$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa File: a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa (raw, json) Hash identifier: 5kmIp6m1FnvA0fjGNsIxvsTVbHFP+fJ1qJdmdEV1t54= Subject key identifier: CE:02:02:13:B9:3D:4C:15:91:3A:81:49:6E:9E:5A:7D:75:0B:FB:F8 Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34 Certificate serial: 010D0C9F432858496484484F5657B002C2CE7380 Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 16787 IP address blocks: 192.219.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:48:4f:56:57:b0:02:c2:ce:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=390784eb-a3dd-45f7-8217-8a173063f9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:f9:61:cb:f9:11:2b:4a:a3:70:19:d0:69: 0b:f7:c0:3a:5b:fe:ad:60:9e:65:73:9f:f3:cf:74: 49:c0:ee:55:e8:cd:cd:53:a3:4e:20:65:17:60:58: 13:76:6b:58:46:0e:69:4d:a5:a6:eb:93:1c:36:52: be:f3:55:93:8a:56:73:88:f0:4b:37:ee:c4:d2:ad: 57:ec:0d:a0:3e:52:88:dc:ea:42:4b:75:32:31:8f: f9:1a:f8:48:f9:c0:52:d0:82:fb:b0:b8:b2:14:fc: 6c:fd:aa:2c:6c:5e:4a:e7:b6:ba:90:78:30:a0:58: c5:93:9a:a3:f3:e0:fd:55:a4:40:76:34:d2:44:4c: d4:53:b6:e2:d6:d7:1e:50:13:41:29:94:f2:88:94: 8a:ff:23:2a:aa:7a:cf:6b:8b:99:c1:1f:e1:0d:e0: 5a:0b:e8:ad:07:5d:79:b2:ef:37:cc:36:0b:44:3c: c1:da:0f:c5:a6:8b:41:5b:5e:99:a3:00:9b:54:e7: 2e:da:11:01:8c:2b:82:27:ab:1f:8b:6d:91:66:84: 56:0a:29:db:e8:6a:32:d3:d4:83:89:5f:c5:05:81: 54:47:cb:eb:52:bd:60:91:bb:9b:36:af:2b:04:01: 99:57:75:96:25:70:39:a2:2f:17:9f:48:86:54:38: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:02:02:13:B9:3D:4C:15:91:3A:81:49:6E:9E:5A:7D:75:0B:FB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl X509v3 Authority Key Identifier: keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer sbgp-ipAddrBlock: critical IPv4: 192.219.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:57:3b:da:a6:4f:b9:d4:ea:e5:5a:6a:3f:d6:7e:e2:a5:54: 1e:c8:b6:71:5b:bc:28:e0:f0:66:d8:5a:b8:5c:20:ce:2e:b9: 12:4f:2d:b9:cd:08:85:7d:00:09:6e:af:85:60:2b:c4:6b:8a: b7:79:38:5f:d9:10:d6:a4:58:83:9c:26:53:ad:04:1b:df:24: 91:ea:7f:0a:62:89:d4:22:f5:e7:86:44:5f:e0:88:f7:4f:3e: c0:a4:06:41:82:8a:b1:3e:cb:b7:57:98:08:17:eb:a4:94:90: 1f:2c:ab:c7:f2:40:2d:43:8e:8e:01:c8:4b:3a:a1:f6:bc:20: 96:9d:de:95:a5:28:8f:5d:d2:04:d2:2a:bf:23:d4:c7:9e:5a: a1:c9:a3:6e:8d:d4:2e:84:dd:0f:5b:fe:76:7b:b3:d9:c0:6f: c5:cc:ce:40:b2:7e:d1:57:8e:e6:99:e5:c5:e1:bb:94:94:d1: f8:c1:ad:55:16:40:92:2b:67:ba:8f:9f:68:49:18:a3:85:28: 7d:69:e5:a2:b6:ac:6c:0d:f9:3b:ce:a3:f6:78:dc:b5:d1:25: 65:5d:29:df:cb:97:f8:ad:7d:64:b5:07:ae:df:51:9f:a7:e6: 0f:0b:3e:78:88:99:07:08:46:5b:05:59:9b:f2:26:09:3b:6a: e6:ba:0b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEhPVlewAsLOc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ODMxOGEtNzA1OS00MmJlLTliNjAtMjM0YWVkYmE1 ZTM0MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MzkwNzg0ZWItYTNkZC00NWY3LTgyMTctOGExNzMwNjNmOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV35Ycv5EStKo3AZ0GkL98A6W/6tYJ5lc5/z z3RJwO5V6M3NU6NOIGUXYFgTdmtYRg5pTaWm65McNlK+81WTilZziPBLN+7E0q1X 7A2gPlKI3OpCS3UyMY/5GvhI+cBS0IL7sLiyFPxs/aosbF5K57a6kHgwoFjFk5qj 8+D9VaRAdjTSREzUU7bi1tceUBNBKZTyiJSK/yMqqnrPa4uZwR/hDeBaC+itB115 su83zDYLRDzB2g/FpotBW16ZowCbVOcu2hEBjCuCJ6sfi22RZoRWCinb6Goy09SD iV/FBYFUR8vrUr1gkbubNq8rBAGZV3WWJXA5oi8Xn0iGVDjqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4CAhO5PUwVkTqBSW6eWn11C/v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4 MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRhZWRiYTVlMzQvYTBlZjFhMTMtNDlkOS0z NDM5LTg3OGUtZDk4ZjUxZjFjMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5ODMxOGEtNzA1OS00MmJlLTli NjAtMjM0YWVkYmE1ZTM0L2Q0OTgzMThhLTcwNTktNDJiZS05YjYwLTIzNGFlZGJh NWUzNC5jcmwwHwYDVR0jBBgwFoAUG1izrEgJ1ISdOmbgXwic0hDBEWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRh ZWRiYTVlMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxXO9qmT7nU6uVaaj/WfuKlVB7ItnFbvCjg8GbYWrhcIM4uuRJPLbnN CIV9AAlur4VgK8Rrird5OF/ZENakWIOcJlOtBBvfJJHqfwpiidQi9eeGRF/giPdP PsCkBkGCirE+y7dXmAgX66SUkB8sq8fyQC1Djo4ByEs6ofa8IJad3pWlKI9d0gTS Kr8j1MeeWqHJo26N1C6E3Q9b/nZ7s9nAb8XMzkCyftFXjuaZ5cXhu5SU0fjBrVUW QJIrZ7qPn2hJGKOFKH1p5aK2rGwN+TvOo/Z43LXRJWVdKd/Ll/itfWS1B67fUZ+n 5g8LPniImQcIRlsFWZvyJgk7aua6C9E= -----END CERTIFICATE-----Generated at Sun May 11 14:55:20 2025 by rpki-client