$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa File: 571768c7-1a06-3657-84a4-df54cd111858.roa (raw, json) Hash identifier: GfSXjuvrMhVyRdsAOrFIhkVwOFMP4cQrr18kDh9XUeI= Subject key identifier: 44:0C:4C:76:DC:9C:A8:AD:C4:E5:A7:F9:CA:23:4F:3F:60:C9:16:0A Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F43285849F87AA00E0BA145D52376FC80 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 54535 IP address blocks: 156.53.198.0/24 maxlen: 24 156.53.199.0/24 maxlen: 24 156.53.224.0/23 maxlen: 23 156.53.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:a0:0e:0b:a1:45:d5:23:76:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=dc2add83-7cb3-488c-90f6-26d9812f83dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:0a:40:e5:ae:1d:a8:6e:1d:d5:d6:a9:37: e4:25:65:0f:14:82:2a:4b:80:ae:5c:00:c8:41:bc: d1:52:55:a7:7f:75:54:74:57:5d:e1:f4:6d:f6:15: 29:76:97:fe:e6:18:f7:c3:0f:9a:a5:1c:63:49:51: 66:bc:cf:42:2f:fe:d7:72:ee:99:75:04:2e:ea:b6: ae:28:d5:1f:58:da:52:c0:84:b9:ca:55:79:9a:3b: f3:93:6a:d4:f4:34:c0:83:ba:76:0f:78:ff:05:bd: b8:e5:24:8a:72:44:dc:ea:29:17:b7:ac:72:0b:9a: 6a:46:25:95:0b:b5:02:0e:16:6a:a2:f4:ca:c3:e4: ed:f3:5a:2f:79:8b:ca:43:7d:6a:0e:65:b9:1e:0c: 99:a2:43:6c:df:fd:d5:fe:0e:4d:08:61:f2:ec:59: 30:e4:34:d4:b9:60:d2:b7:a1:98:7d:8a:22:fa:89: 3d:37:a9:61:1a:7b:37:66:65:f2:ca:57:8f:62:03: 47:93:ba:42:7c:12:70:4d:99:3d:2a:43:2c:6e:e3: a6:7b:67:74:38:07:6a:d7:66:5b:f5:6a:6c:32:97: 2b:20:ec:5b:eb:fd:74:26:fb:6d:43:17:59:14:08: 29:38:5d:1f:b3:4d:c4:12:93:7a:fc:a9:03:6d:a5: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:4C:76:DC:9C:A8:AD:C4:E5:A7:F9:CA:23:4F:3F:60:C9:16:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.198.0/23 156.53.224.0/23 156.53.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:21:0e:0b:43:34:bc:8c:30:13:ff:71:77:c1:ad:05:b3:bd: d8:7e:71:99:bf:75:b3:04:59:1c:fc:62:b6:3f:e8:fb:1b:b7: 0b:21:e5:b3:90:2e:5a:ed:2a:64:2f:fd:58:5f:97:ae:fa:a5: 08:f4:0e:60:a7:cd:9f:cd:5b:6b:66:ce:c6:34:08:cc:e1:03: 10:a3:95:eb:31:30:88:3f:21:3c:bd:73:d6:cb:c3:cf:a8:92: 9c:a7:b2:73:46:21:d7:62:cd:8d:7b:80:fa:ab:21:75:23:28: 9a:3f:7c:52:2c:dc:90:b7:b2:45:a1:52:28:93:ed:5d:32:0b: d8:88:73:66:b8:12:8b:6e:8e:c8:fc:ec:97:dc:c5:31:44:6c: 7b:62:e9:ca:c4:d0:40:3c:e9:32:19:41:6c:94:2e:c5:e0:c0: 25:b4:bd:5a:9e:1f:6a:d3:9c:bf:f0:15:04:06:3a:a4:21:56: 0e:5a:92:1f:88:b8:ad:b0:5b:b8:ec:fd:e6:02:81:a0:61:d4: 8b:74:ea:b6:6f:2e:59:85:ea:71:15:90:de:95:4f:54:d7:a0: a5:56:0c:5b:6e:87:29:98:7b:8e:47:cd:7a:a6:37:a5:98:90: bd:15:c2:21:3c:f4:12:91:82:33:cc:6a:aa:2f:11:9e:23:12: cb:db:22:74 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEn4eqAOC6FF1SN2/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGMyYWRkODMtN2NiMy00ODhjLTkwZjYtMjZkOTgxMmY4M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj30KQOWuHahuHdXWqTfkJWUPFIIqS4CuXADI QbzRUlWnf3VUdFdd4fRt9hUpdpf+5hj3ww+apRxjSVFmvM9CL/7Xcu6ZdQQu6rau KNUfWNpSwIS5ylV5mjvzk2rU9DTAg7p2D3j/Bb245SSKckTc6ikXt6xyC5pqRiWV C7UCDhZqovTKw+Tt81oveYvKQ31qDmW5HgyZokNs3/3V/g5NCGHy7Fkw5DTUuWDS t6GYfYoi+ok9N6lhGns3ZmXyylePYgNHk7pCfBJwTZk9KkMsbuOme2d0OAdq12Zb 9WpsMpcrIOxb6/10JvttQxdZFAgpOF0fs03EEpN6/KkDbaWlyQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEQMTHbcnKitxOWn+cojTz9gyRYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvNTcxNzY4YzctMWEwNi0z NjU3LTg0YTQtZGY1NGNkMTExODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnDXGAwQB nDXgAwQCnDXwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADYhDgtDNLyMMBP/cXfBrQWzvdh+cZm/dbMEWRz8 YrY/6Psbtwsh5bOQLlrtKmQv/Vhfl676pQj0DmCnzZ/NW2tmzsY0CMzhAxCjlesx MIg/ITy9c9bLw8+okpynsnNGIddizY17gPqrIXUjKJo/fFIs3JC3skWhUiiT7V0y C9iIc2a4Eotujsj87JfcxTFEbHti6crE0EA86TIZQWyULsXgwCW0vVqeH2rTnL/w FQQGOqQhVg5akh+IuK2wW7js/eYCgaBh1It06rZvLlmF6nEVkN6VT1TXoKVWDFtu hymYe45HzXqmN6WYkL0VwiE89BKRgjPMaqovEZ4jEsvbInQ= -----END CERTIFICATE-----Generated at Mon Jun 16 01:31:13 2025 by rpki-client