$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa File: 472f9308-f055-3dcd-b095-07eae00b6a13.roa (raw, json) Hash identifier: 35jZSxzDhPwtKDnc5ksdiJNbx0KLU2FZT7lVNBxIKdM= Subject key identifier: 5B:21:EA:76:E1:2C:D9:15:1D:DB:3A:9B:FE:C9:DC:B1:B5:98:E0:05 Certificate issuer: /CN=fe165f6f-fcf3-4c06-b884-36e60521c216 Certificate serial: 010D0C9F4328584A4110558F82E581B680129D00 Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396982 IP address blocks: 192.149.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:55:8f:82:e5:81:b6:80:12:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=d95975ff-d0ec-4e5b-9d2d-04c622188010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:fd:8f:e5:c8:47:32:58:8a:5d:1d:2d:40: fa:0f:7e:e8:8e:c8:51:4b:a2:c6:68:5e:5f:6e:8f: 87:69:57:08:02:74:bd:fc:92:d2:e4:55:90:53:24: 15:2a:fb:8e:1a:ec:ca:6e:88:0a:23:4c:11:a8:d3: 7a:0a:0e:99:09:4e:09:60:e6:8e:af:66:f7:e1:94: 23:58:02:92:5a:ff:99:ed:c7:78:10:a3:13:35:cc: f2:68:9c:66:a4:cf:f8:c8:4d:f7:c7:1a:19:bd:fc: 62:8d:2b:ef:b2:5c:e8:6b:4d:6c:39:a9:1f:71:19: a6:3a:f2:6d:cd:68:e4:a9:50:05:8d:2b:e0:14:26: f3:83:1b:d3:f5:94:6e:d0:be:81:75:67:d6:a0:b0: eb:fd:e9:16:c9:d0:34:5e:0a:bf:ab:55:d6:1e:78: da:e7:4d:e1:81:0f:a9:bc:40:a3:d7:fc:da:f9:99: 28:b7:63:3a:4a:f2:15:cf:3c:11:ca:5f:55:ea:97: 70:58:24:c1:0e:b4:f8:0f:0e:a2:ea:9a:20:79:5e: 8e:d3:2f:d6:29:a5:97:24:14:c5:c9:dd:6b:8a:0b: 88:d0:3f:f5:0a:d2:54:32:1d:e8:fe:be:dc:67:59: 7a:f6:a2:b9:03:6e:db:8d:64:87:5e:4b:a2:76:17: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:EA:76:E1:2C:D9:15:1D:DB:3A:9B:FE:C9:DC:B1:B5:98:E0:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl X509v3 Authority Key Identifier: keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer sbgp-ipAddrBlock: critical IPv4: 192.149.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a6:b3:f7:7e:fd:0e:ab:4d:0a:bc:67:1c:04:6a:42:87:d1: bf:51:91:45:c9:53:90:2a:cf:52:81:84:67:10:28:f4:06:8b: 39:a0:3a:2b:92:f4:01:11:a6:fb:26:e5:fe:6b:fb:d7:93:ad: a9:6c:2d:d1:d2:19:a9:a2:ea:d3:ac:1b:a1:a9:30:ce:5d:4e: ae:c6:86:f5:b2:06:e4:3c:2d:19:2a:95:3b:da:12:c5:67:3b: 98:68:00:9d:29:c1:a6:73:27:fd:49:1f:45:f0:e0:70:29:90: ea:1f:1d:bb:b9:43:01:22:cb:80:0d:2e:7a:2a:18:8b:a3:ad: be:f6:66:8c:f4:f0:b3:77:50:f6:f5:98:bd:ff:c4:13:97:d4: 8e:a3:4c:fd:be:3e:e5:f6:2b:fe:d3:36:99:93:24:18:05:83: 31:23:cb:8f:a6:55:f2:70:41:a9:c1:87:64:85:02:6d:0f:95: f8:da:fa:a1:1e:b2:cb:cb:fd:d5:bd:93:02:c4:1c:88:9f:f7: 68:e7:f7:16:21:80:84:6d:cb:00:ef:30:15:6d:62:1b:ce:ba: e4:62:53:9b:ac:3d:6b:37:fa:e7:91:83:68:f6:33:b1:e3:99: 31:f8:30:8c:7a:79:22:9c:1b:9d:7b:72:67:6b:0f:bd:d2:79: d1:f1:38:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFWPguWBtoASnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUxNjVmNmYtZmNmMy00YzA2LWI4ODQtMzZlNjA1MjFj MjE2MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDk1OTc1ZmYtZDBlYy00ZTViLTlkMmQtMDRjNjIyMTg4MDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14T9j+XIRzJYil0dLUD6D37ojshRS6LGaF5f bo+HaVcIAnS9/JLS5FWQUyQVKvuOGuzKbogKI0wRqNN6Cg6ZCU4JYOaOr2b34ZQj WAKSWv+Z7cd4EKMTNczyaJxmpM/4yE33xxoZvfxijSvvslzoa01sOakfcRmmOvJt zWjkqVAFjSvgFCbzgxvT9ZRu0L6BdWfWoLDr/ekWydA0Xgq/q1XWHnja503hgQ+p vECj1/za+Zkot2M6SvIVzzwRyl9V6pdwWCTBDrT4Dw6i6pogeV6O0y/WKaWXJBTF yd1riguI0D/1CtJUMh3o/r7cZ1l69qK5A27bjWSHXkuidhf9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsh6nbhLNkVHds6m/7J3LG1mOAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2 NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2MDUyMWMyMTYvNDcyZjkzMDgtZjA1NS0z ZGNkLWIwOTUtMDdlYWUwMGI2YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmUxNjVmNmYtZmNmMy00YzA2LWI4 ODQtMzZlNjA1MjFjMjE2L2ZlMTY1ZjZmLWZjZjMtNGMwNi1iODg0LTM2ZTYwNTIx YzIxNi5jcmwwHwYDVR0jBBgwFoAUJcA6kzKP5erlOLBtS7jvwrD3PVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2 MDUyMWMyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJURMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKms/d+/Q6rTQq8ZxwEakKH0b9RkUXJU5Aqz1KBhGcQKPQGizmgOiuS 9AERpvsm5f5r+9eTralsLdHSGami6tOsG6GpMM5dTq7GhvWyBuQ8LRkqlTvaEsVn O5hoAJ0pwaZzJ/1JH0Xw4HApkOofHbu5QwEiy4ANLnoqGIujrb72Zoz08LN3UPb1 mL3/xBOX1I6jTP2+PuX2K/7TNpmTJBgFgzEjy4+mVfJwQanBh2SFAm0Plfja+qEe ssvL/dW9kwLEHIif92jn9xYhgIRtywDvMBVtYhvOuuRiU5usPWs3+ueRg2j2M7Hj mTH4MIx6eSKcG517cmdrD73SedHxOLY= -----END CERTIFICATE-----Generated at Mon Jun 30 00:08:41 2025 by rpki-client