$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa File: 0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa (raw, json) Hash identifier: NtjlBc8bxOUdBBwTb+D3OWgknGYbXwY5sRz8gMtqymM= Subject key identifier: 1D:5C:FD:2D:AF:41:C9:F6:95:A2:6D:54:A5:C0:1E:A0:F7:B4:82:F0 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849F2E5312DFF28BD9735C02580 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 394111 IP address blocks: 216.213.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:31:2d:ff:28:bd:97:35:c0:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=a82c0243-87d7-42d1-be05-09ce6689225c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:b0:67:ff:d1:21:ad:bf:ee:d2:36:d8:36: e6:7b:ff:bc:c5:4d:e0:b9:51:92:e8:f5:fd:4d:a3: 72:bd:70:9e:c8:07:aa:b2:a9:03:a1:dc:88:cc:1e: 9f:41:c1:7e:b2:75:3a:da:3e:0d:73:f8:2f:c6:8a: e5:7f:66:f7:73:94:10:a9:3a:db:ce:4c:a0:c2:1d: ed:50:b5:58:42:0c:91:82:ec:a8:73:36:8a:ff:d4: 47:de:f1:af:e5:d1:fc:7e:0e:51:ba:22:56:d0:cf: 1f:33:55:99:3b:56:9f:03:b4:a9:d2:e6:39:88:ba: ce:ae:eb:7b:0a:fd:d1:1d:f3:de:96:c5:00:09:aa: 77:7e:ab:77:6d:94:49:db:ff:1d:ce:83:43:ad:1f: d4:af:fc:70:26:48:ae:95:7c:71:f1:60:55:f8:34: c6:90:03:b0:25:69:c7:f4:d6:b0:bf:8e:4c:09:71: 4f:92:e8:b3:c9:8a:e3:c8:21:7a:06:35:17:36:1f: 8c:23:e8:0e:de:99:ba:31:35:d6:17:f3:8c:f3:6e: 2d:8b:81:dc:cf:71:ab:c0:0f:71:ac:0f:b0:97:a0: a9:8e:3b:70:f8:6f:69:bb:92:ff:50:5d:ea:5a:0d: 59:ce:37:49:48:90:48:49:52:45:c5:bb:60:2c:70: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5C:FD:2D:AF:41:C9:F6:95:A2:6D:54:A5:C0:1E:A0:F7:B4:82:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 216.213.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e9:a4:23:7c:54:fd:79:1b:df:f0:79:9c:4e:9e:1a:e7:88: 69:68:d8:b0:82:6f:fd:9e:d7:4e:e9:ee:9d:18:48:ff:8c:60: 8e:73:95:39:74:f1:10:85:64:19:bb:84:19:83:c8:19:fd:72: 09:7c:ec:f6:11:10:85:64:fd:f6:cd:ca:9a:ce:3b:76:6d:23: a6:f3:2e:e8:15:22:1c:72:79:8f:0c:64:13:64:45:ac:47:0b: c1:c3:99:db:d3:ee:80:07:15:46:24:1d:3c:9b:54:96:51:42: 70:4f:0d:90:93:7b:64:ba:c1:b8:da:c4:66:36:a3:e0:bb:ab: ea:52:7d:18:88:0e:f5:ab:81:57:ba:3e:01:dd:e8:9b:9d:9d: 10:6a:66:4e:d1:45:2b:63:9e:4b:d6:fe:89:ba:7f:b9:78:70: bf:d9:47:22:2f:64:be:66:94:3a:d2:42:ec:b7:c8:24:63:74: 77:5e:8c:d1:72:0a:66:c3:40:11:5b:db:9f:3a:55:7d:32:0f: c4:30:b1:60:c7:0b:f7:5e:f0:83:c7:2e:ed:7b:52:13:15:b1: 77:d3:49:e7:26:a5:8b:cb:a6:cb:17:c3:ca:56:09:74:c2:e1: 03:d3:89:bd:6b:35:1b:1d:5f:8f:59:74:01:4e:5e:19:5f:d2: 07:cc:f3:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TEt/yi9lzXAJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk YTgyYzAyNDMtODdkNy00MmQxLWJlMDUtMDljZTY2ODkyMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYewZ//RIa2/7tI22Dbme/+8xU3guVGS6PX9 TaNyvXCeyAeqsqkDodyIzB6fQcF+snU62j4Nc/gvxorlf2b3c5QQqTrbzkygwh3t ULVYQgyRguyoczaK/9RH3vGv5dH8fg5RuiJW0M8fM1WZO1afA7Sp0uY5iLrOrut7 Cv3RHfPelsUACap3fqt3bZRJ2/8dzoNDrR/Ur/xwJkiulXxx8WBV+DTGkAOwJWnH 9Nawv45MCXFPkuizyYrjyCF6BjUXNh+MI+gO3pm6MTXWF/OM824ti4Hcz3GrwA9x rA+wl6Cpjjtw+G9pu5L/UF3qWg1ZzjdJSJBISVJFxbtgLHBR1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1c/S2vQcn2laJtVKXAHqD3tILwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvMGVkMTQ2OWYtZGUzMC0z YTIzLWIwZDQtNzYxY2MxMTg2YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2NUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXppCN8VP15G9/weZxOnhrniGlo2LCCb/2e107p7p0YSP+MYI5zlTl0 8RCFZBm7hBmDyBn9cgl87PYREIVk/fbNyprOO3ZtI6bzLugVIhxyeY8MZBNkRaxH C8HDmdvT7oAHFUYkHTybVJZRQnBPDZCTe2S6wbjaxGY2o+C7q+pSfRiIDvWrgVe6 PgHd6JudnRBqZk7RRStjnkvW/om6f7l4cL/ZRyIvZL5mlDrSQuy3yCRjdHdejNFy CmbDQBFb2586VX0yD8QwsWDHC/de8IPHLu17UhMVsXfTSecmpYvLpssXw8pWCXTC 4QPTib1rNRsdX49ZdAFOXhlf0gfM8zU= -----END CERTIFICATE-----Generated at Tue Jul 1 19:35:52 2025 by rpki-client