$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa File: 446319b8-ed67-3b03-a0e2-5a949ad2108c.roa (raw, json) Hash identifier: xfVUQzk3I+2/cA363jnrDanTlm1snKR9ZR35txeFkNI= Subject key identifier: 60:CA:F4:48:70:4D:24:9E:E5:F0:81:34:92:96:C9:46:71:38:58:70 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584A189542893383BE964D721A80 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 3557 IP address blocks: 192.5.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:42:89:33:83:be:96:4d:72:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=997a6df5-f286-4dd0-b656-0be69cdced95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:b4:e9:c4:ad:f0:35:c9:cc:fb:1e:af:a1: 8c:07:8c:1c:45:56:1c:aa:89:2a:8d:a9:a3:9a:73: 7c:a8:4e:8f:c1:ff:9f:66:73:0d:bd:d0:f8:a9:48: fa:2d:28:a6:65:42:87:56:3f:30:17:d3:3a:f6:63: 41:0d:39:dd:02:bb:c9:7b:0e:69:2f:aa:52:f4:9c: 09:3a:32:09:87:82:c9:e4:33:75:1c:14:47:25:4b: 70:6e:c0:f6:5e:d6:f4:b8:38:c9:37:6e:81:80:d6: 91:8c:99:3f:77:59:ee:f4:f8:e0:6a:97:0a:53:d5: 7e:72:be:6b:4b:d8:42:f2:1f:b4:8d:04:b0:f4:72: 62:e4:79:ab:3b:f6:f8:53:01:0a:81:d2:74:5c:12: 14:8d:c9:93:61:4e:98:33:3f:1c:80:d4:47:73:9d: c4:2f:47:0a:6b:fd:34:21:ae:62:d0:c7:ce:8b:ae: 52:4f:10:e4:87:8c:11:c3:36:ab:b8:82:5a:ae:88: 59:ae:5d:0a:50:f9:dd:b0:9e:17:03:34:b3:b8:15: e3:e0:2a:93:64:80:4f:bf:e7:73:f9:27:c9:ce:a2: 16:ff:c1:89:f1:f3:1f:2e:8a:fa:e1:a4:0e:f0:11: de:45:f3:2c:62:96:14:db:40:f2:28:07:ff:88:eb: d4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CA:F4:48:70:4D:24:9E:E5:F0:81:34:92:96:C9:46:71:38:58:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 192.5.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:32:99:ca:5b:06:77:7d:df:50:76:c8:9d:94:37:77:2b:84: 4c:1c:41:eb:31:26:98:b0:cb:93:d9:ea:3e:44:10:b9:f8:6d: a3:df:2d:52:79:83:cb:f8:23:c1:b3:9d:74:99:1f:25:35:fd: 1f:ab:93:93:f2:c0:7c:c4:2a:c1:8e:d7:db:5b:57:3f:fb:ba: ea:2f:b1:dd:8e:9a:7d:39:45:82:cc:99:4a:18:ac:f7:97:b0: 99:b9:eb:26:ae:93:3b:b0:1a:00:0a:12:9b:e0:73:69:27:ee: 69:66:41:13:9c:60:c3:9d:43:e6:c8:74:ff:5a:2c:3b:19:d2: 03:20:97:42:b0:97:16:6d:ef:57:08:c3:8b:48:ea:2f:fe:0d: 7c:d6:32:1b:78:fb:d3:91:bb:cc:25:15:23:d3:bd:c3:d5:d2: b0:11:84:3b:81:2c:42:73:07:be:92:8e:9b:69:ed:d7:9a:01: b8:d8:ab:1e:40:4a:9f:71:74:f8:06:76:f7:72:ce:ea:cd:a4: a9:d1:e7:35:0e:3e:4b:47:fb:5a:19:78:c0:56:ab:f0:dd:3d: 49:81:08:e3:a0:a6:56:cf:e6:97:ba:e9:15:2a:e4:2b:26:43: f8:f8:23:87:92:dd:c5:72:3e:77:be:6d:cd:e2:30:fa:0e:c8: 38:23:c4:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUKJM4O+lk1yGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk OTk3YTZkZjUtZjI4Ni00ZGQwLWI2NTYtMGJlNjljZGNlZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02a06cSt8DXJzPser6GMB4wcRVYcqokqjamj mnN8qE6Pwf+fZnMNvdD4qUj6LSimZUKHVj8wF9M69mNBDTndArvJew5pL6pS9JwJ OjIJh4LJ5DN1HBRHJUtwbsD2Xtb0uDjJN26BgNaRjJk/d1nu9PjgapcKU9V+cr5r S9hC8h+0jQSw9HJi5HmrO/b4UwEKgdJ0XBIUjcmTYU6YMz8cgNRHc53EL0cKa/00 Ia5i0MfOi65STxDkh4wRwzaruIJarohZrl0KUPndsJ4XAzSzuBXj4CqTZIBPv+dz +SfJzqIW/8GJ8fMfLor64aQO8BHeRfMsYpYU20DyKAf/iOvUrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDK9EhwTSSe5fCBNJKWyUZxOFhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDQ2MzE5YjgtZWQ2Ny0z YjAzLWEwZTItNWE5NDlhZDIxMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwAUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQymcpbBnd931B2yJ2UN3crhEwcQesxJpiwy5PZ6j5EELn4baPfLVJ5 g8v4I8GznXSZHyU1/R+rk5PywHzEKsGO19tbVz/7uuovsd2Omn05RYLMmUoYrPeX sJm56yaukzuwGgAKEpvgc2kn7mlmQROcYMOdQ+bIdP9aLDsZ0gMgl0KwlxZt71cI w4tI6i/+DXzWMht4+9ORu8wlFSPTvcPV0rARhDuBLEJzB76Sjptp7deaAbjYqx5A Sp9xdPgGdvdyzurNpKnR5zUOPktH+1oZeMBWq/DdPUmBCOOgplbP5pe66RUq5Csm Q/j4I4eS3cVyPne+bc3iMPoOyDgjxOI= -----END CERTIFICATE-----Generated at Sun Jun 29 16:11:38 2025 by rpki-client