$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa File: bda6574d-81c2-38f7-b624-cdc878c38860.roa (raw, json) Hash identifier: cL6ops8qMzPURPgVSlGml0zfY7bfKBzZYwYhnDSJhgs= Subject key identifier: 09:3B:C2:AC:4A:B6:37:8C:26:3A:A9:05:72:61:17:04:A5:D1:9E:BA Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F43285849FF751578D51785D13292CF80 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 400702 IP address blocks: 192.81.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:15:78:d5:17:85:d1:32:92:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=d5410745-6942-4fea-8e3a-70a67ed7a752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:8b:7f:ea:7a:8e:af:07:96:00:7a:bb:ab: 67:a4:2c:61:af:77:63:8b:0f:89:bb:ef:53:0d:4f: 14:c4:a1:9d:ea:aa:cb:f8:50:38:9f:50:45:88:f3: cb:14:ee:e6:5c:33:7c:42:73:ba:fa:97:9b:0e:a9: 5a:5b:5c:75:49:36:12:e3:e4:f9:60:1f:1f:11:8e: fa:28:0d:16:72:45:e7:1f:62:95:10:27:e7:69:4b: 97:a9:8b:ad:cf:d0:b0:fe:76:f3:04:c8:c4:db:19: 9e:af:25:38:91:ff:7e:45:9f:f2:1b:b4:9b:82:45: 14:98:d0:50:91:bf:18:9e:08:18:bc:18:dc:37:c3: 8b:29:37:f2:56:be:09:b6:3e:5c:66:9a:93:b1:56: 6e:6e:28:f3:0b:79:e6:b9:00:eb:b5:b3:3f:ed:5f: b7:b3:da:6a:4a:44:b0:5c:31:29:96:01:59:29:80: d6:8d:02:91:20:d0:af:65:b2:5f:3f:56:e1:51:03: 75:cf:40:8b:d1:e1:38:3e:bd:cb:a6:7e:71:f9:f9: 87:52:fc:8d:2e:20:25:05:2c:46:c7:4d:b6:75:85: af:90:0d:0c:47:9a:a8:35:f7:27:81:8d:c6:d5:2c: 11:aa:a2:b4:3a:99:e4:55:a2:55:8a:94:5a:9e:c7: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:C2:AC:4A:B6:37:8C:26:3A:A9:05:72:61:17:04:A5:D1:9E:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 192.81.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5f:10:02:91:30:96:90:b9:b6:88:0d:64:16:ae:96:d7:56: e7:f8:a2:6a:ef:bd:54:a8:d4:55:f9:44:36:8f:58:06:97:ad: c1:0b:42:d9:a8:79:b5:ed:94:4d:12:9e:53:88:a6:7a:15:bb: 04:ad:20:fe:52:10:0b:83:09:c6:45:33:ff:11:47:61:08:fd: 6d:b2:7f:37:74:38:bc:92:f4:71:f3:66:17:48:25:c0:45:bf: 66:87:b3:ff:02:04:a5:2f:84:92:3b:c9:be:d1:a7:5e:8b:20: ae:d1:2e:e2:eb:fd:ec:7b:14:6a:b5:40:54:4b:2b:7d:86:3a: 41:2b:8c:e4:d8:0c:6a:7b:24:8f:51:62:c9:91:ed:92:5a:ac: 52:e0:21:63:e1:25:7d:d4:9b:59:da:76:0d:3a:52:53:41:ea: d4:a3:53:ad:11:a2:74:a5:2c:c4:f9:93:36:ff:69:31:56:07: 9f:86:0d:7e:65:61:51:a1:5b:8d:73:d0:f2:eb:64:14:32:0b: e5:b9:c7:1d:c2:62:71:8f:0d:39:8e:3c:b8:33:47:f2:90:12: a6:58:16:85:ef:e2:6c:18:dd:6f:a2:ae:aa:53:2f:bb:17:89: 10:6d:d0:75:16:a3:42:34:79:ee:2c:30:ee:52:78:7d:e7:95: b1:aa:4f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRV41ReF0TKSz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZDU0MTA3NDUtNjk0Mi00ZmVhLThlM2EtNzBhNjdlZDdhNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7aLf+p6jq8HlgB6u6tnpCxhr3djiw+Ju+9T DU8UxKGd6qrL+FA4n1BFiPPLFO7mXDN8QnO6+pebDqlaW1x1STYS4+T5YB8fEY76 KA0WckXnH2KVECfnaUuXqYutz9Cw/nbzBMjE2xmeryU4kf9+RZ/yG7SbgkUUmNBQ kb8YnggYvBjcN8OLKTfyVr4Jtj5cZpqTsVZubijzC3nmuQDrtbM/7V+3s9pqSkSw XDEplgFZKYDWjQKRINCvZbJfP1bhUQN1z0CL0eE4Pr3Lpn5x+fmHUvyNLiAlBSxG x022dYWvkA0MR5qoNfcngY3G1SwRqqK0OpnkVaJVipRansdQtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk7wqxKtjeMJjqpBXJhFwSl0Z66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvYmRhNjU3NGQtODFjMi0z OGY3LWI2MjQtY2RjODc4YzM4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtfEAKRMJaQubaIDWQWrpbXVuf4omrvvVSo1FX5RDaPWAaXrcELQtmo ebXtlE0SnlOIpnoVuwStIP5SEAuDCcZFM/8RR2EI/W2yfzd0OLyS9HHzZhdIJcBF v2aHs/8CBKUvhJI7yb7Rp16LIK7RLuLr/ex7FGq1QFRLK32GOkErjOTYDGp7JI9R YsmR7ZJarFLgIWPhJX3Um1nadg06UlNB6tSjU60RonSlLMT5kzb/aTFWB5+GDX5l YVGhW41z0PLrZBQyC+W5xx3CYnGPDTmOPLgzR/KQEqZYFoXv4mwY3W+irqpTL7sX iRBt0HUWo0I0ee4sMO5SeH3nlbGqTyQ= -----END CERTIFICATE-----Generated at Sun Jun 15 16:44:07 2025 by rpki-client