$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa File: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (raw, json) Hash identifier: OPb541zWopUKdkfLvfiRYNiieIe2cCh1wBVrCYOIoY8= Subject key identifier: 48:94:51:8A:72:3E:CC:C7:5C:D8:2B:55:DE:8D:D1:F4:93:FD:3A:02 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584A0C055E8AC8054198D1CC8F80 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5e:8a:c8:05:41:98:d1:cc:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=80be7b07-0425-47d0-b04c-1b7b4ccd10c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:e3:66:16:59:c7:fd:18:20:3e:c7:9e:29: 47:e9:c9:76:81:a1:54:2a:76:29:ba:40:bf:bc:db: 93:27:a5:bb:55:34:0f:40:eb:ee:b9:72:39:4b:82: 6b:77:8b:f3:21:e2:4e:23:25:0e:72:10:47:f8:00: b5:0d:b7:e3:84:b5:3d:67:0e:8c:d6:b7:78:39:8a: 7c:85:d2:52:06:20:f5:27:94:d3:0c:02:ca:5d:da: 97:d4:76:bf:cd:84:b2:72:ac:50:fa:6a:da:06:d9: 27:42:25:5d:5b:12:f3:25:f3:04:4c:3d:e4:c0:a7: 53:dd:bf:74:e6:b4:f2:18:d4:d5:f8:b1:cd:af:04: 30:aa:e8:e5:0b:cc:e8:0b:a0:3f:f4:3a:23:15:85: fc:b5:ab:f8:3b:31:b3:8d:1b:38:97:e9:a1:60:ff: 81:19:a9:85:87:19:b9:09:62:94:91:10:97:39:df: 92:f0:49:03:d8:48:3e:e6:e4:2b:11:04:9e:16:33: 0a:d8:1f:83:d8:0b:4b:f6:d3:4f:85:28:35:33:00: 3a:d7:30:1b:fd:5f:56:c2:08:50:cd:37:69:5f:40: 31:33:29:ec:f4:05:29:0b:e4:56:5b:97:4b:0f:ec: f0:ee:67:88:3e:fe:7e:24:67:df:32:f4:7f:d3:90: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:51:8A:72:3E:CC:C7:5C:D8:2B:55:DE:8D:D1:F4:93:FD:3A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fe:3c:12:2b:ef:c4:12:fc:87:52:c2:03:67:59:6b:b7:0a: 67:97:fe:66:a6:76:b4:f5:11:b1:42:2f:7f:32:3f:76:5c:8a: 9b:eb:8b:33:db:89:58:72:03:57:f3:42:ab:fe:8f:40:24:7f: d8:ca:f1:72:1f:38:8a:94:60:b8:46:fe:de:df:f7:3e:5b:9a: 66:94:eb:5f:48:e3:e5:37:98:9e:15:58:78:e0:5e:3f:37:b6: 42:27:f2:d5:0b:b7:6a:da:28:d9:2e:db:a8:45:30:c9:3f:2f: 99:e1:3e:ac:d8:e7:ae:30:ed:9b:ea:92:42:30:41:14:d9:87: eb:75:ec:0b:9a:d8:94:59:be:b6:c8:67:48:2c:bd:3e:ad:0e: d4:d8:47:71:bf:a9:3d:03:70:39:79:76:9f:dc:57:fd:25:5a: fa:48:77:48:c3:d5:87:34:05:79:c1:80:ee:b1:f4:5b:e1:65: b4:5d:a9:7f:97:4e:51:75:4a:f1:98:58:45:64:78:5a:ed:5c: b6:b8:0a:fd:9a:5d:e9:39:ae:e3:b2:14:13:e3:f1:63:99:16: 0a:c2:ae:6b:ca:9b:e6:19:f7:0c:2d:60:e7:be:4d:57:f0:8d: 69:38:c5:8e:fc:1b:17:e3:48:7a:6f:7d:7f:13:55:50:ed:90: 7c:f5:cf:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBV6KyAVBmNHMj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ODBiZTdiMDctMDQyNS00N2QwLWIwNGMtMWI3YjRjY2QxMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt7jZhZZx/0YID7HnilH6cl2gaFUKnYpukC/ vNuTJ6W7VTQPQOvuuXI5S4Jrd4vzIeJOIyUOchBH+AC1DbfjhLU9Zw6M1rd4OYp8 hdJSBiD1J5TTDALKXdqX1Ha/zYSycqxQ+mraBtknQiVdWxLzJfMETD3kwKdT3b90 5rTyGNTV+LHNrwQwqujlC8zoC6A/9DojFYX8tav4OzGzjRs4l+mhYP+BGamFhxm5 CWKUkRCXOd+S8EkD2Eg+5uQrEQSeFjMK2B+D2AtL9tNPhSg1MwA61zAb/V9WwghQ zTdpX0AxMyns9AUpC+RWW5dLD+zw7meIPv5+JGffMvR/05A/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiUUYpyPszHXNgrVd6N0fST/ToCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvZjg5MGIxODgtYjYxMC0z OGEwLTg5YjAtOGExYTYyZDI0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3+PBIr78QS/IdSwgNnWWu3CmeX/mamdrT1EbFCL38yP3ZcipvrizPb iVhyA1fzQqv+j0Akf9jK8XIfOIqUYLhG/t7f9z5bmmaU619I4+U3mJ4VWHjgXj83 tkIn8tULt2raKNku26hFMMk/L5nhPqzY564w7ZvqkkIwQRTZh+t17Aua2JRZvrbI Z0gsvT6tDtTYR3G/qT0DcDl5dp/cV/0lWvpId0jD1Yc0BXnBgO6x9FvhZbRdqX+X TlF1SvGYWEVkeFrtXLa4Cv2aXek5ruOyFBPj8WOZFgrCrmvKm+YZ9wwtYOe+TVfw jWk4xY78GxfjSHpvfX8TVVDtkHz1zwE= -----END CERTIFICATE-----Generated at Sun Jun 15 09:03:04 2025 by rpki-client