$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa File: c54be940-176e-3507-b859-c6607747abb6.roa (raw, json) Hash identifier: kZz62w7haT8ydPnVrOM1ylwAkc36zfN+GgNgLaV2EhI= Subject key identifier: AE:57:4C:A1:49:80:E0:6E:D6:32:D6:43:FF:C1:37:B2:25:48:46:72 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F43285849E22512F3B7F00503DCF76EC0 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 16509 IP address blocks: 192.184.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:12:f3:b7:f0:05:03:dc:f7:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=7d2f4d13-f1e7-47e6-a795-e212baa14a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:4d:2b:6a:05:cd:3b:94:46:c9:ee:af:53: b8:6f:49:91:86:9c:59:d2:d1:2b:5a:a1:2d:1e:f7: 0b:2e:f6:29:5c:cc:4b:73:41:de:a0:fc:43:4f:61: a2:f8:b6:ae:10:f7:82:1b:9a:e3:34:9d:67:fe:95: 79:ca:ca:75:4e:38:98:38:57:ee:87:dd:f8:83:11: 5a:0e:75:c3:61:86:d0:29:bf:53:aa:2d:bc:34:d7: e8:2e:78:db:ae:3e:32:53:ba:88:5e:c2:7a:74:79: ea:ad:a0:1f:c4:66:b8:d5:4c:de:0c:28:54:63:0c: 83:c4:ad:93:fd:a7:c8:5d:08:38:d1:c2:af:e9:ab: 3e:ed:9c:02:2c:0e:14:eb:b4:28:32:f3:82:c7:73: 2b:fa:e9:05:c8:23:20:2c:d1:65:a9:55:6f:5b:ed: cc:c8:d7:28:f7:28:f2:17:f8:6e:4c:95:ae:4f:f3: d5:ea:06:67:5a:20:87:30:2c:9e:b0:62:f4:fa:3d: 22:a7:4d:b4:ab:84:8d:7d:5a:6a:14:20:a9:34:7a: 81:17:27:96:bc:c4:a5:36:c0:8e:7c:dc:eb:1a:b2: 2d:70:65:67:ec:1c:6b:19:67:21:98:15:fc:91:82: b6:67:c3:4b:8a:a0:17:cc:b3:f7:ca:9e:84:26:34: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:57:4C:A1:49:80:E0:6E:D6:32:D6:43:FF:C1:37:B2:25:48:46:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:7a:ca:fa:61:93:79:b5:73:fd:12:91:e9:e8:21:c8:b0:c5: 51:36:70:de:8a:fc:eb:42:c8:c7:19:be:f3:b6:3a:0b:d7:ab: 0d:f2:77:0a:76:fa:b5:d7:49:58:d8:f6:3b:74:16:2a:12:fb: 18:5e:60:87:6a:9a:f2:b3:12:43:30:21:55:3b:48:44:0b:56: 9c:a1:d5:77:99:7e:d2:c6:5e:5c:f4:27:3a:d9:4f:07:9f:cd: d6:a7:f2:c2:81:6e:8f:e5:0f:7a:1e:f3:fc:c7:d3:17:09:98: 8f:95:e6:be:b1:9c:f7:f7:ea:fe:1f:05:31:22:ec:22:d8:f5: 10:7f:4d:62:5e:c2:17:ec:51:96:79:91:97:19:07:59:b5:d6: 30:c4:ba:5c:b7:42:99:d7:41:bd:4e:7d:e0:03:d9:5d:9d:ef: 71:b0:0b:a6:2c:cd:df:63:84:86:39:0f:36:16:15:de:42:7d: 1b:57:e9:47:e8:f1:04:c1:65:9b:e8:91:21:3b:3c:9f:d7:6d: cc:77:be:1d:34:fb:cd:b6:f2:78:56:97:05:cd:76:4f:d5:d3: 6a:81:7e:ed:ce:11:c9:e5:e1:4e:39:3a:8b:be:fa:4c:eb:6c: 3c:9f:f1:90:ad:6c:d0:83:31:35:6a:e1:8c:4c:31:8e:4e:e1: 67:37:c2:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRLzt/AFA9z3bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk N2QyZjRkMTMtZjFlNy00N2U2LWE3OTUtZTIxMmJhYTE0YTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG5NK2oFzTuURsnur1O4b0mRhpxZ0tErWqEt HvcLLvYpXMxLc0HeoPxDT2Gi+LauEPeCG5rjNJ1n/pV5ysp1TjiYOFfuh934gxFa DnXDYYbQKb9Tqi28NNfoLnjbrj4yU7qIXsJ6dHnqraAfxGa41UzeDChUYwyDxK2T /afIXQg40cKv6as+7ZwCLA4U67QoMvOCx3Mr+ukFyCMgLNFlqVVvW+3MyNco9yjy F/huTJWuT/PV6gZnWiCHMCyesGL0+j0ip020q4SNfVpqFCCpNHqBFyeWvMSlNsCO fNzrGrItcGVn7BxrGWchmBX8kYK2Z8NLiqAXzLP3yp6EJjSt6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5XTKFJgOBu1jLWQ//BN7IlSEZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYzU0YmU5NDAtMTc2ZS0z NTA3LWI4NTktYzY2MDc3NDdhYmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR6yvphk3m1c/0SkenoIciwxVE2cN6K/OtCyMcZvvO2OgvXqw3ydwp2 +rXXSVjY9jt0FioS+xheYIdqmvKzEkMwIVU7SEQLVpyh1XeZftLGXlz0JzrZTwef zdan8sKBbo/lD3oe8/zH0xcJmI+V5r6xnPf36v4fBTEi7CLY9RB/TWJewhfsUZZ5 kZcZB1m11jDEuly3QpnXQb1OfeAD2V2d73GwC6Yszd9jhIY5DzYWFd5CfRtX6Ufo 8QTBZZvokSE7PJ/Xbcx3vh00+8228nhWlwXNdk/V02qBfu3OEcnl4U45Oou++kzr bDyf8ZCtbNCDMTVq4YxMMY5O4Wc3wok= -----END CERTIFICATE-----Generated at Sat Jun 14 06:44:20 2025 by rpki-client