$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa File: 1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa (raw, json) Hash identifier: amLQ45UCW1Qz12kxBAO6gYluva5wrKjDBw8NU+OZuhQ= Subject key identifier: 5E:C1:6D:58:1C:03:FC:50:92:66:99:BC:F7:DD:1C:8B:CA:B0:C2:3D Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F43285849FF7511D350D6DC9B04DB4FC0 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 400238 IP address blocks: 216.87.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:11:d3:50:d6:dc:9b:04:db:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=e000b6e6-96f3-40b4-a5b8-c9f3c081a070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:de:2e:b6:e0:4f:13:bc:5d:c9:83:cd:f2: a7:df:18:52:1a:b1:6f:f1:cf:0d:c0:66:65:31:7d: 09:77:e9:06:48:3b:63:f8:2a:73:e8:c0:92:a2:50: 0c:cc:6e:06:32:1f:01:1f:e6:c9:89:59:0c:4b:db: 73:70:15:2b:f9:96:49:2c:72:ad:4b:7a:e5:09:d6: af:5b:95:1d:9f:8b:be:3f:d9:c1:60:c9:26:12:b0: 0c:3a:02:1b:2e:23:f4:dd:fe:89:b5:05:5b:a6:2d: b1:a0:e2:58:2c:86:25:07:22:a0:4c:70:d0:3e:22: b3:0c:81:3e:7c:80:f4:19:ea:76:c3:9b:c3:ae:ab: 9a:95:3b:90:06:77:91:c5:a4:7e:96:83:38:1b:15: d4:16:8b:4f:97:40:73:41:b5:3c:af:e5:b3:2d:87: b0:a4:2f:fa:88:32:31:fa:56:8b:66:ab:8c:6d:a4: 41:e0:8e:83:98:8d:73:2c:c0:0f:38:d0:a4:a1:f0: 61:98:84:c5:48:0b:37:8d:99:54:7e:b2:95:4b:17: e9:2e:d4:bb:a4:ab:28:4d:ee:32:a8:02:d7:7f:61: 36:48:c0:a9:22:d1:7f:b9:b5:a8:04:24:a8:66:c2: 4d:5f:47:e4:eb:33:ed:ac:6e:30:ad:68:3a:00:3b: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:6D:58:1C:03:FC:50:92:66:99:BC:F7:DD:1C:8B:CA:B0:C2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 216.87.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ab:bc:19:de:51:b3:b8:2c:bc:d7:c0:cb:43:dc:20:6d:ca: 5c:c8:47:c3:36:ec:19:eb:2b:f8:8a:eb:86:54:d4:7e:be:0b: ac:6c:87:c4:d2:fd:28:36:49:99:6c:5e:50:b5:66:6e:8e:54: d1:24:b2:f0:0b:37:3b:de:70:9f:09:8e:75:29:b3:a9:59:09: 4f:5a:d9:4e:df:d0:28:be:6d:07:10:c3:cf:9a:aa:91:26:75: 92:bb:e4:73:d9:4c:4c:fc:d4:fc:82:ce:f3:a4:5e:62:86:9d: ad:97:13:bb:54:45:4b:20:91:9c:b0:7a:ad:55:ff:ea:19:c8: 67:1d:85:50:fe:68:8f:28:48:d4:c2:2d:1f:fc:08:47:28:6b: fa:91:8f:2a:f2:76:fe:4b:b9:f8:08:7d:0e:e9:aa:29:0c:84: c5:66:0a:ac:69:d3:7c:c9:d6:b3:6d:d0:67:cd:ca:77:c7:6f: 6f:78:b1:5f:1c:46:60:ec:96:9e:e7:d5:a6:49:ae:d1:dc:02: e2:48:66:9f:47:bb:1b:dc:6f:c0:36:0e:97:eb:a0:e9:92:84: 47:38:53:32:fd:ca:e2:6b:22:38:3d:82:6a:8f:f8:0e:fe:53: d9:c9:ca:36:a3:f4:50:b5:3d:f3:b6:03:4b:11:38:87:78:d0: 0b:1e:ed:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRHTUNbcmwTbT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZTAwMGI2ZTYtOTZmMy00MGI0LWE1YjgtYzlmM2MwODFhMDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApADeLrbgTxO8XcmDzfKn3xhSGrFv8c8NwGZl MX0Jd+kGSDtj+Cpz6MCSolAMzG4GMh8BH+bJiVkMS9tzcBUr+ZZJLHKtS3rlCdav W5Udn4u+P9nBYMkmErAMOgIbLiP03f6JtQVbpi2xoOJYLIYlByKgTHDQPiKzDIE+ fID0Gep2w5vDrqualTuQBneRxaR+loM4GxXUFotPl0BzQbU8r+WzLYewpC/6iDIx +laLZquMbaRB4I6DmI1zLMAPONCkofBhmITFSAs3jZlUfrKVSxfpLtS7pKsoTe4y qALXf2E2SMCpItF/ubWoBCSoZsJNX0fk6zPtrG4wrWg6ADvOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7BbVgcA/xQkmaZvPfdHIvKsMI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvMWQzMzIyYTAtMDk2NS0z N2E3LWI1MzgtOGQ0ZDRlY2Y5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Fc7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWrvBneUbO4LLzXwMtD3CBtylzIR8M27BnrK/iK64ZU1H6+C6xsh8TS /Sg2SZlsXlC1Zm6OVNEksvALNzvecJ8JjnUps6lZCU9a2U7f0Ci+bQcQw8+aqpEm dZK75HPZTEz81PyCzvOkXmKGna2XE7tURUsgkZyweq1V/+oZyGcdhVD+aI8oSNTC LR/8CEcoa/qRjyrydv5LufgIfQ7pqikMhMVmCqxp03zJ1rNt0GfNynfHb294sV8c RmDslp7n1aZJrtHcAuJIZp9Huxvcb8A2DpfroOmShEc4UzL9yuJrIjg9gmqP+A7+ U9nJyjaj9FC1PfO2A0sROId40Ase7T4= -----END CERTIFICATE-----Generated at Sun Jun 15 19:59:26 2025 by rpki-client