$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa File: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (raw, json) Hash identifier: 1DxabKzIkOPmE/SJ/InKvGilJUOYEevXmTeUrVynit8= Subject key identifier: A6:4D:95:FE:8E:6A:A5:B3:60:2A:B6:04:9C:30:2A:A3:C2:1A:DD:B6 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584A0C055E9C1E82CD1E6F3EDA80 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5e:9c:1e:82:cd:1e:6f:3e:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=aae6b3cc-15a7-4368-968c-ec9350944ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:9b:9e:a7:8b:5e:b2:72:fd:17:a3:48:b7: e0:ec:22:10:15:74:97:ee:f1:d8:51:05:15:5b:68: f4:cb:8e:c3:51:4a:2f:4d:83:06:bf:9f:33:13:ba: e6:c5:51:83:30:e7:b1:b6:be:d6:d2:2f:d7:90:2f: 88:39:d6:0a:46:b1:db:ec:fd:c9:72:13:a3:a4:49: 5d:a4:c1:76:75:de:f3:3f:06:94:26:99:2d:27:20: 1c:5f:4d:c3:2f:54:d9:3c:bd:59:60:9a:d0:1c:18: e5:30:fe:eb:dd:28:86:10:2a:a9:4d:65:49:9c:59: 04:a2:4f:0b:1d:61:d2:2a:60:ea:62:7c:1c:06:ad: f1:f4:52:8c:e8:91:d6:39:79:e4:27:37:c8:3c:46: 69:91:ef:bb:c5:69:33:f9:94:af:57:f6:95:bc:a0: 89:e7:4e:68:c1:2f:30:b3:10:90:55:6a:e4:88:18: 57:f1:a2:a8:ac:20:52:e1:f0:0f:7c:ab:f7:f6:18: 8f:f3:6a:ab:37:12:7a:0e:a2:e2:9d:0b:0d:fa:1f: 4c:80:b9:07:96:a9:3c:49:50:d5:fd:b0:98:7f:62: 56:bc:e0:c7:87:31:8b:fb:bd:ef:54:98:96:55:75: 49:6a:30:b9:c8:14:10:dd:b4:78:ae:03:47:2f:c4: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:95:FE:8E:6A:A5:B3:60:2A:B6:04:9C:30:2A:A3:C2:1A:DD:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7f:87:a6:81:d3:63:3b:8c:7f:42:00:ab:53:37:9c:cb:8f: 0a:41:73:c3:48:18:6b:9d:48:94:c1:00:ae:ee:25:b4:47:60: 98:af:6d:15:b0:68:a2:17:54:4f:91:03:74:2e:8f:25:1a:a1: 23:2a:dc:b3:67:ca:5f:2e:dd:a5:6b:a3:8d:76:26:30:24:ff: fe:f8:51:5e:31:b3:e0:56:55:04:c9:d2:38:bc:88:0f:d6:38: af:4f:c4:9a:b4:03:a3:b8:3d:63:d3:0a:2c:eb:ee:60:25:c2: 5c:e9:74:11:25:af:0a:2e:5a:05:ef:74:42:05:c4:4a:e6:54: a7:5b:9b:7a:0a:a3:45:d8:3f:2a:b9:b6:de:1e:56:01:b3:b5: 4c:fe:5a:44:3c:9f:8d:92:70:66:b5:01:ff:70:b5:fe:f7:58: dc:fc:22:20:a1:17:53:25:12:80:e4:3b:cd:c6:6b:af:75:dc: dd:2a:dd:d3:fb:1e:86:19:7e:b1:fd:a3:af:99:9a:7d:42:18: 5b:7a:ea:34:b1:f2:ef:a5:4d:3a:e7:9e:14:d2:d4:2c:66:a6: fc:c0:e6:db:af:fd:23:4b:9a:0a:5d:5d:93:41:42:ce:a2:f5: a2:a9:d1:47:52:29:c0:7b:a8:c6:5a:5e:4a:c1:46:de:e5:ab: 52:fa:ef:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBV6cHoLNHm8+2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YWFlNmIzY2MtMTVhNy00MzY4LTk2OGMtZWM5MzUwOTQ0YWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTibnqeLXrJy/RejSLfg7CIQFXSX7vHYUQUV W2j0y47DUUovTYMGv58zE7rmxVGDMOextr7W0i/XkC+IOdYKRrHb7P3JchOjpEld pMF2dd7zPwaUJpktJyAcX03DL1TZPL1ZYJrQHBjlMP7r3SiGECqpTWVJnFkEok8L HWHSKmDqYnwcBq3x9FKM6JHWOXnkJzfIPEZpke+7xWkz+ZSvV/aVvKCJ505owS8w sxCQVWrkiBhX8aKorCBS4fAPfKv39hiP82qrNxJ6DqLinQsN+h9MgLkHlqk8SVDV /bCYf2JWvODHhzGL+73vVJiWVXVJajC5yBQQ3bR4rgNHL8Q5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZNlf6OaqWzYCq2BJwwKqPCGt22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNDE5MDFmYjktZTg1Mi0z OGZlLTlhNGItMTNhNzg4YzY0NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB/h6aB02M7jH9CAKtTN5zLjwpBc8NIGGudSJTBAK7uJbRHYJivbRWw aKIXVE+RA3QujyUaoSMq3LNnyl8u3aVro412JjAk//74UV4xs+BWVQTJ0ji8iA/W OK9PxJq0A6O4PWPTCizr7mAlwlzpdBElrwouWgXvdEIFxErmVKdbm3oKo0XYPyq5 tt4eVgGztUz+WkQ8n42ScGa1Af9wtf73WNz8IiChF1MlEoDkO83Ga6913N0q3dP7 HoYZfrH9o6+Zmn1CGFt66jSx8u+lTTrnnhTS1CxmpvzA5tuv/SNLmgpdXZNBQs6i 9aKp0UdSKcB7qMZaXkrBRt7lq1L676U= -----END CERTIFICATE-----Generated at Sat Jun 14 06:26:18 2025 by rpki-client