$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa File: 3c51508c-e229-3495-972e-46feecd4c139.roa (raw, json) Hash identifier: 1gpV/6vONSDqa01NnI11DXgvwcPJe8EDJFoqmkN8LL0= Subject key identifier: 8F:3A:FB:FE:F1:EA:D1:3E:EF:02:1D:82:0E:F0:3A:DE:5F:04:79:35 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849E4EFC493735B2D40C75CD100 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13536 IP address blocks: 216.114.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c4:93:73:5b:2d:40:c7:5c:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=cf298656-7574-436a-8b30-f4f12e2dce84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:22:4e:45:3a:fb:a4:90:0c:3c:ce:2d:fe: 7c:34:e2:85:ca:1c:99:2c:b9:9b:03:43:ab:f0:af: 39:06:78:6b:ea:ae:42:b6:c2:63:28:f2:d7:7f:86: b3:0b:50:37:9d:13:08:c7:90:d2:43:99:d2:09:c0: ad:01:d9:12:40:34:59:97:af:b3:a2:38:9b:c0:89: 61:40:49:43:8a:66:9e:c3:36:99:36:cf:4e:88:ea: 12:d4:f5:06:7d:59:92:8c:86:27:e3:df:4d:26:e1: 78:b2:42:40:c1:70:a5:f6:3c:47:a5:89:b3:da:27: 4e:58:e1:94:67:4c:93:d9:22:33:43:6f:37:3b:89: 69:8c:8f:00:ec:ba:03:7c:f5:5e:2d:34:25:33:f8: 34:d0:cd:5e:e3:9e:e3:52:de:19:ea:b8:42:ef:39: 75:ea:34:53:31:b9:14:b9:11:b8:16:a5:ee:84:c1: 49:fb:88:8e:6e:96:92:3b:a0:99:81:8a:c7:42:98: 54:0d:77:af:c8:96:63:6e:1b:43:3b:aa:fa:c4:e0: af:2c:b0:8c:89:56:c6:b8:24:7f:e0:71:e1:3e:e9: fb:dc:e0:9f:e6:69:ec:46:7c:2d:da:8a:71:af:ec: 55:20:4c:4d:3b:17:4c:16:88:78:8f:55:8e:77:4c: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3A:FB:FE:F1:EA:D1:3E:EF:02:1D:82:0E:F0:3A:DE:5F:04:79:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:58:0a:b7:3a:0c:54:ca:ec:7b:39:df:3d:3a:a1:38:28:f0: a7:7b:7d:56:78:04:c9:95:9c:ee:5d:b9:75:d5:c7:fe:e7:70: 6e:b5:82:05:ab:96:e7:08:13:c7:73:e0:94:18:13:a0:ec:47: 11:0a:36:56:9e:f6:fb:99:05:b0:c7:4a:0e:33:ac:01:f1:c8: 15:61:85:56:e2:58:8d:df:95:9e:46:d4:b3:74:79:a3:93:96: 75:ca:7d:cd:d2:fe:c4:5f:36:bd:91:d6:f8:56:f8:c5:e5:6a: 20:20:43:94:9e:5a:a1:d9:fa:ad:d7:34:eb:24:ef:53:21:47: 27:c5:b3:7c:84:95:9d:f7:3d:5e:c0:dd:ae:49:61:e5:c4:db: a2:8e:51:fd:32:8b:22:84:b4:24:d4:fb:c2:83:69:b2:ae:8c: 59:09:bf:93:e5:95:7f:11:17:c0:bb:1a:93:c5:a4:d3:ba:57: 90:07:57:ec:e0:e9:dc:2f:bb:bc:23:a3:f2:80:9f:77:61:31: d9:f8:6f:f4:82:fa:96:42:8f:7c:ad:69:1a:30:59:6e:aa:13: e6:69:4d:41:c8:af:dc:43:0a:ce:f7:34:38:04:71:9a:3a:f5: 0f:dc:24:1e:78:90:7f:c6:da:e5:f3:65:f8:3c:01:06:d9:4b: 3f:56:89:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78STc1stQMdc0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk Y2YyOTg2NTYtNzU3NC00MzZhLThiMzAtZjRmMTJlMmRjZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0YiTkU6+6SQDDzOLf58NOKFyhyZLLmbA0Or 8K85Bnhr6q5CtsJjKPLXf4azC1A3nRMIx5DSQ5nSCcCtAdkSQDRZl6+zojibwIlh QElDimaewzaZNs9OiOoS1PUGfVmSjIYn499NJuF4skJAwXCl9jxHpYmz2idOWOGU Z0yT2SIzQ283O4lpjI8A7LoDfPVeLTQlM/g00M1e457jUt4Z6rhC7zl16jRTMbkU uRG4FqXuhMFJ+4iObpaSO6CZgYrHQphUDXevyJZjbhtDO6r6xOCvLLCMiVbGuCR/ 4HHhPun73OCf5mnsRnwt2opxr+xVIExNOxdMFoh4j1WOd0xVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI86+/7x6tE+7wIdgg7wOt5fBHk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvM2M1MTUwOGMtZTIyOS0z NDk1LTk3MmUtNDZmZWVjZDRjMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtYCrc6DFTK7Hs53z06oTgo8Kd7fVZ4BMmVnO5duXXVx/7ncG61ggWr lucIE8dz4JQYE6DsRxEKNlae9vuZBbDHSg4zrAHxyBVhhVbiWI3flZ5G1LN0eaOT lnXKfc3S/sRfNr2R1vhW+MXlaiAgQ5SeWqHZ+q3XNOsk71MhRyfFs3yElZ33PV7A 3a5JYeXE26KOUf0yiyKEtCTU+8KDabKujFkJv5PllX8RF8C7GpPFpNO6V5AHV+zg 6dwvu7wjo/KAn3dhMdn4b/SC+pZCj3ytaRowWW6qE+ZpTUHIr9xDCs73NDgEcZo6 9Q/cJB54kH/G2uXzZfg8AQbZSz9WiVQ= -----END CERTIFICATE-----Generated at Tue Jul 1 09:57:14 2025 by rpki-client