$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa File: fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa (raw, json) Hash identifier: qi3sm5QPBb433snFngbu35EG0jiMFaDwqgT9UFfVMu8= Subject key identifier: 1F:AC:F0:CA:80:68:9B:67:B6:D3:83:5A:49:40:34:18:F4:49:C5:22 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F43285849ED4FD4DCE04DC71C446E2D00 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 16509 IP address blocks: 192.28.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d4:dc:e0:4d:c7:1c:44:6e:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=6b8c90be-dbd6-42dd-8471-0f7d9a1b3ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:68:37:25:f9:b3:ee:c2:57:c7:bc:42:b6: 88:bc:77:19:72:2e:21:aa:83:c2:35:e3:00:30:0b: 71:47:0c:5b:47:0c:bb:43:36:28:56:07:e7:b5:b6: 81:fb:83:3a:48:d5:84:cb:c4:fa:35:69:5d:2f:84: 0b:d3:c7:ac:76:a1:a4:63:f3:91:40:16:b9:30:d4: 19:8f:39:34:d1:9a:f1:21:a1:79:7c:84:ab:d3:d5: a6:d7:a9:26:d3:d9:a8:31:a5:3e:de:ab:3f:5a:84: f2:ec:7a:69:07:de:29:71:a2:9e:34:0c:4c:0b:10: d2:b9:ad:75:2b:3b:9f:84:23:5b:a8:45:7f:74:43: 0d:9a:51:77:4e:89:6f:a4:74:7e:e3:e9:43:eb:f3: a3:b1:39:b8:a6:6f:37:4d:22:b9:fa:df:f4:e4:d6: 03:f3:01:7a:75:1a:30:95:88:bb:20:61:22:fd:cf: 02:4f:f6:b0:f2:9f:53:ec:c9:ca:c1:53:1f:fc:a2: 03:63:cc:f3:60:02:8d:de:6a:15:55:44:ea:61:de: 27:a3:aa:76:d0:69:cc:8b:ef:0a:13:fe:37:f6:f1: 61:b9:33:d6:07:66:5b:e2:3e:8c:a4:ee:a7:29:2c: 3c:0c:09:9f:b3:6e:55:b5:b9:1f:5d:c5:71:ca:3e: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:F0:CA:80:68:9B:67:B6:D3:83:5A:49:40:34:18:F4:49:C5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:20:51:bb:ad:7e:15:44:84:99:c1:92:e9:9d:17:99:4c:4b: 5d:f7:10:9f:84:8d:88:be:77:df:26:58:96:95:26:82:55:60: c9:a1:a2:11:71:89:39:3d:21:96:68:d8:7d:71:ab:75:1b:5c: a5:74:27:25:a5:65:8b:61:47:a6:08:fc:e3:25:86:67:a5:83: d8:3b:73:b7:cc:61:63:fe:f2:14:c3:8b:c4:53:37:83:58:a7: 4e:21:a4:7d:ba:07:82:8e:74:2a:4e:da:3d:a0:ef:dc:cd:d6: ad:63:e4:68:cd:d1:2f:a8:d7:e3:af:8d:c0:b4:9a:ae:48:5e: 85:2f:f6:11:c3:05:a6:aa:63:68:be:fe:65:06:cc:7a:37:7d: 80:c0:6a:90:21:a3:62:c4:59:61:75:18:f9:40:4a:71:f4:64: fb:63:f2:43:1c:93:f2:f3:79:bf:88:12:82:10:f2:16:6c:d3: 9a:1d:82:9d:eb:c0:c8:43:48:78:e6:bb:ea:a1:96:c9:f8:26: 04:12:b6:fa:81:84:90:7b:5e:a3:b5:d6:16:f8:51:c8:3d:5a: 5f:1f:c3:5e:ce:e0:65:6c:11:57:7a:a0:10:aa:44:0b:7b:4e: 15:c7:f1:92:4a:36:42:ed:be:ef:1e:df:5d:b3:13:f6:20:cb: f2:6e:7b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9Tc4E3HHERuLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk NmI4YzkwYmUtZGJkNi00MmRkLTg0NzEtMGY3ZDlhMWIzZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYRoNyX5s+7CV8e8QraIvHcZci4hqoPCNeMA MAtxRwxbRwy7QzYoVgfntbaB+4M6SNWEy8T6NWldL4QL08esdqGkY/ORQBa5MNQZ jzk00ZrxIaF5fISr09Wm16km09moMaU+3qs/WoTy7HppB94pcaKeNAxMCxDSua11 KzufhCNbqEV/dEMNmlF3TolvpHR+4+lD6/OjsTm4pm83TSK5+t/05NYD8wF6dRow lYi7IGEi/c8CT/aw8p9T7MnKwVMf/KIDY8zzYAKN3moVVUTqYd4no6p20GnMi+8K E/439vFhuTPWB2Zb4j6MpO6nKSw8DAmfs25VtbkfXcVxyj5bYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+s8MqAaJtnttODWklANBj0ScUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZmIzY2VjM2MtZTNmOC0z MGI0LWFkNmUtNWVjZWRhMTA5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAggUbutfhVEhJnBkumdF5lMS133EJ+EjYi+d98mWJaVJoJVYMmhohFx iTk9IZZo2H1xq3UbXKV0JyWlZYthR6YI/OMlhmelg9g7c7fMYWP+8hTDi8RTN4NY p04hpH26B4KOdCpO2j2g79zN1q1j5GjN0S+o1+OvjcC0mq5IXoUv9hHDBaaqY2i+ /mUGzHo3fYDAapAho2LEWWF1GPlASnH0ZPtj8kMck/Lzeb+IEoIQ8hZs05odgp3r wMhDSHjmu+qhlsn4JgQStvqBhJB7XqO11hb4Ucg9Wl8fw17O4GVsEVd6oBCqRAt7 ThXH8ZJKNkLtvu8e312zE/Ygy/Jue9I= -----END CERTIFICATE-----Generated at Sat Jun 14 06:43:19 2025 by rpki-client