$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa File: 84e8903d-ec5b-3551-96bd-d419dbc97d32.roa (raw, json) Hash identifier: jqS5AGmNxW3myMgyUaMy7Grs0MRgrxJ0aC7zJO7bi1U= Subject key identifier: 68:3C:91:97:73:89:66:7F:54:66:8F:FE:28:55:15:DF:41:93:AF:7A Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F43285849ED4FD4EC0C3B94D2165107F0 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 14618 IP address blocks: 192.28.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d4:ec:0c:3b:94:d2:16:51:07:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=57cf65a9-649d-4c50-9870-a9b193e1571b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:f0:1c:5d:9f:04:6e:24:64:cf:88:11:ee: 78:82:5e:df:08:a1:3a:34:e1:a5:be:2a:00:f7:c0: 94:92:46:43:a9:5d:0c:11:31:2d:51:b8:4c:5b:8a: 07:20:06:82:2e:47:34:d8:95:01:48:9f:ff:ce:57: be:00:9a:79:f8:dc:7f:06:48:3c:c4:0a:4e:bd:3f: 8a:93:2e:45:25:80:2b:df:30:f6:4e:32:52:b6:52: 85:28:d1:69:03:c8:0e:cf:09:5b:50:4e:ed:f8:a0: 39:39:97:42:1c:e5:0c:bf:f9:32:cd:e9:cd:aa:1e: 0d:ac:a5:13:02:c4:bd:4a:70:af:e1:91:e6:9c:71: 51:6e:76:41:c1:68:03:69:c4:8f:eb:02:30:18:f4: 25:97:8d:2f:b9:e0:db:b9:6b:23:ba:7d:c8:c1:1d: 67:7c:0d:39:7e:e1:50:a3:62:41:ce:17:70:d4:c3: d7:65:09:e4:9a:df:37:aa:5b:22:e6:f2:f0:c2:ce: b3:58:e2:e8:d2:71:a0:9b:1b:ba:29:65:34:d1:cb: 54:a8:66:9f:ec:16:34:4e:1f:21:b2:55:08:c8:9a: 51:1e:56:c1:82:19:08:86:78:af:99:90:25:61:b2: c4:b0:9a:e2:09:1b:81:50:1c:a9:d8:cc:55:b5:bc: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3C:91:97:73:89:66:7F:54:66:8F:FE:28:55:15:DF:41:93:AF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:86:91:bc:b0:4f:de:36:6f:18:9c:12:be:b9:32:3e:70:e3: 4d:2a:89:35:50:45:e9:59:06:9c:87:d0:5e:74:58:97:cf:6c: a9:e4:e4:e7:6a:07:be:12:0a:77:e1:a2:4b:7f:bc:09:85:29: e1:1c:a1:3c:b3:62:e5:bf:b5:4e:87:f9:a7:b2:9c:80:58:90: e4:95:58:c6:86:ec:99:7d:71:1c:51:b6:11:64:61:7d:c3:5d: 5c:44:c5:1f:c9:80:9c:6a:74:ed:67:35:3f:1a:80:0d:e9:18: 0a:9f:2d:28:23:17:d8:28:a4:82:bb:49:a0:53:09:1c:18:44: 74:d8:97:fc:66:c9:fd:d1:f2:23:cc:55:f5:05:4d:67:3f:ed: ad:57:19:c1:d7:d9:cd:3c:f4:4d:05:6b:5a:fc:76:13:1a:c9: ce:87:4b:de:80:fd:89:ff:4a:98:69:d7:6d:b3:a3:69:de:58: aa:d0:ca:f3:bd:25:10:bc:f2:42:ed:6f:28:07:9d:03:4f:7a: 78:bf:12:77:aa:1b:fd:30:90:39:d8:6d:80:8e:a3:57:f7:8b: f3:5c:78:33:4b:be:67:78:19:6d:7e:e2:39:9c:bd:cf:b6:6f: 62:35:13:91:9f:d3:91:d2:68:b9:53:04:da:55:0e:d6:ce:97: 7e:8b:c8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9TsDDuU0hZRB/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk NTdjZjY1YTktNjQ5ZC00YzUwLTk4NzAtYTliMTkzZTE1NzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw3wHF2fBG4kZM+IEe54gl7fCKE6NOGlvioA 98CUkkZDqV0METEtUbhMW4oHIAaCLkc02JUBSJ//zle+AJp5+Nx/Bkg8xApOvT+K ky5FJYAr3zD2TjJStlKFKNFpA8gOzwlbUE7t+KA5OZdCHOUMv/kyzenNqh4NrKUT AsS9SnCv4ZHmnHFRbnZBwWgDacSP6wIwGPQll40vueDbuWsjun3IwR1nfA05fuFQ o2JBzhdw1MPXZQnkmt83qlsi5vLwws6zWOLo0nGgmxu6KWU00ctUqGaf7BY0Th8h slUIyJpRHlbBghkIhnivmZAlYbLEsJriCRuBUByp2MxVtbxAKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg8kZdziWZ/VGaP/ihVFd9Bk696MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvODRlODkwM2QtZWM1Yi0z NTUxLTk2YmQtZDQxOWRiYzk3ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+GkbywT942bxicEr65Mj5w400qiTVQRelZBpyH0F50WJfPbKnk5Odq B74SCnfhokt/vAmFKeEcoTyzYuW/tU6H+aeynIBYkOSVWMaG7Jl9cRxRthFkYX3D XVxExR/JgJxqdO1nNT8agA3pGAqfLSgjF9gopIK7SaBTCRwYRHTYl/xmyf3R8iPM VfUFTWc/7a1XGcHX2c089E0Fa1r8dhMayc6HS96A/Yn/Sphp122zo2neWKrQyvO9 JRC88kLtbygHnQNPeni/EneqG/0wkDnYbYCOo1f3i/NceDNLvmd4GW1+4jmcvc+2 b2I1E5Gf05HSaLlTBNpVDtbOl36LyNE= -----END CERTIFICATE-----Generated at Sun Jun 15 01:07:23 2025 by rpki-client