$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa File: 48a21514-9b84-3789-b983-3138fee23ce0.roa (raw, json) Hash identifier: sFm6eNGv+XnDbjyazbbLqWXfgelfHIkjVN0esusbfa8= Subject key identifier: 06:B0:FF:FE:88:47:D5:E3:5C:AC:19:0C:82:5F:95:14:BC:D1:C1:C6 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849F7151BAE1E058D4250364080 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 54994 IP address blocks: 168.235.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:1b:ae:1e:05:8d:42:50:36:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=7aba3936-2d88-4daf-a44f-3d6cf7ddbf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:2f:26:97:08:f4:1d:e0:5e:6d:4d:a9:65: 78:b2:cc:14:57:51:76:9e:15:c5:d1:64:a3:1f:e2: 1f:99:88:5a:69:c9:db:b4:b0:24:37:4d:1a:80:ff: 06:62:b0:fb:61:32:e2:10:8a:ca:67:e1:92:e0:e5: 0a:fe:92:fd:43:5e:28:97:a3:4b:ba:bd:5c:16:19: 34:1e:fe:48:6c:7f:b4:80:d0:d7:94:ba:2b:f8:d9: 03:80:04:ef:bb:2b:01:9b:51:85:23:5e:63:6b:69: 18:23:21:15:61:b8:b3:b4:b3:2d:a1:1a:4e:67:22: 85:7b:8f:a3:25:bd:ae:63:ba:15:9b:40:2e:45:2e: ae:26:35:fb:fb:f2:69:dc:ff:a5:b4:52:10:51:89: d5:34:99:21:5a:89:67:a4:36:99:7c:f8:3b:08:17: a3:7d:07:af:5b:c1:2d:22:3c:fb:9e:a8:1f:05:9c: 65:66:0e:84:04:71:2e:b1:af:ca:ce:0e:89:a6:4b: 6c:0c:ef:b5:fd:e2:3c:53:75:0e:91:2c:38:47:f8: d8:aa:84:af:3e:94:4c:b2:5d:d0:52:0c:0e:ee:5b: 59:b4:d1:e9:ee:fc:b9:97:e3:27:a4:e0:1a:bb:b3: 17:8d:d6:ba:1d:7e:ae:28:13:06:51:cc:a0:66:ca: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B0:FF:FE:88:47:D5:E3:5C:AC:19:0C:82:5F:95:14:BC:D1:C1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0e:0f:08:c4:25:97:68:4c:b3:a3:ae:d9:92:13:c6:36:9d: 9c:ba:f1:ae:2b:68:dc:dd:01:ed:02:b9:3b:4c:08:c8:a6:ba: 4e:e9:19:7e:0e:bf:4f:5d:1e:af:0e:08:97:ad:1a:cb:86:fc: 3c:7f:98:bc:e8:a2:f5:f9:77:73:3c:64:90:e1:05:f8:b4:be: e1:65:9f:2f:81:17:ba:7d:da:97:d4:b3:2d:f5:b7:fb:7c:0e: 1e:ee:09:53:22:c8:dc:e8:3b:67:fe:6f:73:a5:2f:f0:d0:d1: d1:bd:90:7f:ef:16:b8:76:2f:95:2a:48:7d:27:39:62:7d:b5: 1d:3b:ef:f8:27:b2:6b:4c:ec:78:be:43:a9:c6:4d:17:da:94: f4:11:1c:15:5b:76:76:fd:20:66:12:50:38:82:79:2f:8c:17: 2e:f9:5f:cd:89:58:44:e3:6e:36:59:23:02:6b:92:63:f1:29: f8:b2:b6:84:11:27:e6:ed:54:88:94:fe:61:91:31:3a:91:42: 71:13:1d:44:cc:d7:3b:14:69:a2:5d:0d:92:ef:2a:8e:e7:17: 70:7a:d4:b9:fc:d9:b9:cf:da:db:0f:56:70:99:be:d4:ed:42: 76:f0:34:b8:37:9c:50:a9:83:59:6a:ee:b6:68:c9:f4:0f:73: 7a:16:5a:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRuuHgWNQlA2QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk N2FiYTM5MzYtMmQ4OC00ZGFmLWE0NGYtM2Q2Y2Y3ZGRiZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk4vJpcI9B3gXm1NqWV4sswUV1F2nhXF0WSj H+IfmYhaacnbtLAkN00agP8GYrD7YTLiEIrKZ+GS4OUK/pL9Q14ol6NLur1cFhk0 Hv5IbH+0gNDXlLor+NkDgATvuysBm1GFI15ja2kYIyEVYbiztLMtoRpOZyKFe4+j Jb2uY7oVm0AuRS6uJjX7+/Jp3P+ltFIQUYnVNJkhWolnpDaZfPg7CBejfQevW8Et Ijz7nqgfBZxlZg6EBHEusa/Kzg6JpktsDO+1/eI8U3UOkSw4R/jYqoSvPpRMsl3Q UgwO7ltZtNHp7vy5l+MnpOAau7MXjda6HX6uKBMGUcygZsqeiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaw//6IR9XjXKwZDIJflRS80cHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNDhhMjE1MTQtOWI4NC0z Nzg5LWI5ODMtMzEzOGZlZTIzY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8ODwjEJZdoTLOjrtmSE8Y2nZy68a4raNzdAe0CuTtMCMimuk7pGX4O v09dHq8OCJetGsuG/Dx/mLzoovX5d3M8ZJDhBfi0vuFlny+BF7p92pfUsy31t/t8 Dh7uCVMiyNzoO2f+b3OlL/DQ0dG9kH/vFrh2L5UqSH0nOWJ9tR077/gnsmtM7Hi+ Q6nGTRfalPQRHBVbdnb9IGYSUDiCeS+MFy75X82JWETjbjZZIwJrkmPxKfiytoQR J+btVIiU/mGRMTqRQnETHUTM1zsUaaJdDZLvKo7nF3B61Ln82bnP2tsPVnCZvtTt QnbwNLg3nFCpg1lq7rZoyfQPc3oWWgE= -----END CERTIFICATE-----Generated at Mon Jun 16 14:54:03 2025 by rpki-client