLThmMmMtNGM1ZmY3OGNmNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzoBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn+Z9rcz89L8bYn/gfDi8ZGvAhWzYHfTK/x+7AyNt6x6ssbR6867tbB maSyLnwMw8Z8iPNiy0RyVDoKGGcksFzxHpOdu6enF4EcMyaaCzANEpWYn6D41gDg KACw7to+zT3o6UWM2TTFSLf6KpKWWeA8ixb+CAy49uyUEy9RbIca+4L09VC8VJ4O AXtUCdCwM9+XSMm/B3sgqSSI+Puq1HK6MGVcKoTqc9FuQZQbyTWn+YS1SEd/WsQK uASZ/2grbNSFcUhNHR7RnAJt/kU/NuE68UCpgKHhOwUK8+ZHNmKM2t3MUqtu3wxV 4OJeNpuCtcIZ/1uH8zJp2jx+lJPHSQQ= -----END CERTIFICATE-----Generated at Sun Jun 15 13:57:14 2025 by rpki-client