$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa File: ef167bf0-e97f-3b1d-8343-53f8aceab489.roa (raw, json) Hash identifier: cItZCBqzA6nKrs6QNRYj1un/55KSmscFhMib7AihUXg= Subject key identifier: AC:33:C9:59:DA:1A:46:65:8F:8F:4F:D5:3A:CB:F6:7E:62:A4:CF:67 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F43285849FCAA6E2A3FE6AC67B3DD4E80 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 174 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:6e:2a:3f:e6:ac:67:b3:dd:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=3b9a4183-4b95-47fe-980c-0d92dd59694e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:d5:71:77:5c:2e:78:45:18:d0:70:9b:94: 35:26:ed:bb:71:7e:8c:67:e9:9c:3b:ef:b0:e9:71: 7f:31:10:4c:df:f7:41:6b:18:32:3d:94:8c:e5:a6: 89:81:82:83:66:c6:4a:d3:fb:b1:65:87:b7:c5:a3: e3:d1:a1:1c:ae:7e:0d:9f:2c:0d:e7:9f:ee:87:61: be:a8:46:33:ff:b1:55:e4:b0:89:98:bb:a9:61:a8: 1b:e0:99:82:a7:07:33:34:15:9d:67:3c:05:5b:51: 47:23:d5:f5:62:a6:97:fd:8a:71:04:1a:a2:07:0c: 58:c3:7a:b8:c9:dd:9a:a4:cb:e8:f4:ef:9a:81:dd: b1:71:91:7e:e0:ad:66:fa:e4:12:d3:40:10:b2:c2: 70:c7:e5:42:b7:98:97:5b:64:cd:bf:6a:c6:f7:ae: e3:9f:b6:b3:07:23:62:16:5b:d5:30:2f:96:7f:25: 80:d4:fd:f7:96:11:f1:86:fe:2b:1d:9d:3c:f8:cb: b4:2e:77:d3:19:e2:cc:5c:0f:ff:db:83:65:7f:e5: 77:93:e3:28:ee:7d:b9:96:c1:b0:5a:3d:57:98:44: e4:7c:2e:8e:7b:5b:96:46:e9:c3:f6:8c:9d:4c:04: 33:bf:f3:44:60:59:2c:2b:2b:49:35:29:7a:7d:56: e7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:33:C9:59:DA:1A:46:65:8F:8F:4F:D5:3A:CB:F6:7E:62:A4:CF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9a:69:46:3d:d4:20:ed:01:d3:59:cc:02:b9:7d:9b:f1:d3: bb:c7:3e:9c:28:c1:03:16:ef:b1:f5:57:fe:5b:49:5a:d4:37: d3:3d:cf:71:a8:52:d3:d9:a7:75:2d:19:f3:e1:04:e2:51:c2: 19:8c:fd:2a:56:4e:12:a5:ee:e0:af:97:28:3b:6b:ca:4c:f8: a4:2b:b4:0a:0d:20:38:0e:7b:ab:67:f6:da:08:3c:7b:e7:63: ef:00:3d:0a:53:52:02:c3:da:46:67:06:e2:29:36:23:84:05: 13:07:77:1e:63:8e:0c:fe:72:c3:a5:a3:28:48:2c:17:cd:6a: 4e:0e:4d:2c:f7:3d:d4:95:c5:c1:b0:92:27:34:a3:44:3d:30: b2:49:24:63:4a:27:99:90:4a:de:81:1e:1b:ce:30:99:38:db: d1:d5:0e:0c:fa:54:7a:68:5d:72:2b:cc:bc:5b:e6:0e:f1:b0: 8f:0c:cb:fb:8e:3f:38:56:eb:bc:13:a0:27:ba:15:94:cc:8e: 86:ba:af:af:6d:14:c2:ed:64:25:36:02:38:b0:91:56:81:9e: 83:01:25:c7:a8:ae:ab:c0:91:c9:8d:4b:d9:31:75:35:9c:d9: e0:a1:51:33:b6:f1:ee:e6:d1:35:44:7b:60:4f:16:cf:84:7a: 06:c9:1c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qm4qP+asZ7PdToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk M2I5YTQxODMtNGI5NS00N2ZlLTk4MGMtMGQ5MmRkNTk2OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2PVcXdcLnhFGNBwm5Q1Ju27cX6MZ+mcO++w 6XF/MRBM3/dBaxgyPZSM5aaJgYKDZsZK0/uxZYe3xaPj0aEcrn4NnywN55/uh2G+ qEYz/7FV5LCJmLupYagb4JmCpwczNBWdZzwFW1FHI9X1YqaX/YpxBBqiBwxYw3q4 yd2apMvo9O+agd2xcZF+4K1m+uQS00AQssJwx+VCt5iXW2TNv2rG967jn7azByNi FlvVMC+WfyWA1P33lhHxhv4rHZ08+Mu0LnfTGeLMXA//24Nlf+V3k+Mo7n25lsGw Wj1XmETkfC6Oe1uWRunD9oydTAQzv/NEYFksKytJNSl6fVbnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwzyVnaGkZlj49P1TrL9n5ipM9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvZWYxNjdiZjAtZTk3Zi0z YjFkLTgzNDMtNTNmOGFjZWFiNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmaaUY91CDtAdNZzAK5fZvx07vHPpwowQMW77H1V/5bSVrUN9M9z3Go UtPZp3UtGfPhBOJRwhmM/SpWThKl7uCvlyg7a8pM+KQrtAoNIDgOe6tn9toIPHvn Y+8APQpTUgLD2kZnBuIpNiOEBRMHdx5jjgz+csOloyhILBfNak4OTSz3PdSVxcGw kic0o0Q9MLJJJGNKJ5mQSt6BHhvOMJk429HVDgz6VHpoXXIrzLxb5g7xsI8My/uO PzhW67wToCe6FZTMjoa6r69tFMLtZCU2AjiwkVaBnoMBJceorqvAkcmNS9kxdTWc 2eChUTO28e7m0TVEe2BPFs+EegbJHGQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:34:57 2025 by rpki-client