$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa File: 182e278c-4096-36f2-9644-a37d9b077a82.roa (raw, json) Hash identifier: wMX/QXnzXLNEAL/1UcAcaSk5pyV3QNAVlGFk35In9o4= Subject key identifier: AA:75:51:1E:1C:BB:31:15:2A:2E:93:DF:92:D0:69:56:96:49:BC:E1 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849F2E5317B7E55636A8536EA60 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 394111 IP address blocks: 192.225.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:31:7b:7e:55:63:6a:85:36:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=411bf1ea-36d5-48a0-b5d8-bdebcba5cb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:c6:5f:c4:de:79:1d:2a:4b:99:0e:3d:55: a8:f0:0b:59:4d:c4:4f:67:11:0b:01:48:3b:fd:14: db:89:fc:a3:75:e6:dc:59:1c:5c:0f:97:27:be:89: 56:33:60:6f:93:5c:63:51:d6:3a:78:85:be:17:c9: 07:b4:53:71:df:e9:3f:c7:9f:af:78:52:71:4a:50: 59:d7:af:ea:6f:47:d0:a1:fe:53:6e:29:d8:65:e1: ea:d6:a1:f0:b9:ad:6f:72:3b:c5:86:c4:89:1f:92: 1c:bc:2e:0a:37:3b:a0:a0:38:16:d7:36:26:8f:4a: 95:75:c4:5c:c7:4f:1f:f5:33:19:e6:1b:7b:fa:4b: 31:a6:70:c7:a8:e1:f9:6d:06:fe:cc:be:c5:97:e7: 87:55:8d:fb:80:55:f6:e9:05:cc:e9:d2:9d:a3:b1: df:e0:2a:8c:cd:89:99:69:21:23:e4:1f:8e:62:b7: 0e:0b:99:ad:d5:9c:6e:c1:65:03:9b:37:f6:10:a0: 7f:60:4d:61:fe:1f:f7:0d:5a:75:a6:2d:a2:b5:b4: b8:35:ff:ab:93:4f:cd:ad:63:57:6e:13:7e:21:0c: 4b:11:be:8b:09:c5:01:ea:f2:f8:79:80:17:d4:f7: db:ae:08:00:69:8c:a2:64:af:96:52:12:15:b3:20: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:75:51:1E:1C:BB:31:15:2A:2E:93:DF:92:D0:69:56:96:49:BC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 192.225.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5d:7c:24:8e:89:fd:65:38:44:a6:8b:a2:33:9f:b8:a5:5c: f5:ea:87:32:28:d3:d6:c8:4b:c8:38:34:1e:8d:44:a1:df:07: 11:46:47:fe:3e:eb:ca:3a:e3:5c:76:91:af:27:9a:86:55:68: c7:61:a8:ea:8f:35:e6:a3:dc:60:4c:92:c6:38:62:a0:d2:d7: ee:74:a4:fc:94:4f:dc:9c:26:7a:0d:0b:fd:da:30:c6:a7:e8: 92:e3:de:e9:a2:66:ef:3a:a2:48:e6:04:0a:b2:98:31:c6:b0: f9:a5:73:35:a7:0c:01:b2:28:a1:1b:e5:bf:0c:50:dd:55:3c: 01:87:4f:5d:fa:10:63:29:af:87:f4:3b:73:ac:9c:e1:4d:f1: 2f:00:9d:ee:58:af:9e:81:84:60:f8:9f:bb:4f:73:d8:32:07: b1:11:ab:45:ba:e1:d1:12:f2:e8:8a:af:c8:72:00:40:23:79: 12:d4:04:fa:cb:1d:02:f9:81:37:6e:a8:9d:6a:8b:bd:ea:61: 98:3e:1f:68:49:be:dc:7f:25:dc:fc:d4:3a:88:dc:ae:6a:08: 93:0e:62:e9:65:7b:53:7f:a5:10:ff:b1:57:5b:17:50:0b:db: 3d:24:a4:82:b1:34:17:6e:61:80:68:88:06:7c:09:fc:ba:13: 2e:13:3e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TF7flVjaoU26mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NDExYmYxZWEtMzZkNS00OGEwLWI1ZDgtYmRlYmNiYTVjYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCbGX8TeeR0qS5kOPVWo8AtZTcRPZxELAUg7 /RTbifyjdebcWRxcD5cnvolWM2Bvk1xjUdY6eIW+F8kHtFNx3+k/x5+veFJxSlBZ 16/qb0fQof5TbinYZeHq1qHwua1vcjvFhsSJH5IcvC4KNzugoDgW1zYmj0qVdcRc x08f9TMZ5ht7+ksxpnDHqOH5bQb+zL7Fl+eHVY37gFX26QXM6dKdo7Hf4CqMzYmZ aSEj5B+OYrcOC5mt1ZxuwWUDmzf2EKB/YE1h/h/3DVp1pi2itbS4Nf+rk0/NrWNX bhN+IQxLEb6LCcUB6vL4eYAX1PfbrggAaYyiZK+WUhIVsyALaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKp1UR4cuzEVKi6T35LQaVaWSbzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvMTgyZTI3OGMtNDA5Ni0z NmYyLTk2NDQtYTM3ZDliMDc3YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNdfCSOif1lOESmi6Izn7ilXPXqhzIo09bIS8g4NB6NRKHfBxFGR/4+ 68o641x2ka8nmoZVaMdhqOqPNeaj3GBMksY4YqDS1+50pPyUT9ycJnoNC/3aMMan 6JLj3umiZu86okjmBAqymDHGsPmlczWnDAGyKKEb5b8MUN1VPAGHT136EGMpr4f0 O3OsnOFN8S8Ane5Yr56BhGD4n7tPc9gyB7ERq0W64dES8uiKr8hyAEAjeRLUBPrL HQL5gTduqJ1qi73qYZg+H2hJvtx/Jdz81DqI3K5qCJMOYulle1N/pRD/sVdbF1AL 2z0kpIKxNBduYYBoiAZ8Cfy6Ey4TPjE= -----END CERTIFICATE-----Generated at Wed Jul 2 11:07:05 2025 by rpki-client