$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa File: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (raw, json) Hash identifier: 3pMGbUQzVZyldf5LpYAQeB6oOULLlXoZu0KUN3PGkZQ= Subject key identifier: 90:DB:EC:8D:69:AB:56:3C:61:20:C4:94:27:E0:01:6F:DC:EB:23:83 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F43285849F17FB8CA50F2B3F79023DE40 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397627 IP address blocks: 192.203.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b8:ca:50:f2:b3:f7:90:23:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=2d9717cb-0ef8-41a7-bb22-3760a1b8aa92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:e1:d8:3a:bf:66:44:22:79:2e:4d:de:82: 1b:c1:da:f6:cf:0c:3f:c6:cc:dd:18:91:6b:01:2f: 58:92:ca:39:f2:db:cb:e8:d6:00:bc:9f:ad:39:8e: b4:ec:0c:ff:d1:77:81:28:e1:f5:21:a4:14:f8:8f: 78:25:85:8a:23:fb:da:e8:42:e5:70:76:9e:da:e7: 4b:f4:95:32:e8:7d:b2:f9:5e:c9:55:c9:39:c9:78: b9:75:bc:51:96:25:ab:5e:78:2f:55:f2:29:cb:49: 5d:91:6d:a4:9a:41:af:99:0b:32:58:82:11:ac:0a: e8:97:e6:c6:b9:84:8d:0e:15:6a:26:a3:61:71:46: 73:89:52:62:06:9d:09:c7:7a:84:24:bb:3d:10:db: 61:2e:c0:7a:b8:91:0f:4a:c2:55:af:48:5e:6e:6f: 97:8d:d1:28:73:1c:7c:3f:96:37:8a:bb:f1:f7:99: 48:3f:c9:ad:76:01:01:5d:4f:5a:16:75:58:c1:e6: f5:d3:42:3a:56:58:3e:71:e4:ba:88:a2:95:83:a4: a6:3a:bf:b9:be:e2:8d:87:d1:ec:df:28:69:15:03: c9:14:a9:85:e8:34:25:65:c1:a2:91:d3:87:cf:52: 1d:e2:bc:a1:6c:67:e1:33:29:ea:cc:b7:c9:dc:18: 91:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DB:EC:8D:69:AB:56:3C:61:20:C4:94:27:E0:01:6F:DC:EB:23:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: 192.203.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:df:a7:44:97:43:27:f6:fb:77:4e:33:82:16:71:65:a4:76: 71:3d:39:6a:09:86:d0:ea:fb:da:ab:bb:9b:8a:21:0b:e5:57: 78:04:63:d8:53:b2:bd:ee:77:48:6c:9c:b3:aa:c3:56:4c:c3: 9b:58:36:4e:e7:fb:3c:f0:66:27:a9:df:f9:ab:de:5a:b6:2a: ea:08:ba:4a:fc:43:ec:e8:a3:4b:17:8f:f0:bb:f0:73:7f:18: f3:8a:72:2b:4e:47:fb:c9:ac:92:f5:76:45:04:f8:c5:7d:b0: 6e:2c:b0:29:70:10:86:23:57:80:bf:f8:a8:d8:6b:80:36:61: a2:c1:d2:5b:c2:60:23:46:2b:6a:74:6b:fb:70:44:92:01:82: 70:ed:ea:e6:c8:7d:70:a0:d9:45:af:ef:ed:e5:a8:e4:49:3e: 15:46:31:eb:de:ab:ec:ba:79:9c:d2:b9:14:8c:fb:9e:9b:89: 25:d6:d4:c2:1e:45:f1:e3:1f:40:f8:b9:64:30:a5:5f:48:3a: aa:79:b1:f5:48:8e:92:41:16:c1:d5:c9:ec:90:6b:3c:b9:7a: 5e:b4:20:68:73:a1:61:9f:17:c2:95:20:fd:61:1a:4e:c2:2f: 60:1d:58:b4:1b:f0:ad:26:f7:80:70:40:7c:31:7a:6c:9b:17: 11:59:bc:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7jKUPKz95Aj3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MmQ5NzE3Y2ItMGVmOC00MWE3LWJiMjItMzc2MGExYjhhYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jnh2Dq/ZkQieS5N3oIbwdr2zww/xszdGJFr AS9Ykso58tvL6NYAvJ+tOY607Az/0XeBKOH1IaQU+I94JYWKI/va6ELlcHae2udL 9JUy6H2y+V7JVck5yXi5dbxRliWrXngvVfIpy0ldkW2kmkGvmQsyWIIRrArol+bG uYSNDhVqJqNhcUZziVJiBp0Jx3qEJLs9ENthLsB6uJEPSsJVr0hebm+XjdEocxx8 P5Y3irvx95lIP8mtdgEBXU9aFnVYweb100I6Vlg+ceS6iKKVg6SmOr+5vuKNh9Hs 3yhpFQPJFKmF6DQlZcGikdOHz1Id4ryhbGfhMynqzLfJ3BiR6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDb7I1pq1Y8YSDElCfgAW/c6yODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvNDU1MmMyMWYtOGQwNS0z ZmJiLTkyNDItMWRlMzc3YjA4MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLfp0SXQyf2+3dOM4IWcWWkdnE9OWoJhtDq+9qru5uKIQvlV3gEY9hT sr3ud0hsnLOqw1ZMw5tYNk7n+zzwZiep3/mr3lq2KuoIukr8Q+zoo0sXj/C78HN/ GPOKcitOR/vJrJL1dkUE+MV9sG4ssClwEIYjV4C/+KjYa4A2YaLB0lvCYCNGK2p0 a/twRJIBgnDt6ubIfXCg2UWv7+3lqORJPhVGMeveq+y6eZzSuRSM+56biSXW1MIe RfHjH0D4uWQwpV9IOqp5sfVIjpJBFsHVyeyQazy5el60IGhzoWGfF8KVIP1hGk7C L2AdWLQb8K0m94BwQHwxemybFxFZvC8= -----END CERTIFICATE-----Generated at Sun Jun 15 16:00:12 2025 by rpki-client