$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa File: a152d8c4-2eed-362c-b195-c5f6e1880722.roa (raw, json) Hash identifier: dgO5jF+C38Yy9ZNOuy1b+cCoqy0jiWLkOlq9G4UrWEc= Subject key identifier: 76:23:44:B3:B5:65:0F:EB:E1:42:00:38:10:EE:F3:4C:F2:0F:BF:D1 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F43285849B14A0976E46FBFFDB8CCDB60 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 393336 IP address blocks: 216.73.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:09:76:e4:6f:bf:fd:b8:cc:db:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=25cfaa5d-c323-4cef-8274-6f79c821a247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e7:c4:fb:10:cd:36:3a:61:8a:f9:47:4f:32: 43:e8:92:41:ba:8f:bd:57:83:a7:50:1d:8e:a9:90: ce:ca:60:58:88:9d:b1:df:46:bb:91:f1:03:be:ac: 50:30:c2:85:99:89:a8:7f:c8:8f:36:52:56:65:d4: c9:a7:01:0c:42:72:0c:01:fc:61:64:55:94:b2:a9: 36:64:56:54:94:27:ed:1c:7e:bc:c1:2b:dc:dd:32: 17:c0:96:27:ca:b3:40:2a:30:d0:99:c7:ac:2f:c9: 21:e0:3d:28:16:39:9e:b2:3b:56:65:cc:71:9c:57: bc:08:ae:c8:ed:47:4c:d8:a9:41:e4:17:68:45:5f: 05:7a:9b:c6:e7:6d:2a:d3:47:26:14:b4:ed:21:f0: f4:77:ec:78:b7:56:5a:04:da:ef:3f:e0:6e:5e:97: 1d:bb:36:b2:77:61:ca:65:54:d8:ec:20:d1:c3:64: ef:bd:1a:70:0e:3f:91:8f:38:2c:c6:1c:ae:34:28: 98:06:d5:04:4d:11:fe:07:c5:bf:f3:a9:76:38:08: 29:0a:f8:d2:4e:78:9a:83:79:a5:7d:67:13:75:05: be:7d:07:74:0c:b1:59:49:54:4d:67:df:11:ef:31: 62:5b:ed:33:82:1e:8b:ff:15:82:f5:0b:30:19:44: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:23:44:B3:B5:65:0F:EB:E1:42:00:38:10:EE:F3:4C:F2:0F:BF:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 216.73.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:40:01:a5:5f:36:34:6d:bb:d5:d6:50:4c:a1:46:d0:a0:42: 56:8f:ab:e7:0b:57:dd:ce:8a:64:15:fe:8d:d1:25:02:35:14: 32:13:8b:05:63:1a:d2:b9:df:e4:2c:4b:35:6b:81:12:08:a1: bc:1a:f8:db:06:52:80:7e:98:eb:08:cc:91:ef:e9:67:2e:da: 0e:b2:e1:ec:41:b0:b3:54:04:7b:36:55:12:28:13:0b:cf:e9: 73:bf:be:aa:5d:31:de:c8:3c:50:41:68:b6:61:32:eb:c8:29: 21:ff:c4:0f:29:fa:34:57:b6:36:37:a5:64:a4:45:61:3c:2d: 4f:7f:e2:35:66:fa:91:09:a6:23:b2:32:fe:7c:b2:f6:ac:57: 74:e3:9d:a0:63:8f:a0:3a:02:30:dd:1e:3e:bc:61:0e:3b:09: 69:23:53:9e:c7:eb:cc:e3:89:bd:8a:99:f6:e1:81:46:3a:6e: cd:89:dc:90:66:33:57:9a:ef:18:b5:04:2c:4b:80:45:0f:ba: 0d:67:f9:87:a0:0a:cd:76:be:94:d4:0d:b1:5b:00:2e:11:2e: 48:c1:0c:6f:75:dd:1f:99:80:cd:96:e2:ee:2c:eb:52:13:05: 3b:dd:20:79:26:d4:35:fa:0a:53:fc:13:ae:8e:bc:a0:05:db: 81:78:2a:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgl25G+//bjM22AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjVjZmFhNWQtYzMyMy00Y2VmLTgyNzQtNmY3OWM4MjFhMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOfE+xDNNjphivlHTzJD6JJBuo+9V4OnUB2O qZDOymBYiJ2x30a7kfEDvqxQMMKFmYmof8iPNlJWZdTJpwEMQnIMAfxhZFWUsqk2 ZFZUlCftHH68wSvc3TIXwJYnyrNAKjDQmcesL8kh4D0oFjmesjtWZcxxnFe8CK7I 7UdM2KlB5BdoRV8FepvG520q00cmFLTtIfD0d+x4t1ZaBNrvP+BuXpcduzayd2HK ZVTY7CDRw2TvvRpwDj+RjzgsxhyuNCiYBtUETRH+B8W/86l2OAgpCvjSTniag3ml fWcTdQW+fQd0DLFZSVRNZ98R7zFiW+0zgh6L/xWC9QswGUQyWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYjRLO1ZQ/r4UIAOBDu80zyD7/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYTE1MmQ4YzQtMmVlZC0z NjJjLWIxOTUtYzVmNmUxODgwNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Em0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdAAaVfNjRtu9XWUEyhRtCgQlaPq+cLV93OimQV/o3RJQI1FDITiwVj GtK53+QsSzVrgRIIobwa+NsGUoB+mOsIzJHv6Wcu2g6y4exBsLNUBHs2VRIoEwvP 6XO/vqpdMd7IPFBBaLZhMuvIKSH/xA8p+jRXtjY3pWSkRWE8LU9/4jVm+pEJpiOy Mv58svasV3TjnaBjj6A6AjDdHj68YQ47CWkjU57H68zjib2KmfbhgUY6bs2J3JBm M1ea7xi1BCxLgEUPug1n+YegCs12vpTUDbFbAC4RLkjBDG913R+ZgM2W4u4s61IT BTvdIHkm1DX6ClP8E66OvKAF24F4KgM= -----END CERTIFICATE-----Generated at Sun Jun 15 21:33:14 2025 by rpki-client