$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa File: c23a7526-f08d-3cf8-92df-a220fcbaffac.roa (raw, json) Hash identifier: Dml8lIVqBXziaUcDn936eYGY7tE3egH5lWfpEA7WltU= Subject key identifier: 9A:42:E4:34:33:2A:DB:D1:98:AB:34:05:C8:5D:B2:E7:DE:C6:DB:E8 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F43285849E7BA723770EACB62DDE41D40 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 192.184.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:72:37:70:ea:cb:62:dd:e4:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=41c25a9b-efe2-4fec-87aa-1b6ebe069f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:21:30:20:dc:d3:d4:d1:07:2f:02:9a:cc: a1:49:d3:c2:31:ac:d3:6f:f2:4c:30:1b:ba:3c:32: e6:99:53:ab:02:16:e2:24:1f:a7:77:04:d5:4b:29: b3:17:08:71:05:00:89:bb:ab:26:e8:3a:a3:4d:bd: 78:72:e7:48:68:fe:c9:76:c4:1c:e6:f1:95:c1:13: cf:c8:bd:9c:f1:5c:cb:93:73:52:65:03:52:0d:a3: 08:0a:2e:e6:ae:68:b3:9f:03:5b:9d:92:a1:7b:78: c5:a2:2e:ec:41:ce:93:01:6e:50:15:a5:d3:d5:cf: 9a:32:55:e1:0c:f6:af:ef:2a:1b:94:c5:82:33:8a: 43:ed:8e:f7:1d:93:8c:26:70:84:29:a8:f6:de:05: b0:cd:71:c1:66:79:67:06:b4:30:7b:8f:4a:15:89: f6:bb:76:6a:01:ae:7e:b1:f9:a8:83:73:60:ec:38: c8:89:1b:1f:be:8d:50:ea:a2:53:7d:4d:62:e6:72: bb:7d:61:46:e1:87:6c:dc:ff:27:d9:12:f4:05:3f: 8f:c6:7c:f6:80:1f:da:fc:f1:7c:67:71:54:5e:f6: eb:8d:84:87:a7:99:d0:7c:15:e3:5f:0a:ec:c5:21: a5:ba:b5:86:38:d4:70:ec:32:66:79:6d:97:2b:6d: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:42:E4:34:33:2A:DB:D1:98:AB:34:05:C8:5D:B2:E7:DE:C6:DB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:20:22:88:8d:1a:89:94:a8:02:a1:9a:c4:b5:7f:3e:1a:23: 06:70:9d:20:64:9f:e3:09:6d:e2:f3:14:69:6f:c4:bf:12:1d: 83:4f:53:c7:42:00:65:97:b3:c1:d8:bf:f1:a4:d9:63:92:a9: 4a:f1:4f:31:7e:94:c4:a5:f8:05:a0:f8:e1:17:02:3a:2c:85: 30:cd:dc:1d:b7:40:12:1c:d5:5e:f9:6d:7d:32:57:c8:f7:a5: 69:55:b9:24:3a:89:c5:b5:e8:08:f5:8b:01:44:92:27:07:4c: 4f:c7:7a:71:95:da:1e:4e:7a:81:64:a7:e9:76:31:78:6e:f3: 95:e3:e5:95:aa:9b:e3:4e:af:21:1a:08:ab:c8:40:9f:0b:1c: 53:de:84:32:ac:70:a1:90:ef:5a:ed:41:73:f3:59:b2:e5:8b: a1:a5:db:7a:ea:ef:b5:b8:cf:09:49:31:09:80:e0:70:cc:7c: 4e:fc:ee:15:b4:7d:f5:31:b6:68:3e:f8:a6:a6:5a:c9:ea:ca: 6d:46:78:28:ab:e2:28:2c:88:aa:83:60:a0:70:0f:5e:42:78: f2:22:f4:1c:13:fb:b6:6c:6e:3c:a2:7d:95:6d:c0:a5:a4:e9: ae:f9:98:b6:09:0e:8d:35:21:a3:af:a5:29:5c:5c:df:06:ce: fc:eb:c6:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunI3cOrLYt3kHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NDFjMjVhOWItZWZlMi00ZmVjLTg3YWEtMWI2ZWJlMDY5ZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIUhMCDc09TRBy8CmsyhSdPCMazTb/JMMBu6 PDLmmVOrAhbiJB+ndwTVSymzFwhxBQCJu6sm6DqjTb14cudIaP7JdsQc5vGVwRPP yL2c8VzLk3NSZQNSDaMICi7mrmiznwNbnZKhe3jFoi7sQc6TAW5QFaXT1c+aMlXh DPav7yoblMWCM4pD7Y73HZOMJnCEKaj23gWwzXHBZnlnBrQwe49KFYn2u3ZqAa5+ sfmog3Ng7DjIiRsfvo1Q6qJTfU1i5nK7fWFG4Yds3P8n2RL0BT+Pxnz2gB/a/PF8 Z3FUXvbrjYSHp5nQfBXjXwrsxSGlurWGONRw7DJmeW2XK20nOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpC5DQzKtvRmKs0BchdsufextvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYzIzYTc1MjYtZjA4ZC0z Y2Y4LTkyZGYtYTIyMGZjYmFmZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcgIoiNGomUqAKhmsS1fz4aIwZwnSBkn+MJbeLzFGlvxL8SHYNPU8dC AGWXs8HYv/Gk2WOSqUrxTzF+lMSl+AWg+OEXAjoshTDN3B23QBIc1V75bX0yV8j3 pWlVuSQ6icW16Aj1iwFEkicHTE/HenGV2h5OeoFkp+l2MXhu85Xj5ZWqm+NOryEa CKvIQJ8LHFPehDKscKGQ71rtQXPzWbLli6Gl23rq77W4zwlJMQmA4HDMfE787hW0 ffUxtmg++KamWsnqym1GeCir4igsiKqDYKBwD15CePIi9BwT+7ZsbjyifZVtwKWk 6a75mLYJDo01IaOvpSlcXN8Gzvzrxjw= -----END CERTIFICATE-----Generated at Sat Jun 14 06:04:11 2025 by rpki-client