$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa File: 2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa (raw, json) Hash identifier: ZvMdv+G8XkoEkzIKVbI/iZw+tKxz1J41z+OPCjZ3Ras= Subject key identifier: C8:0A:F4:4B:AA:CE:DD:C8:72:9A:DF:2F:57:AB:E3:32:6F:E2:3C:33 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A2EEABEF6704F31A0283820C0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 852 IP address blocks: 216.180.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:be:f6:70:4f:31:a0:28:38:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=97610a8b-b234-42a2-8f72-a97d335724fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:ec:74:81:6a:93:f5:ee:a6:ba:77:89:51: 30:51:24:e1:99:57:5c:70:22:1d:de:cf:bc:b5:12: 37:44:f6:d8:a1:01:5d:65:2e:b5:6d:3d:77:87:3f: 6e:3d:29:30:61:31:05:d0:ec:f4:28:db:dc:9f:e5: 28:4b:0d:0e:5e:42:3e:cf:5c:92:79:2d:4e:de:68: 15:4b:84:99:ff:6e:92:c5:02:6b:c2:fe:be:2d:9d: bc:c4:ea:93:cc:65:36:51:50:8d:cb:84:3e:5c:fd: ee:51:f7:06:5c:7a:87:3e:aa:0f:26:cc:ce:19:26: 15:92:e8:24:6b:a9:18:b2:25:d7:92:6b:85:74:7b: 6d:33:2b:b9:b5:6e:61:8b:62:69:42:23:37:00:bd: 66:08:4f:7d:95:f2:c8:8e:76:b3:c4:c5:2a:c3:f7: a3:9f:12:4b:0f:76:cd:1a:fa:58:3c:0b:31:c7:5c: bd:67:10:3b:05:12:2c:f3:ab:41:c6:e2:dc:47:fb: 40:f8:83:87:3f:1f:96:32:46:d1:ca:98:99:34:19: f0:88:c5:57:68:98:8c:3b:ec:55:2b:20:a1:d6:a3: 6b:03:d2:90:33:24:1b:2d:e1:64:f2:70:93:93:60: bb:a1:b3:72:19:e2:c8:7e:03:c1:2a:44:7e:66:26: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0A:F4:4B:AA:CE:DD:C8:72:9A:DF:2F:57:AB:E3:32:6F:E2:3C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 216.180.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:71:a9:ac:bd:42:e6:44:a1:29:2b:f1:ba:8b:0d:d0:87:12: b8:7e:89:6b:f0:75:78:54:8b:e7:a1:ce:df:07:11:18:d0:ba: 83:3d:6c:ad:bf:92:ca:a6:0d:58:f3:e8:b5:43:2f:c2:49:59: 46:f4:66:83:c3:64:26:19:0a:ff:1e:da:f2:2a:4c:fd:48:33: fa:c2:57:7c:ed:42:2e:3a:6c:24:da:d4:7a:65:3b:d3:d9:35: 87:fd:ed:f5:71:ac:91:88:61:6b:23:03:ae:49:4d:10:ab:9e: 5d:e5:9b:f1:cc:be:d4:57:f6:a7:85:ea:49:6c:75:c8:7c:bd: 0c:9c:c1:db:b8:d3:a4:29:97:8a:85:4e:ff:d0:f4:66:c4:5a: a9:b9:48:db:ba:10:75:83:02:a9:db:9c:2f:b1:b4:0c:d5:2d: 81:c0:2e:a8:38:5d:f4:57:53:1e:14:e4:43:e0:11:33:81:12: d5:a2:be:50:4e:71:bd:4e:96:38:b4:35:1f:74:98:b3:d9:9f: fb:09:27:9e:2d:30:f6:19:33:93:6f:82:b1:2b:9d:7e:f0:84: 90:2f:ad:11:c0:bb:d3:6a:13:20:a6:bd:7b:9e:dd:ef:0e:44: ab:9e:41:10:06:4d:c0:40:ac:bd:81:c1:9f:75:af:24:ca:e9: 25:44:72:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6r72cE8xoCg4IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk OTc2MTBhOGItYjIzNC00MmEyLThmNzItYTk3ZDMzNTcyNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK3sdIFqk/Xuprp3iVEwUSThmVdccCId3s+8 tRI3RPbYoQFdZS61bT13hz9uPSkwYTEF0Oz0KNvcn+UoSw0OXkI+z1ySeS1O3mgV S4SZ/26SxQJrwv6+LZ28xOqTzGU2UVCNy4Q+XP3uUfcGXHqHPqoPJszOGSYVkugk a6kYsiXXkmuFdHttMyu5tW5hi2JpQiM3AL1mCE99lfLIjnazxMUqw/ejnxJLD3bN GvpYPAsxx1y9ZxA7BRIs86tBxuLcR/tA+IOHPx+WMkbRypiZNBnwiMVXaJiMO+xV KyCh1qNrA9KQMyQbLeFk8nCTk2C7obNyGeLIfgPBKkR+ZibSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgK9Euqzt3IcprfL1er4zJv4jwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMmUzYTNhYjktMzU3ZC0z YWFjLWI0NDMtYTY0MjQ5OWQxYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2LTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVxqay9QuZEoSkr8bqLDdCHErh+iWvwdXhUi+ehzt8HERjQuoM9bK2/ ksqmDVjz6LVDL8JJWUb0ZoPDZCYZCv8e2vIqTP1IM/rCV3ztQi46bCTa1HplO9PZ NYf97fVxrJGIYWsjA65JTRCrnl3lm/HMvtRX9qeF6klsdch8vQycwdu406Qpl4qF Tv/Q9GbEWqm5SNu6EHWDAqnbnC+xtAzVLYHALqg4XfRXUx4U5EPgETOBEtWivlBO cb1Olji0NR90mLPZn/sJJ54tMPYZM5NvgrErnX7whJAvrRHAu9NqEyCmvXue3e8O RKueQRAGTcBArL2BwZ91ryTK6SVEcvc= -----END CERTIFICATE-----Generated at Sun Jun 15 12:03:39 2025 by rpki-client