$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/68340a96-585d-331a-8f2b-46a024c14bdc.roa File: 68340a96-585d-331a-8f2b-46a024c14bdc.roa (raw, json) Hash identifier: mArtGQA2DbgadsQzrmc0pLSgzelzUjnmEv3/hO8PET0= Subject key identifier: C3:39:06:9A:B4:D0:93:6D:AF:DE:87:03:24:37:C0:5E:70:D2:76:CD Certificate issuer: /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Certificate serial: 010D0C9F43285849ABB4A9453ED03EEF70845200 Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/68340a96-585d-331a-8f2b-46a024c14bdc.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 211061 IP address blocks: 185.216.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a9:45:3e:d0:3e:ef:70:84:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=cb48a7a6-f73c-4816-8958-1055a1b6f425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:3e:6e:10:f3:91:ac:4c:9e:dc:fc:b0:bf: d2:d9:5f:e0:c9:07:6d:37:f3:bd:d7:80:57:e1:69: 37:31:d8:1c:5a:35:92:cb:1e:4c:3f:c9:a1:49:7c: fd:bf:02:74:29:25:64:f8:56:5d:f8:82:88:9e:27: 80:54:48:7b:2f:a5:a4:7b:bf:12:c4:a3:c0:4a:ea: e6:2d:f8:a6:e0:f7:64:72:bc:d1:15:fc:ad:05:44: e7:78:a5:0f:56:fe:81:98:9b:d5:df:aa:59:2d:38: 3c:79:d7:26:6a:49:b5:36:73:8d:6c:c0:8f:b2:fc: cb:d0:32:a0:64:80:0b:be:58:49:f8:4d:4f:cc:ee: bf:ab:b4:c7:f2:d5:d9:3f:c2:a7:ef:21:96:2e:68: 4a:40:3e:19:33:05:5a:57:e9:7a:1a:32:d6:5c:0d: 70:69:f0:2b:56:7a:a6:a1:41:ff:ad:3e:e3:30:b3: 55:49:5f:ee:e7:f7:5b:5c:a6:14:57:78:e8:86:93: 81:40:b3:d9:c5:74:92:c7:4f:58:13:f4:a6:35:14: c9:c4:22:12:bb:00:6a:da:d1:08:46:34:e7:f4:10: 7a:fc:81:de:44:44:2a:45:e0:d9:26:0f:68:1a:cd: 6b:a8:a1:ea:95:55:b5:d1:fe:69:eb:a3:6d:f4:55: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:39:06:9A:B4:D0:93:6D:AF:DE:87:03:24:37:C0:5E:70:D2:76:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/68340a96-585d-331a-8f2b-46a024c14bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl X509v3 Authority Key Identifier: keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer sbgp-ipAddrBlock: critical IPv4: 185.216.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e2:5b:89:2d:5d:d1:0e:6a:c2:a4:ed:ba:1d:5b:7f:67:3c: d9:e0:57:ef:1d:7a:6a:db:9c:c6:9e:1e:7a:bd:00:c6:04:75: 90:72:ae:af:e7:1d:79:52:f5:17:be:31:e3:94:15:1e:55:42: 92:d8:54:9b:61:01:d1:7f:f4:4e:32:ef:c7:b7:4e:bc:e4:4d: 6d:e1:2a:47:b7:83:5d:51:06:a9:fc:b2:aa:9f:fe:2a:44:e7: f2:55:48:98:98:e7:ff:35:06:68:a3:bf:b2:f9:3a:b7:ef:9c: 4f:cd:70:c9:4c:3c:42:3d:85:43:4c:52:81:3b:42:69:c4:2b: bd:91:a3:f0:1c:1e:82:c5:83:13:9e:fa:94:65:77:1b:87:03: 3e:ad:89:57:38:73:a0:ea:62:1f:80:c5:14:13:0a:4d:16:cb: f3:a7:d9:1b:9e:e6:cb:b7:9f:63:34:d8:0b:06:07:23:9d:5f: 61:c3:89:b6:46:89:ab:21:2c:b3:8b:ec:62:16:57:32:ef:71: ee:4d:43:f9:35:fb:b8:3d:03:42:69:dd:8b:13:53:b5:2a:03: c5:53:d5:4c:fe:52:80:c4:21:a6:17:5f:02:c3:31:c2:ea:98: b3:d4:13:c5:31:24:db:67:68:1d:e4:6c:33:24:51:c1:0d:a2: b2:f2:63:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKlFPtA+73CEUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJk ODgyMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk Y2I0OGE3YTYtZjczYy00ODE2LTg5NTgtMTA1NWExYjZmNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldo+bhDzkaxMntz8sL/S2V/gyQdtN/O914BX 4Wk3MdgcWjWSyx5MP8mhSXz9vwJ0KSVk+FZd+IKInieAVEh7L6Wke78SxKPASurm Lfim4PdkcrzRFfytBUTneKUPVv6BmJvV36pZLTg8edcmakm1NnONbMCPsvzL0DKg ZIALvlhJ+E1PzO6/q7TH8tXZP8Kn7yGWLmhKQD4ZMwVaV+l6GjLWXA1wafArVnqm oUH/rT7jMLNVSV/u5/dbXKYUV3johpOBQLPZxXSSx09YE/SmNRTJxCISuwBq2tEI RjTn9BB6/IHeREQqReDZJg9oGs1rqKHqlVW10f5p66Nt9FW5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM5Bpq00JNtr96HAyQ3wF5w0nbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZh ODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvNjgzNDBhOTYtNTg1ZC0z MzFhLThmMmItNDZhMDI0YzE0YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVmYTg4MjktNTZmNS00YWMxLTk4 YzYtZTRiZjExOWJkODgyLzZlZmE4ODI5LTU2ZjUtNGFjMS05OGM2LWU0YmYxMTli ZDg4Mi5jcmwwHwYDVR0jBBgwFoAUIQdQimQNva+rxX/XYBlsUIFiUdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJm MTE5YmQ4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudh/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIziW4ktXdEOasKk7bodW39nPNngV+8demrbnMaeHnq9AMYEdZByrq/n HXlS9Re+MeOUFR5VQpLYVJthAdF/9E4y78e3TrzkTW3hKke3g11RBqn8sqqf/ipE 5/JVSJiY5/81Bmijv7L5OrfvnE/NcMlMPEI9hUNMUoE7QmnEK72Ro/AcHoLFgxOe +pRldxuHAz6tiVc4c6DqYh+AxRQTCk0Wy/On2Rue5su3n2M02AsGByOdX2HDibZG iashLLOL7GIWVzLvce5NQ/k1+7g9A0Jp3YsTU7UqA8VT1Uz+UoDEIaYXXwLDMcLq mLPUE8UxJNtnaB3kbDMkUcENorLyY8o= -----END CERTIFICATE-----Generated at Mon May 12 16:00:01 2025 by rpki-client