$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa File: d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (raw, json) Hash identifier: v8h27FVqmDavyzdugbcB5V+O5KgQHlIzaAwwO9Ekax4= Subject key identifier: EF:35:75:DC:5C:DC:71:3B:67:43:99:9C:86:1B:73:28:66:7A:A7:16 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584A3CE0246FBDA431D39D859860 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 32058 IP address blocks: 216.147.192.0/20 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:24:6f:bd:a4:31:d3:9d:85:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=2d083a2e-8f72-46c9-b958-b0def5fb4152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8f:d2:64:45:0d:5b:d8:1f:02:e2:43:07:90: f9:97:30:cc:7a:04:88:f7:40:f4:b2:e8:ee:2a:f9: bb:93:fb:06:f9:f2:36:c0:86:7f:b5:e5:99:d0:e4: 01:2a:70:2b:3e:75:cb:b0:52:ac:72:07:ad:65:76: bc:fe:ac:3e:b8:d1:f3:a8:bb:63:8b:7a:b9:5a:6e: c5:cc:bd:05:47:bb:b3:b0:b1:06:47:91:6b:f0:31: ba:e2:d2:4a:97:45:bd:7f:e5:21:84:71:ad:4c:7a: b1:43:e0:ed:fe:d0:4c:c7:72:80:95:e5:bc:63:64: 0d:41:47:62:c2:9e:0a:f2:9c:78:b0:b7:79:3f:2c: b1:7d:ad:9b:c7:d9:f0:ee:e1:dd:d3:0d:2c:50:07: 74:9e:95:fd:65:23:13:26:ea:2b:59:d6:72:f0:c8: aa:01:68:3c:61:6f:6c:54:11:87:4e:26:26:fd:b3: 67:63:51:47:f6:58:83:be:92:22:95:00:cb:91:33: e7:c0:2b:aa:35:64:bb:34:2c:f0:1d:07:2d:ac:4f: 49:57:6e:58:5e:ca:bf:07:bd:0c:77:3a:3c:12:30: 46:d6:41:1e:3c:1d:9a:c4:1b:1b:14:d1:5d:10:4c: 95:ec:16:0f:03:ad:4d:8d:22:b5:46:d7:d6:dd:f2: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:35:75:DC:5C:DC:71:3B:67:43:99:9C:86:1B:73:28:66:7A:A7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 216.147.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0e:2c:81:3d:2e:d3:a1:e9:02:30:cb:91:6a:e9:a9:55:0a: 09:8f:58:cb:fb:76:d7:96:8c:67:4a:25:64:d6:e0:2c:ea:6a: 63:69:ee:86:af:45:1e:dc:41:d5:43:06:16:ee:58:e4:9c:e1: 7c:c2:22:bf:d1:78:3a:9c:bf:82:b4:20:dc:45:41:2f:86:d6: 47:dd:e0:28:72:2a:b7:90:12:c7:22:05:c2:e3:bc:80:43:0a: 7f:94:e8:07:53:ee:78:da:51:79:d7:c0:06:6a:ed:84:8b:b0: ea:fa:2c:6e:de:41:51:e0:bb:63:ce:b0:9f:5c:62:ca:d0:a0: 00:98:55:1f:f5:fb:30:14:d1:ee:f8:cd:14:13:f4:71:f1:e1: b6:6d:f9:c0:52:27:af:d0:aa:1f:ce:aa:bc:f2:e7:d4:49:0e: 7f:d9:93:6d:14:c1:bf:18:ed:1a:5d:01:73:e9:ac:6f:26:59: ab:55:28:15:cb:85:ed:e9:9d:03:a2:db:7b:9b:70:f9:18:e2: e4:88:69:a7:89:cd:49:8b:a8:3c:0c:5b:57:6c:07:1a:db:20: 6c:0d:a5:ce:63:3c:fd:6b:ff:dd:df:ff:71:ce:c1:82:98:ba: 63:5f:81:8b:e6:60:af:12:4f:45:9c:16:6e:3e:b5:fd:59:22: 06:cc:88:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CRvvaQx052FmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk MmQwODNhMmUtOGY3Mi00NmM5LWI5NTgtYjBkZWY1ZmI0MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY/SZEUNW9gfAuJDB5D5lzDMegSI90D0suju Kvm7k/sG+fI2wIZ/teWZ0OQBKnArPnXLsFKscgetZXa8/qw+uNHzqLtji3q5Wm7F zL0FR7uzsLEGR5Fr8DG64tJKl0W9f+UhhHGtTHqxQ+Dt/tBMx3KAleW8Y2QNQUdi wp4K8px4sLd5Pyyxfa2bx9nw7uHd0w0sUAd0npX9ZSMTJuorWdZy8MiqAWg8YW9s VBGHTiYm/bNnY1FH9liDvpIilQDLkTPnwCuqNWS7NCzwHQctrE9JV25YXsq/B70M dzo8EjBG1kEePB2axBsbFNFdEEyV7BYPA61NjSK1RtfW3fKoSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO81ddxc3HE7Z0OZnIYbcyhmeqcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDI0MDhjNWYtZDIyNS0z MmY0LTlmNmMtODI2ODZjOWZhNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2JPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAOLIE9LtOh6QIwy5Fq6alVCgmPWMv7dteWjGdKJWTW4CzqamNp7oav RR7cQdVDBhbuWOSc4XzCIr/ReDqcv4K0INxFQS+G1kfd4ChyKreQEsciBcLjvIBD Cn+U6AdT7njaUXnXwAZq7YSLsOr6LG7eQVHgu2POsJ9cYsrQoACYVR/1+zAU0e74 zRQT9HHx4bZt+cBSJ6/Qqh/Oqrzy59RJDn/Zk20Uwb8Y7RpdAXPprG8mWatVKBXL he3pnQOi23ubcPkY4uSIaaeJzUmLqDwMW1dsBxrbIGwNpc5jPP1r/93f/3HOwYKY umNfgYvmYK8ST0WcFm4+tf1ZIgbMiP4= -----END CERTIFICATE-----Generated at Tue Jul 1 23:27:54 2025 by rpki-client