$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa File: 0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa (raw, json) Hash identifier: mRTIQCwj5kefsoq5xz4StAL6kgYJwcC+GgETyqGTf+g= Subject key identifier: 20:FD:69:FA:4F:99:28:73:AD:5F:83:97:B8:8A:83:C9:35:75:BB:E8 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFD4D8C24788D6E8649EC0 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 394708 IP address blocks: 216.255.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d4:d8:c2:47:88:d6:e8:64:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=be08cefd-79c5-46dd-b3c0-9e290215608f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:de:6d:2e:fb:04:60:76:e6:d1:05:82:f3:23: d3:63:93:54:62:03:84:69:f8:94:61:83:71:95:2e: 01:e1:dc:e3:71:f5:79:0d:e6:b8:0f:0b:bf:46:99: 50:51:50:48:d6:bf:24:3b:d9:64:2c:71:95:56:69: 3b:66:02:24:80:3d:53:ea:62:c0:d7:a8:40:22:a0: 4d:89:aa:c6:19:57:57:6f:a6:c6:09:43:67:43:6f: c0:39:fb:81:66:44:12:13:50:34:22:b8:c8:c9:92: 5d:22:db:94:a6:f5:11:74:27:52:a5:8e:93:3f:e5: 2d:13:50:97:c5:2a:06:b6:2c:87:5f:12:fe:33:b2: 8d:f8:07:a1:27:15:5b:15:a0:77:65:6b:60:48:41: 0e:80:89:69:e1:c5:b3:e5:67:de:4c:d1:cc:f0:40: 76:f6:90:b5:26:2b:5b:0f:d3:19:87:27:38:e7:d9: d7:88:d3:55:8d:f7:3f:55:26:a2:35:13:88:82:d2: 58:53:33:55:09:07:59:13:77:36:ea:20:b4:3f:31: 9d:b9:ef:76:22:89:b9:60:e6:ff:d0:a2:13:18:f6: 5e:d2:5f:02:9a:18:8c:fd:e0:92:76:4e:f9:7a:25: 5d:ff:6d:f0:74:09:d4:1b:ec:45:97:2f:84:72:59: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FD:69:FA:4F:99:28:73:AD:5F:83:97:B8:8A:83:C9:35:75:BB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f2:71:ea:9f:03:3b:eb:86:4d:36:ef:95:7b:d4:ac:a7:04: be:bd:e2:ce:1d:71:94:11:60:55:b7:94:c9:9c:ee:52:8e:4e: b8:19:22:c0:42:0f:f8:f8:61:d4:23:7b:0d:93:d3:a3:f1:ec: 2b:6a:f2:49:24:40:c2:f9:66:9f:fe:7e:cf:b2:48:78:ae:cd: 5e:15:b6:9d:01:db:65:4b:2c:64:f8:b7:9d:82:49:b3:13:57: cf:f7:b8:81:b9:ff:54:9f:ff:d3:1d:77:d2:77:37:ae:e1:e2: c7:b7:24:53:ca:f3:d5:97:f5:0d:2e:a7:39:db:0e:f5:28:15: 03:8d:9e:97:68:8b:e6:40:8d:54:6a:a1:7f:ad:af:22:5c:e0: 61:56:96:95:4a:b0:75:f2:60:88:bb:28:7b:7c:09:c2:3e:97: 18:bf:2e:15:5f:ae:15:7c:6e:d8:96:02:f3:68:7a:68:1a:67: 49:ef:6f:fe:59:a3:9d:1e:9b:24:a3:84:b5:c2:e4:f3:c2:ec: 5c:2a:c8:54:2a:5b:3b:66:5a:02:0c:e0:3f:cc:e9:4e:dd:51: de:ee:78:12:74:ca:1a:38:1a:00:67:b1:3e:05:ca:8e:91:ca: c8:ed:ac:ad:63:93:00:7f:b9:1e:4f:e9:34:d9:67:6c:74:60: d5:77:fe:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539TYwkeI1uhknsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk YmUwOGNlZmQtNzljNS00NmRkLWIzYzAtOWUyOTAyMTU2MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd5tLvsEYHbm0QWC8yPTY5NUYgOEafiUYYNx lS4B4dzjcfV5Dea4Dwu/RplQUVBI1r8kO9lkLHGVVmk7ZgIkgD1T6mLA16hAIqBN iarGGVdXb6bGCUNnQ2/AOfuBZkQSE1A0IrjIyZJdItuUpvURdCdSpY6TP+UtE1CX xSoGtiyHXxL+M7KN+AehJxVbFaB3ZWtgSEEOgIlp4cWz5WfeTNHM8EB29pC1Jitb D9MZhyc459nXiNNVjfc/VSaiNROIgtJYUzNVCQdZE3c26iC0PzGdue92Iom5YOb/ 0KITGPZe0l8CmhiM/eCSdk75eiVd/23wdAnUG+xFly+EcllkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD9afpPmShzrV+Dl7iKg8k1dbvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMGFkNmUzYzEtZDQwMy0z MzQ5LTgzZjUtZjBlZjBmY2EyNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvyceqfAzvrhk0275V71KynBL694s4dcZQRYFW3lMmc7lKOTrgZIsBC D/j4YdQjew2T06Px7Ctq8kkkQML5Zp/+fs+ySHiuzV4Vtp0B22VLLGT4t52CSbMT V8/3uIG5/1Sf/9Mdd9J3N67h4se3JFPK89WX9Q0upznbDvUoFQONnpdoi+ZAjVRq oX+tryJc4GFWlpVKsHXyYIi7KHt8CcI+lxi/LhVfrhV8btiWAvNoemgaZ0nvb/5Z o50emySjhLXC5PPC7FwqyFQqWztmWgIM4D/M6U7dUd7ueBJ0yho4GgBnsT4Fyo6R ysjtrK1jkwB/uR5P6TTZZ2x0YNV3/lo= -----END CERTIFICATE-----Generated at Mon Jun 30 09:19:37 2025 by rpki-client