$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa File: d44d9355-ca16-3f84-adcc-d72f435dc27f.roa (raw, json) Hash identifier: fDNMj64Zm5tTOOiqfQ+ILtbfs/ik6/pLcHROBeb2AUw= Subject key identifier: 45:91:D5:36:C9:A7:52:37:EF:88:80:4D:9B:52:FF:89:51:90:FA:37 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498E6483017949CFA2D0256F40 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 395391 IP address blocks: 216.230.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:83:01:79:49:cf:a2:d0:25:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=90e13d97-f246-4421-b4c1-889baebbfae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:25:2f:b3:2a:95:c9:3b:a2:55:8e:82:15:84: 01:b8:33:87:70:20:f7:a7:d5:64:23:42:3e:64:35: ef:d0:c0:9a:ab:9d:0f:00:84:59:c3:48:f5:70:a6: 18:ef:4d:c7:e1:7f:6e:ac:08:a7:41:4b:fb:7e:50: bd:78:45:63:b0:21:3e:2b:cf:9d:f7:ee:79:63:63: 18:d8:e8:da:6b:0a:52:c8:b7:ac:28:40:32:bc:43: 92:b5:aa:bd:72:24:dd:ed:8e:02:e2:44:02:ca:e1: 5a:3a:53:9f:38:1e:e1:a9:2d:ea:2a:12:82:d2:f4: 61:71:fa:5c:4a:f1:08:0a:c5:12:43:2a:10:e1:bf: 72:df:8f:62:e7:70:8e:cc:3d:d0:5a:7e:2e:af:33: 1e:c4:c8:2f:f9:7f:12:e6:14:9b:c8:9a:98:b7:bf: 96:84:00:14:3c:ac:74:df:be:8e:ac:a7:76:88:90: de:3a:7b:50:b7:c8:a2:69:91:55:32:86:57:c8:d2: 56:77:e8:c2:06:8d:1c:b7:b4:2e:0f:d4:70:42:1e: ab:48:71:1f:38:66:94:dc:f8:81:00:cd:eb:16:e5: 73:ee:15:e0:04:67:e3:2e:fb:b1:ef:e7:fa:96:2d: 1c:e3:7f:da:16:b9:1c:f2:7b:86:e7:68:fc:ae:86: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:91:D5:36:C9:A7:52:37:EF:88:80:4D:9B:52:FF:89:51:90:FA:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 216.230.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:02:39:b7:e6:97:a3:2f:dd:70:a6:ab:6a:9e:b6:e5:a1:c7: 11:1f:f3:18:c7:12:96:9c:53:3e:a2:d8:ef:ab:c1:41:2b:f8: 71:f5:fa:87:b0:36:95:dc:0f:47:16:07:ee:26:3b:e5:37:9f: 33:53:09:a1:b9:46:7c:db:d1:9f:82:ca:d0:cf:8d:8d:ee:5d: e0:ae:ad:f3:f1:64:30:b3:ed:5a:20:19:da:ac:b1:ee:58:b6: 7b:66:f3:4d:b8:28:b4:d6:4a:a7:5f:12:29:b9:2a:dc:17:3b: 77:22:c1:bd:d9:84:d3:c2:80:df:ae:30:07:06:1a:85:ee:3e: e6:e5:95:0d:30:c2:2f:ce:08:73:9e:34:ee:98:2a:56:d1:4f: fe:4f:08:ef:6b:03:7d:c0:ff:66:d4:42:de:14:df:20:98:d3: 8d:15:1f:06:75:36:6f:25:b3:94:cf:67:ae:8d:19:8f:06:cf: c2:3d:8d:81:9e:02:58:9a:86:38:89:d9:c1:f9:62:87:09:3a: 96:4d:ae:65:53:f3:0d:af:86:3a:e5:b9:57:d3:8a:71:8c:42: 35:fe:9d:56:24:49:b2:11:b2:5c:23:34:ed:a5:48:d4:ac:a8: 54:2e:c2:dc:4a:e4:a7:1e:3a:47:96:98:b6:2d:1e:e1:0b:fc: d0:11:02:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIMBeUnPotAlb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTBlMTNkOTctZjI0Ni00NDIxLWI0YzEtODg5YmFlYmJmYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCUvsyqVyTuiVY6CFYQBuDOHcCD3p9VkI0I+ ZDXv0MCaq50PAIRZw0j1cKYY703H4X9urAinQUv7flC9eEVjsCE+K8+d9+55Y2MY 2OjaawpSyLesKEAyvEOStaq9ciTd7Y4C4kQCyuFaOlOfOB7hqS3qKhKC0vRhcfpc SvEICsUSQyoQ4b9y349i53COzD3QWn4urzMexMgv+X8S5hSbyJqYt7+WhAAUPKx0 376OrKd2iJDeOntQt8iiaZFVMoZXyNJWd+jCBo0ct7QuD9RwQh6rSHEfOGaU3PiB AM3rFuVz7hXgBGfjLvux7+f6li0c43/aFrkc8nuG52j8roYA6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWR1TbJp1I374iATZtS/4lRkPo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZDQ0ZDkzNTUtY2ExNi0z Zjg0LWFkY2MtZDcyZjQzNWRjMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMCObfml6Mv3XCmq2qetuWhxxEf8xjHEpacUz6i2O+rwUEr+HH1+oew NpXcD0cWB+4mO+U3nzNTCaG5Rnzb0Z+CytDPjY3uXeCurfPxZDCz7VogGdqsse5Y tntm8024KLTWSqdfEim5KtwXO3ciwb3ZhNPCgN+uMAcGGoXuPubllQ0wwi/OCHOe NO6YKlbRT/5PCO9rA33A/2bUQt4U3yCY040VHwZ1Nm8ls5TPZ66NGY8Gz8I9jYGe AliahjiJ2cH5YocJOpZNrmVT8w2vhjrluVfTinGMQjX+nVYkSbIRslwjNO2lSNSs qFQuwtxK5KceOkeWmLYtHuEL/NARAuo= -----END CERTIFICATE-----Generated at Wed Apr 30 06:28:12 2025 by rpki-client