$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa File: a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa (raw, json) Hash identifier: oTfOESlkGscVSLWKBQqCxdO0J6FeolZfyMV1WEE0MSk= Subject key identifier: 1F:2E:25:69:17:E9:4C:41:DB:76:6C:84:3C:B8:E9:3D:53:AC:48:CD Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34 Certificate serial: 010D0C9F4328584A43DB088F08AEAB6F405B7C80 Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 16787 IP address blocks: 192.219.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:08:8f:08:ae:ab:6f:40:5b:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=3ca2880d-3552-42c9-8aa9-dce7968e2333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:16:d8:af:da:ef:9b:36:b7:07:c7:4d:14: 5f:56:be:22:c0:af:98:f9:c7:c5:57:e8:1f:88:57: 8e:5d:24:ec:3d:f2:af:43:38:b2:f2:21:69:ce:9a: 2c:6f:a5:41:57:51:6d:f2:23:ed:89:69:8b:79:44: 55:f3:df:24:f9:d8:c8:d9:98:a3:91:58:15:27:9a: 5f:c8:8f:6a:da:8b:0d:aa:de:94:69:86:48:69:51: b1:bf:5b:16:03:c9:35:ff:13:55:27:77:36:35:e8: 95:be:42:19:49:a0:02:20:c0:64:29:bf:ca:00:43: dd:44:ea:41:c4:92:a6:a7:b2:05:c2:d7:c6:fd:3a: 09:e7:71:d0:02:42:fc:1b:71:07:bd:ed:56:b8:88: 4e:d1:d8:60:17:02:a0:eb:12:6d:c8:d9:35:4a:68: 02:2f:15:6f:e3:30:00:94:fd:9f:ad:82:93:96:e0: 8f:00:20:61:19:3d:35:73:81:d1:04:6f:a1:74:c4: cd:fc:3b:79:66:98:70:04:dd:38:2e:83:83:ba:0e: 96:4a:81:70:14:34:fd:12:8d:b4:77:ac:e9:d8:08: 08:14:10:89:43:03:0a:99:1e:6b:86:da:23:b8:1d: 0f:88:5e:d0:14:51:f4:82:4d:e9:fc:8e:49:40:88: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2E:25:69:17:E9:4C:41:DB:76:6C:84:3C:B8:E9:3D:53:AC:48:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl X509v3 Authority Key Identifier: keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer sbgp-ipAddrBlock: critical IPv4: 192.219.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bb:3c:2c:28:80:13:2c:fd:6a:f5:36:4c:2d:58:d9:e0:42: 8f:3e:06:21:b7:94:5b:76:dd:4a:ae:88:a3:46:6d:49:59:9c: db:dc:98:67:63:f9:54:e6:87:17:4f:fb:67:12:2b:ca:34:ba: dd:e7:5a:7e:9a:c1:86:dc:df:d8:51:66:82:c7:c4:76:1b:58: 05:37:9d:62:cb:6e:5f:5c:db:c6:2f:b8:d2:23:33:94:4c:50: 04:72:d2:03:e8:9f:06:00:7c:fa:3d:c6:fa:c5:48:f0:a3:99: 8d:e5:84:dd:19:d0:b0:3d:45:7c:8e:45:4b:5a:c0:c8:69:ff: 7e:bc:3d:37:cb:74:c0:2a:78:08:fc:b4:fd:b7:52:eb:8a:a5: 3f:5c:3d:0c:a7:9a:ae:0e:ee:aa:bf:e9:59:3c:e4:6a:9f:88: 38:84:99:f6:03:eb:08:5d:03:db:b3:59:26:98:7d:8b:27:ae: d1:39:31:75:37:71:2c:bf:c8:6d:fc:95:32:3a:d8:fc:da:37: 3c:eb:b0:33:b7:d7:c4:49:6f:85:59:49:c6:eb:7b:45:dc:87: 6e:61:08:80:6b:5b:06:1d:e7:85:03:6b:d9:ef:e0:dd:35:6f: 13:76:c9:d5:38:da:27:99:28:73:4d:16:0e:64:e9:95:0b:fd: 1f:9b:cf:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wiPCK6rb0BbfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ODMxOGEtNzA1OS00MmJlLTliNjAtMjM0YWVkYmE1 ZTM0MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk M2NhMjg4MGQtMzU1Mi00MmM5LThhYTktZGNlNzk2OGUyMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkcW2K/a75s2twfHTRRfVr4iwK+Y+cfFV+gf iFeOXSTsPfKvQziy8iFpzposb6VBV1Ft8iPtiWmLeURV898k+djI2ZijkVgVJ5pf yI9q2osNqt6UaYZIaVGxv1sWA8k1/xNVJ3c2NeiVvkIZSaACIMBkKb/KAEPdROpB xJKmp7IFwtfG/ToJ53HQAkL8G3EHve1WuIhO0dhgFwKg6xJtyNk1SmgCLxVv4zAA lP2frYKTluCPACBhGT01c4HRBG+hdMTN/Dt5ZphwBN04LoODug6WSoFwFDT9Eo20 d6zp2AgIFBCJQwMKmR5rhtojuB0PiF7QFFH0gk3p/I5JQIgJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8uJWkX6UxB23ZshDy46T1TrEjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4 MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRhZWRiYTVlMzQvYTBlZjFhMTMtNDlkOS0z NDM5LTg3OGUtZDk4ZjUxZjFjMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5ODMxOGEtNzA1OS00MmJlLTli NjAtMjM0YWVkYmE1ZTM0L2Q0OTgzMThhLTcwNTktNDJiZS05YjYwLTIzNGFlZGJh NWUzNC5jcmwwHwYDVR0jBBgwFoAUG1izrEgJ1ISdOmbgXwic0hDBEWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRh ZWRiYTVlMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+7PCwogBMs/Wr1NkwtWNngQo8+BiG3lFt23UquiKNGbUlZnNvcmGdj +VTmhxdP+2cSK8o0ut3nWn6awYbc39hRZoLHxHYbWAU3nWLLbl9c28YvuNIjM5RM UARy0gPonwYAfPo9xvrFSPCjmY3lhN0Z0LA9RXyORUtawMhp/368PTfLdMAqeAj8 tP23UuuKpT9cPQynmq4O7qq/6Vk85GqfiDiEmfYD6whdA9uzWSaYfYsnrtE5MXU3 cSy/yG38lTI62PzaNzzrsDO318RJb4VZScbre0Xch25hCIBrWwYd54UDa9nv4N01 bxN2ydU42ieZKHNNFg5k6ZUL/R+bz6s= -----END CERTIFICATE-----Generated at Wed Jul 2 00:42:19 2025 by rpki-client