$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa File: 182e278c-4096-36f2-9644-a37d9b077a82.roa (raw, json) Hash identifier: NTbPYhxChkSSEhBX+k7JBUpXIksQ42Nkp1SN3PqKd9A= Subject key identifier: 84:D0:3B:A1:26:0A:68:90:93:CF:0E:1A:02:8C:8F:8C:35:D4:E8:4C Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584913AC1D17BB65BFD9A006B600 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 394111 IP address blocks: 192.225.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1d:17:bb:65:bf:d9:a0:06:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=2e62c94a-2efa-4af6-af35-881952140feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1c:d5:99:a8:78:7e:e6:cc:4c:4a:22:c7:3c: 55:93:44:25:24:51:a5:f3:11:54:13:54:e5:a5:50: 09:e8:7b:6e:6f:95:07:8e:90:9d:87:54:dc:22:2b: 16:e5:20:11:38:27:4e:24:ed:ef:89:14:ee:74:1a: 41:2f:e1:69:c5:7b:8b:19:06:a6:2e:76:a8:99:4b: 15:89:ee:64:59:d7:e7:4f:52:91:f8:39:3c:12:90: b9:9d:e6:82:e6:6f:c6:59:64:79:e8:e3:70:d4:3f: bb:51:f4:06:37:56:3e:a5:4f:5d:6a:d2:d5:9e:6f: 35:d3:cd:de:fd:09:76:78:c6:23:7e:10:1f:ae:69: 24:97:0a:d9:91:22:4c:84:29:f3:11:8e:29:e3:c8: 6d:ae:38:7b:b2:d1:61:cb:15:1d:47:d6:4d:77:75: dc:79:e6:f0:ba:78:b7:b8:3e:05:40:fa:b1:b8:c7: 98:c2:83:53:c0:47:88:3d:4f:3a:36:b2:11:9f:89: ad:b7:7a:a9:4f:42:6a:20:8e:89:4c:cc:93:97:1d: 50:b1:87:1f:84:49:9d:d6:3b:b7:1e:c8:44:fb:25: 3c:b4:08:3e:9f:1b:2f:69:d2:fb:bd:3d:8a:1d:34: f9:5d:fe:4e:c6:63:05:ce:12:63:9b:e9:82:6f:1c: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:3B:A1:26:0A:68:90:93:CF:0E:1A:02:8C:8F:8C:35:D4:E8:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/182e278c-4096-36f2-9644-a37d9b077a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 192.225.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a8:5b:43:5b:0e:c1:49:42:a4:97:27:71:7b:1c:6c:55:31: 15:38:5c:36:f1:f5:19:6e:ef:82:98:c2:fb:e1:b4:d2:70:34: 03:b5:c8:0a:55:b1:1d:8c:41:13:4a:d9:15:9d:4f:af:0c:1a: ef:90:00:55:8c:e9:e3:f6:61:ab:6d:10:04:09:96:72:aa:ec: 3c:17:60:c2:43:c9:d3:a2:e7:46:a5:3f:96:b3:02:5f:f0:df: f0:c5:fb:83:6d:8d:9f:2e:fe:b8:33:b7:7a:bc:91:b6:9b:d5: e1:0c:57:ee:56:ae:f7:af:54:a3:50:df:e9:97:1b:6e:2e:2a: f8:29:e4:ef:07:cc:4e:44:de:68:7d:33:12:8b:ef:51:cd:e9: 6a:98:67:d3:ae:33:d3:ba:c9:76:8e:fe:cb:98:42:9b:33:37: b5:ab:90:32:52:29:f0:91:a2:37:b5:b3:bb:5b:8c:1c:90:e0: b3:6a:c4:13:ed:33:86:e2:92:50:d4:be:c5:4d:29:8c:fd:da: a3:b1:d7:e0:5f:7b:96:63:61:db:2f:bd:6f:bd:24:a9:a7:f5: 4f:6c:88:01:02:f6:a4:78:09:6e:cc:f7:74:95:d1:53:a1:69: 73:0a:7f:5b:f8:e7:f9:27:54:2d:8c:7a:60:c5:b0:4f:eb:2d: 0c:62:f1:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB0Xu2W/2aAGtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MmU2MmM5NGEtMmVmYS00YWY2LWFmMzUtODgxOTUyMTQwZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxzVmah4fubMTEoixzxVk0QlJFGl8xFUE1Tl pVAJ6Htub5UHjpCdh1TcIisW5SAROCdOJO3viRTudBpBL+FpxXuLGQamLnaomUsV ie5kWdfnT1KR+Dk8EpC5neaC5m/GWWR56ONw1D+7UfQGN1Y+pU9datLVnm81083e /Ql2eMYjfhAfrmkklwrZkSJMhCnzEY4p48htrjh7stFhyxUdR9ZNd3Xceebwuni3 uD4FQPqxuMeYwoNTwEeIPU86NrIRn4mtt3qpT0JqII6JTMyTlx1QsYcfhEmd1ju3 HshE+yU8tAg+nxsvadL7vT2KHTT5Xf5OxmMFzhJjm+mCbxyerQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITQO6EmCmiQk88OGgKMj4w11OhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvMTgyZTI3OGMtNDA5Ni0z NmYyLTk2NDQtYTM3ZDliMDc3YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaoW0NbDsFJQqSXJ3F7HGxVMRU4XDbx9Rlu74KYwvvhtNJwNAO1yApV sR2MQRNK2RWdT68MGu+QAFWM6eP2YattEAQJlnKq7DwXYMJDydOi50alP5azAl/w 3/DF+4NtjZ8u/rgzt3q8kbab1eEMV+5WrvevVKNQ3+mXG24uKvgp5O8HzE5E3mh9 MxKL71HN6WqYZ9OuM9O6yXaO/suYQpszN7WrkDJSKfCRoje1s7tbjByQ4LNqxBPt M4biklDUvsVNKYz92qOx1+Bfe5ZjYdsvvW+9JKmn9U9siAEC9qR4CW7M93SV0VOh aXMKf1v45/knVC2MemDFsE/rLQxi8ZU= -----END CERTIFICATE-----Generated at Mon May 12 05:30:35 2025 by rpki-client