$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa File: 9b9b9c14-7c59-311c-b7c4-f4928230b433.roa (raw, json) Hash identifier: 1/KgsnsTPyO6GMxmSirs+EFMLBD3p/ZoHX1gp0T1EH8= Subject key identifier: A5:25:02:C6:EE:97:2B:2C:F2:E6:C4:F8:5F:7A:B0:FB:41:9A:36:CA Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F43285849ABB4AB0E3559B7DBEDEDA880 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 8075 IP address blocks: 167.21.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ab:0e:35:59:b7:db:ed:ed:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=d5107676-78f8-4507-aec8-3ffd372786ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:52:52:94:7b:d4:7a:6e:5f:e9:8d:ca:73: f7:30:17:f9:8f:12:71:e7:2d:ee:01:09:7c:36:72: e3:82:e1:89:45:69:01:bc:65:60:14:7c:3d:b5:fc: 69:47:ad:7e:6d:12:31:73:c4:fd:94:88:cd:c7:c0: c0:6b:59:21:a6:ba:a8:02:26:d5:1e:15:a7:69:d3: b3:88:e8:a3:f6:0a:7a:90:bc:af:5d:10:ef:0c:38: 03:fd:29:ca:08:e0:d9:2e:e0:35:0a:59:4f:16:d6: 61:06:f5:88:4b:58:c7:1f:25:38:79:8f:1a:09:1b: 6e:f9:fb:0e:56:5c:f6:79:93:16:76:a4:ca:11:74: 26:cb:1e:6e:89:98:cf:52:29:33:8c:0f:84:df:2d: 98:49:8b:85:dd:d9:b6:cc:88:8e:70:d7:a2:e8:b2: e7:d1:38:16:d0:cb:b6:f6:b3:6f:f8:29:19:69:88: 49:d4:31:75:d7:12:37:53:06:7e:b4:78:37:66:fe: 8b:a1:ac:04:09:0a:f4:65:2f:b3:bc:80:bf:3f:82: 5b:eb:56:41:ef:49:1b:4b:76:2b:cf:5c:ff:bb:51: e1:ed:a8:74:e3:83:80:bc:5f:73:e6:da:d1:64:a0: 9f:32:b9:f3:96:97:c6:6a:6b:91:42:43:b6:e2:f9: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:02:C6:EE:97:2B:2C:F2:E6:C4:F8:5F:7A:B0:FB:41:9A:36:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a3:59:f9:2d:63:24:fc:2a:90:8d:a9:22:10:87:0c:52:eb: 11:07:2e:33:e9:1b:8c:82:b3:28:42:cf:c4:03:96:a7:47:96: a2:d2:df:0c:b8:4c:d9:43:68:f1:6e:d5:9d:76:16:f7:7d:fc: f1:9b:65:47:64:e9:19:bc:27:33:2a:63:df:c4:08:81:6d:8e: d1:51:ce:28:5a:c2:3b:03:4b:27:8a:d7:3f:59:cd:88:70:1d: 66:86:d1:61:d9:90:b3:70:65:c0:db:57:40:0e:db:8f:70:f3: a9:42:4e:4d:bc:31:cd:08:b9:21:89:79:8d:cc:9a:1c:eb:44: f8:d6:a6:c7:47:ab:e0:7a:aa:3a:37:62:0a:aa:65:ab:91:93: 4a:ba:b3:25:25:dc:03:08:4d:49:9e:a0:29:2d:55:fb:1c:07: 87:34:91:b4:54:8d:a2:5e:d3:08:bc:b3:2e:81:84:62:e5:44: 33:6a:42:80:e0:9c:07:c5:05:51:63:3e:69:5c:80:7e:3c:63: 2f:9f:a8:41:39:29:8e:1f:18:cf:26:a5:8d:87:86:bd:7e:78: a8:c1:94:18:f4:99:fb:11:9d:45:cd:42:9f:29:b3:23:8e:f0: 8b:ea:85:8b:73:2f:cd:75:27:3a:9a:2b:70:e8:fe:7c:88:de: ad:10:3b:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKsONVm32+3tqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZDUxMDc2NzYtNzhmOC00NTA3LWFlYzgtM2ZmZDM3Mjc4NmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLRSUpR71HpuX+mNynP3MBf5jxJx5y3uAQl8 NnLjguGJRWkBvGVgFHw9tfxpR61+bRIxc8T9lIjNx8DAa1khprqoAibVHhWnadOz iOij9gp6kLyvXRDvDDgD/SnKCODZLuA1CllPFtZhBvWIS1jHHyU4eY8aCRtu+fsO Vlz2eZMWdqTKEXQmyx5uiZjPUikzjA+E3y2YSYuF3dm2zIiOcNei6LLn0TgW0Mu2 9rNv+CkZaYhJ1DF11xI3UwZ+tHg3Zv6LoawECQr0ZS+zvIC/P4Jb61ZB70kbS3Yr z1z/u1Hh7ah044OAvF9z5trRZKCfMrnzlpfGamuRQkO24vmL5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUlAsbulyss8ubE+F96sPtBmjbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvOWI5YjljMTQtN2M1OS0z MTFjLWI3YzQtZjQ5MjgyMzBiNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISjWfktYyT8KpCNqSIQhwxS6xEHLjPpG4yCsyhCz8QDlqdHlqLS3wy4 TNlDaPFu1Z12Fvd9/PGbZUdk6Rm8JzMqY9/ECIFtjtFRzihawjsDSyeK1z9ZzYhw HWaG0WHZkLNwZcDbV0AO249w86lCTk28Mc0IuSGJeY3MmhzrRPjWpsdHq+B6qjo3 YgqqZauRk0q6syUl3AMITUmeoCktVfscB4c0kbRUjaJe0wi8sy6BhGLlRDNqQoDg nAfFBVFjPmlcgH48Yy+fqEE5KY4fGM8mpY2Hhr1+eKjBlBj0mfsRnUXNQp8psyOO 8IvqhYtzL811JzqaK3Do/nyI3q0QO4I= -----END CERTIFICATE-----Generated at Sun Jun 15 11:42:19 2025 by rpki-client