$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/1a8bdbf9-142d-3ce7-a47c-2f06bf4b7c41.roa File: 1a8bdbf9-142d-3ce7-a47c-2f06bf4b7c41.roa (raw, json) Hash identifier: S5/DBBYm2lmfWGNfnLbTAsicpgUC0ir/8P5iQ9Iw3Zk= Subject key identifier: 1D:FB:3C:02:8C:66:E0:ED:96:6A:A5:01:EB:68:8D:F4:7B:41:48:18 Certificate issuer: /CN=fe165f6f-fcf3-4c06-b884-36e60521c216 Certificate serial: 010D0C9F4328584A4110555F3BA03B5244350180 Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/1a8bdbf9-142d-3ce7-a47c-2f06bf4b7c41.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 16621 IP address blocks: 192.149.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:55:5f:3b:a0:3b:52:44:35:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=cd0e0bf8-7283-4b50-b163-621957b33a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:52:ca:0f:b4:3c:71:74:0c:b9:3d:2a:f3: 40:a6:c6:3c:ed:51:d8:c9:de:6a:5f:4a:43:f1:2a: 7c:71:03:6c:c3:c3:fd:ac:18:ab:14:8f:ee:8a:d1: cd:67:24:1d:42:ec:1e:ec:c5:f4:6f:27:cd:fe:f6: 2d:44:88:94:59:c4:02:ee:24:0f:89:5a:9e:0e:df: 55:b6:32:b1:cb:75:64:72:8b:01:d7:2d:71:aa:7a: 33:2e:8f:73:91:86:ba:34:be:d0:74:7f:67:ee:9a: 86:4f:88:4b:80:a5:3d:d5:4c:89:9c:50:74:04:41: 42:c1:e2:f1:21:26:5c:fc:d6:db:c3:7d:72:16:cb: aa:4e:f9:2a:af:2e:90:86:c8:45:50:ae:c1:bc:f7: 4e:49:fa:57:40:12:d2:a2:bc:c6:7a:8c:ab:ba:55: e6:74:66:da:8f:8f:5e:44:b6:10:cd:29:54:77:0d: 62:1a:f0:0c:cc:c2:d7:b5:95:22:7e:4e:a5:65:17: fd:90:4a:78:16:8b:aa:c0:31:04:c3:66:3e:ff:e0: 51:f0:28:34:10:60:3b:bb:5e:d4:5d:2a:04:de:02: 7a:13:93:5a:fd:b3:35:f4:cc:37:b0:36:12:12:34: cf:04:3e:71:87:bf:e9:e3:2c:28:0d:10:d0:63:b3: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FB:3C:02:8C:66:E0:ED:96:6A:A5:01:EB:68:8D:F4:7B:41:48:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/1a8bdbf9-142d-3ce7-a47c-2f06bf4b7c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl X509v3 Authority Key Identifier: keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer sbgp-ipAddrBlock: critical IPv4: 192.149.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e3:8b:26:fc:b2:fb:4c:20:ec:ba:34:7e:82:6b:1f:c8:4d: eb:c0:30:9f:45:ed:b0:45:75:18:51:e0:76:e5:8b:55:cd:0f: 3f:af:2d:2c:5a:70:4e:bd:6a:ad:22:82:e5:5c:76:20:15:3c: 63:fb:28:d8:59:b9:7a:4e:92:01:02:c5:7b:33:70:8f:b1:c4: d8:6d:41:2b:2c:92:63:04:5e:56:49:56:40:52:15:3c:12:22: 66:7a:9e:52:13:d2:72:a7:0f:d1:87:a3:a7:66:03:5d:27:d4: ec:cb:22:9e:89:d4:38:e9:15:06:50:17:b8:4c:96:40:a3:12: 1d:94:59:27:45:46:82:37:98:9b:e9:6c:19:ad:9a:b5:c9:55: a1:dd:9e:2c:38:43:bb:6c:a8:07:49:06:c9:02:c2:38:84:2c: dd:00:db:8a:84:0f:1c:42:e0:97:d1:14:71:c7:1d:a8:f1:94: e3:f1:b1:50:a5:84:b5:61:aa:0c:2d:5b:dc:a1:79:87:00:67: d9:32:aa:47:8f:8d:c8:14:5c:de:d9:d0:df:15:0e:49:0e:14: f5:48:29:e3:34:ff:26:45:a2:fe:f8:12:71:63:cc:c5:4c:e3: db:2c:95:02:af:54:50:d6:a2:45:de:d0:0b:14:42:ea:ec:f0: e9:6e:dd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFVfO6A7UkQ1AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUxNjVmNmYtZmNmMy00YzA2LWI4ODQtMzZlNjA1MjFj MjE2MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Y2QwZTBiZjgtNzI4My00YjUwLWIxNjMtNjIxOTU3YjMzYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVlSyg+0PHF0DLk9KvNApsY87VHYyd5qX0pD 8Sp8cQNsw8P9rBirFI/uitHNZyQdQuwe7MX0byfN/vYtRIiUWcQC7iQPiVqeDt9V tjKxy3VkcosB1y1xqnozLo9zkYa6NL7QdH9n7pqGT4hLgKU91UyJnFB0BEFCweLx ISZc/Nbbw31yFsuqTvkqry6QhshFUK7BvPdOSfpXQBLSorzGeoyrulXmdGbaj49e RLYQzSlUdw1iGvAMzMLXtZUifk6lZRf9kEp4FouqwDEEw2Y+/+BR8Cg0EGA7u17U XSoE3gJ6E5Na/bM19Mw3sDYSEjTPBD5xh7/p4ywoDRDQY7MFFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB37PAKMZuDtlmqlAetojfR7QUgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2 NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2MDUyMWMyMTYvMWE4YmRiZjktMTQyZC0z Y2U3LWE0N2MtMmYwNmJmNGI3YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmUxNjVmNmYtZmNmMy00YzA2LWI4 ODQtMzZlNjA1MjFjMjE2L2ZlMTY1ZjZmLWZjZjMtNGMwNi1iODg0LTM2ZTYwNTIx YzIxNi5jcmwwHwYDVR0jBBgwFoAUJcA6kzKP5erlOLBtS7jvwrD3PVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2 MDUyMWMyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJURMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDjiyb8svtMIOy6NH6Cax/ITevAMJ9F7bBFdRhR4Hbli1XNDz+vLSxa cE69aq0iguVcdiAVPGP7KNhZuXpOkgECxXszcI+xxNhtQSsskmMEXlZJVkBSFTwS ImZ6nlIT0nKnD9GHo6dmA10n1OzLIp6J1DjpFQZQF7hMlkCjEh2UWSdFRoI3mJvp bBmtmrXJVaHdniw4Q7tsqAdJBskCwjiELN0A24qEDxxC4JfRFHHHHajxlOPxsVCl hLVhqgwtW9yheYcAZ9kyqkePjcgUXN7Z0N8VDkkOFPVIKeM0/yZFov74EnFjzMVM 49sslQKvVFDWokXe0AsUQurs8Olu3Ss= -----END CERTIFICATE-----Generated at Mon Jun 30 07:21:42 2025 by rpki-client