$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa File: 2e0efa81-cacd-3e96-8012-69bb025d6e27.roa (raw, json) Hash identifier: R8DiwMd81hqIxyu+bP2LQnvw6+Z2yZkaZTADSVqSeC0= Subject key identifier: 67:D4:72:DE:73:5A:39:D5:C2:7E:7F:C5:70:42:05:C6:B6:E5:0C:42 Certificate issuer: /CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21 Certificate serial: 010D0C9F43285849DF5A5D948A383BBE88776100 Authority key identifier: 2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 16509 IP address blocks: 192.245.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5d:94:8a:38:3b:be:88:77:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=6d5168b0-9f4a-47b0-8f1b-73735ee57612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:39:d1:f3:ce:a4:25:c8:40:7d:d8:9b:c1: f1:46:27:e6:e0:41:2d:4e:0b:1d:58:c9:71:65:4b: 1a:ca:28:13:42:18:8c:12:c2:9c:54:df:89:9a:63: 21:0e:70:db:1c:32:91:47:1a:8f:31:8e:b7:e7:99: b9:f4:0f:0d:9f:7c:da:98:b9:3a:7c:9a:3d:30:6c: 8f:e8:ba:cb:09:b9:d0:fb:b5:f2:1b:ef:75:c8:f9: 7b:f5:81:68:06:c3:bf:73:9f:a4:27:17:8e:ff:8e: a5:9d:f3:64:55:a7:57:5b:13:b9:31:53:06:ce:fb: aa:86:9e:7c:cf:49:6f:b8:98:e9:01:65:2d:99:88: b1:e7:e0:3e:3f:48:fa:8c:84:99:e2:b8:ea:68:aa: 31:5a:98:20:4d:2a:6b:5f:2c:f1:9e:1a:42:78:dc: c3:7f:6b:d7:6a:06:f0:95:53:f7:c7:b1:27:66:f9: ef:35:3d:b6:29:a4:f8:54:b8:52:0b:3b:ee:cb:44: 1d:7a:c9:4a:78:e7:8f:ae:24:24:04:73:00:21:a1: 71:9e:7c:7e:00:7a:8b:e2:8c:27:ce:eb:af:2a:ba: 12:6c:23:33:7e:32:5f:ee:2b:d2:fd:9d:cf:b3:2d: 09:f2:b4:f8:92:20:4d:11:72:df:57:99:f0:5d:45: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D4:72:DE:73:5A:39:D5:C2:7E:7F:C5:70:42:05:C6:B6:E5:0C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl X509v3 Authority Key Identifier: keyid:2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer sbgp-ipAddrBlock: critical IPv4: 192.245.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a1:2a:32:19:e9:cb:be:5c:1f:0c:f3:ed:a5:2e:21:31:18: 62:1d:1f:63:4c:b0:ba:e1:54:99:37:34:91:2b:6a:bd:31:af: 12:2e:e5:ec:35:01:46:87:02:a8:8d:a5:03:73:5d:94:e3:e9: 73:30:d7:ad:eb:7e:ab:23:4b:3f:d2:a4:ca:f6:85:bc:c6:41: a3:59:28:d8:8d:b3:3d:a9:3e:c0:1d:d1:30:fe:3c:24:f1:31: bc:ae:cf:6d:bb:32:61:34:2c:40:47:e9:9b:b6:ed:20:5c:6c: 3b:1e:22:48:b1:24:5b:86:4e:78:84:95:5c:b9:63:06:66:30: 85:c8:5a:7b:0e:66:71:0e:b1:08:54:3f:76:ef:4e:8e:59:a0: c4:99:07:dc:e8:c9:a2:e6:69:fb:57:23:86:83:0d:17:e4:8a: ec:03:6a:ec:84:3c:0a:9b:74:4a:e0:7a:81:0f:82:dd:29:be: 0a:b4:a0:33:b8:b8:eb:29:fc:b5:f8:aa:83:80:b1:06:39:2c: df:6f:5b:6d:fc:a2:63:37:5e:85:5b:4b:03:3d:a1:50:1f:de: c9:27:00:48:8c:fa:78:b2:a2:29:2a:0a:59:19:1d:6e:ba:84: 17:b9:96:db:6f:0b:12:17:c5:19:b1:c9:9d:bc:aa:86:d3:aa: 47:d2:2f:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWl2Uijg7voh3YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlhNDNjNGQtOTlmMS00NmU3LTljYzctYjhjNjMwMWFh YjIxMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NmQ1MTY4YjAtOWY0YS00N2IwLThmMWItNzM3MzVlZTU3NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo450fPOpCXIQH3Ym8HxRifm4EEtTgsdWMlx ZUsayigTQhiMEsKcVN+JmmMhDnDbHDKRRxqPMY6355m59A8Nn3zamLk6fJo9MGyP 6LrLCbnQ+7XyG+91yPl79YFoBsO/c5+kJxeO/46lnfNkVadXWxO5MVMGzvuqhp58 z0lvuJjpAWUtmYix5+A+P0j6jISZ4rjqaKoxWpggTSprXyzxnhpCeNzDf2vXagbw lVP3x7EnZvnvNT22KaT4VLhSCzvuy0QdeslKeOePriQkBHMAIaFxnnx+AHqL4own zuuvKroSbCMzfjJf7ivS/Z3Psy0J8rT4kiBNEXLfV5nwXUU7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfUct5zWjnVwn5/xXBCBca25QxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mOWE0 M2M0ZC05OWYxLTQ2ZTctOWNjNy1iOGM2MzAxYWFiMjEvMmUwZWZhODEtY2FjZC0z ZTk2LTgwMTItNjliYjAyNWQ2ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjlhNDNjNGQtOTlmMS00NmU3LTlj YzctYjhjNjMwMWFhYjIxL2Y5YTQzYzRkLTk5ZjEtNDZlNy05Y2M3LWI4YzYzMDFh YWIyMS5jcmwwHwYDVR0jBBgwFoAUL4oW4xv70jqeRfMPQU+a0TlSRaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mOWE0M2M0ZC05OWYxLTQ2ZTctOWNjNy1iOGM2 MzAxYWFiMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFihKjIZ6cu+XB8M8+2lLiExGGIdH2NMsLrhVJk3NJErar0xrxIu5ew1 AUaHAqiNpQNzXZTj6XMw163rfqsjSz/SpMr2hbzGQaNZKNiNsz2pPsAd0TD+PCTx Mbyuz227MmE0LEBH6Zu27SBcbDseIkixJFuGTniElVy5YwZmMIXIWnsOZnEOsQhU P3bvTo5ZoMSZB9zoyaLmaftXI4aDDRfkiuwDauyEPAqbdErgeoEPgt0pvgq0oDO4 uOsp/LX4qoOAsQY5LN9vW238omM3XoVbSwM9oVAf3sknAEiM+niyoikqClkZHW66 hBe5lttvCxIXxRmxyZ28qobTqkfSLy0= -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:11 2025 by rpki-client