$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/47d773a0-c301-3fdc-a5b4-de4e617c8fbf.roa File: 47d773a0-c301-3fdc-a5b4-de4e617c8fbf.roa (raw, json) Hash identifier: x900n3m4F6++4vLrUBNSmLsg27R9xaPYv77opYrtrio= Subject key identifier: C1:A6:39:5B:AA:B6:12:7B:3D:22:DA:8A:CA:DF:53:40:42:7C:7F:32 Certificate issuer: /CN=ce029dcb-bb98-4569-a98c-6f77af488b38 Certificate serial: 010D0C9F43285849C4D4BA85161458D61F739300 Authority key identifier: C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/47d773a0-c301-3fdc-a5b4-de4e617c8fbf.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16509 IP address blocks: 192.149.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:ba:85:16:14:58:d6:1f:73:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce029dcb-bb98-4569-a98c-6f77af488b38 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=c27a6730-e3b3-45d5-8e37-68713f716c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:b0:fa:7d:78:93:ea:44:87:b8:f5:88:f7: 44:0f:83:3c:a3:3b:db:c4:91:06:79:22:7e:c9:81: 3e:ed:0b:56:23:72:d4:3b:7f:41:ab:a5:5a:fe:be: ca:97:76:cc:b8:26:9a:ba:7d:95:08:fb:fa:12:f0: fa:75:d2:66:bb:fa:56:ef:c2:37:f0:89:9a:10:70: 11:b5:f4:d1:8e:3a:f2:80:59:8a:0d:68:be:fb:30: b0:cd:c5:15:5b:76:f6:39:a7:12:ad:f7:79:c8:80: d0:be:b5:e9:57:7a:c8:3f:e4:35:d9:51:9e:35:5b: b0:9c:cf:70:ce:a4:cf:55:60:a2:99:e1:89:f9:9f: 88:be:9d:10:4e:6e:ce:a6:d1:92:f3:17:7c:5f:ab: 7e:b2:fc:47:be:45:17:6c:e3:f6:a6:50:ec:c9:77: 98:80:12:86:c2:35:27:d1:39:a6:a6:27:03:28:01: ef:b3:be:57:7b:e3:bc:44:29:15:f9:f3:04:d2:a2: 13:70:31:b2:74:d8:a2:48:2d:91:a5:f4:17:0a:94: b6:be:d9:8d:69:0a:8b:b8:5d:e1:ed:d7:9e:72:d5: d2:1d:ad:b0:fd:2b:9b:5d:98:77:21:b2:36:74:82: dc:88:48:09:54:57:95:4f:3b:dc:5f:e9:99:00:e3: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A6:39:5B:AA:B6:12:7B:3D:22:DA:8A:CA:DF:53:40:42:7C:7F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/47d773a0-c301-3fdc-a5b4-de4e617c8fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl X509v3 Authority Key Identifier: keyid:C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer sbgp-ipAddrBlock: critical IPv4: 192.149.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:32:2f:b2:6c:c5:fa:4c:67:a3:36:c3:19:f5:a2:f2:61:0e: 98:ea:f4:58:2e:79:94:f7:d7:63:03:f8:8e:7c:5b:aa:c9:e7: 79:44:b3:c7:f1:87:ea:8b:4b:74:9b:67:b4:83:d0:93:18:fe: 30:3b:97:38:35:80:c4:17:e3:27:22:53:12:6f:f5:9b:47:67: 0a:2e:b7:e1:9f:ef:6a:53:2e:30:29:5a:fa:96:57:61:c2:2f: 03:c8:e2:1b:95:31:9e:db:25:27:39:61:8b:aa:82:59:9d:1f: 93:32:4f:a7:6d:6f:9b:5b:fc:73:01:e3:c7:55:f5:62:cd:c8: 09:b6:f2:0c:e0:e8:e7:2c:d9:af:e1:e0:3d:b0:cf:32:ea:dc: 48:37:cf:9e:57:46:04:de:77:d7:fb:4f:39:4e:21:ec:29:6b: 99:bb:82:8a:7d:9f:95:88:2b:23:35:a1:4f:69:fc:1a:ee:e7: ca:81:f6:cd:a3:72:c4:f0:30:a1:09:16:ee:93:ae:1c:c8:79: ee:c8:64:31:a7:0e:54:72:76:42:4f:b7:b8:30:a2:16:8f:54: 65:99:49:4a:e4:97:48:cf:53:e9:d1:52:50:fb:34:d6:4f:7c: d7:ca:0e:5f:c3:49:50:5c:62:fe:43:13:a5:d9:34:1a:04:79: 95:fc:0b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LqFFhRY1h9zkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwMjlkY2ItYmI5OC00NTY5LWE5OGMtNmY3N2FmNDg4 YjM4MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YzI3YTY3MzAtZTNiMy00NWQ1LThlMzctNjg3MTNmNzE2YzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk62w+n14k+pEh7j1iPdED4M8ozvbxJEGeSJ+ yYE+7QtWI3LUO39Bq6Va/r7Kl3bMuCaaun2VCPv6EvD6ddJmu/pW78I38ImaEHAR tfTRjjrygFmKDWi++zCwzcUVW3b2OacSrfd5yIDQvrXpV3rIP+Q12VGeNVuwnM9w zqTPVWCimeGJ+Z+Ivp0QTm7OptGS8xd8X6t+svxHvkUXbOP2plDsyXeYgBKGwjUn 0TmmpicDKAHvs75Xe+O8RCkV+fME0qITcDGydNiiSC2RpfQXCpS2vtmNaQqLuF3h 7deectXSHa2w/SubXZh3IbI2dILciEgJVFeVTzvcX+mZAONv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGmOVuqthJ7PSLaisrfU0BCfH8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZTAy OWRjYi1iYjk4LTQ1NjktYTk4Yy02Zjc3YWY0ODhiMzgvNDdkNzczYTAtYzMwMS0z ZmRjLWE1YjQtZGU0ZTYxN2M4ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2UwMjlkY2ItYmI5OC00NTY5LWE5 OGMtNmY3N2FmNDg4YjM4L2NlMDI5ZGNiLWJiOTgtNDU2OS1hOThjLTZmNzdhZjQ4 OGIzOC5jcmwwHwYDVR0jBBgwFoAUw1kTAhO8a5Q9CXF24duOpzeW3yAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZTAyOWRjYi1iYjk4LTQ1NjktYTk4Yy02Zjc3 YWY0ODhiMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsyL7JsxfpMZ6M2wxn1ovJhDpjq9FgueZT312MD+I58W6rJ53lEs8fx h+qLS3SbZ7SD0JMY/jA7lzg1gMQX4yciUxJv9ZtHZwout+Gf72pTLjApWvqWV2HC LwPI4huVMZ7bJSc5YYuqglmdH5MyT6dtb5tb/HMB48dV9WLNyAm28gzg6Ocs2a/h 4D2wzzLq3Eg3z55XRgTed9f7TzlOIewpa5m7gop9n5WIKyM1oU9p/Bru58qB9s2j csTwMKEJFu6TrhzIee7IZDGnDlRydkJPt7gwohaPVGWZSUrkl0jPU+nRUlD7NNZP fNfKDl/DSVBcYv5DE6XZNBoEeZX8C1I= -----END CERTIFICATE-----Generated at Sat Jun 14 06:09:45 2025 by rpki-client