$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa File: aa4087d7-dc3e-33d9-919f-151eee0337f4.roa (raw, json) Hash identifier: pD5XV2OJhwCihF6rMV7xBWOQQJZYwrJo/ooqU+SKNlw= Subject key identifier: B1:3A:BA:3F:26:58:FE:6A:18:FB:6B:DE:F9:4C:65:F4:7A:AD:9B:22 Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584A3E3E68DC4857DDE4A61D90C0 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa Signing time: Thu 19 Jun 2025 12:46:38 +0000 ROA not before: Thu 19 Jun 2025 12:46:38 +0000 ROA not after: Wed 17 Sep 2025 12:46:38 +0000 asID: 29900 IP address blocks: 162.218.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:3e:68:dc:48:57:dd:e4:a6:1d:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: Jun 19 12:46:38 2025 GMT Not After : Sep 17 12:46:38 2025 GMT Subject: CN=adbc2d4a-0a10-4ed8-9cd3-242e2d22fef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:e4:dd:1b:37:de:1e:25:f8:79:f7:54:cf: 4b:dd:aa:75:56:ed:43:77:cf:73:3c:8a:04:35:49: 63:ed:08:54:5a:b5:ef:46:bb:d6:74:db:21:5f:52: 70:2c:b2:d9:6d:35:48:cf:85:e6:ff:29:d9:ca:7f: f1:37:d5:5e:ce:7c:b0:37:b1:07:1d:0a:52:55:6a: 6b:6d:83:c1:59:55:0e:77:6e:18:3c:16:6f:31:b4: 89:05:e7:bd:f7:a1:8a:66:d8:91:a9:bf:c2:b4:c8: 6f:6c:42:7a:82:c9:a9:6d:da:d8:2e:12:66:e4:de: 0d:d4:c0:06:6a:e3:4e:82:d2:2c:5e:46:ee:16:e2: be:ae:b2:82:de:33:4c:24:59:aa:ed:3e:ea:06:90: b4:40:68:85:95:97:c3:fb:50:79:3f:93:27:43:5c: ae:e5:c5:d1:61:f7:9e:68:e1:91:4b:02:d3:78:53: 6a:d0:79:a8:d1:1b:4b:ef:fb:ab:e6:ac:0d:57:ad: 1f:f1:f2:dc:fa:b3:c9:e5:e0:72:11:22:ac:4f:d7: a9:4b:e9:0a:46:1e:07:f3:02:94:d7:e7:b5:15:72: 11:0d:86:9e:1a:18:09:7c:07:9f:bf:cb:b4:17:2f: da:06:09:2c:e6:93:49:6b:0f:e8:9a:ef:6c:7e:c0: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3A:BA:3F:26:58:FE:6A:18:FB:6B:DE:F9:4C:65:F4:7A:AD:9B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:12:e6:6f:ea:a0:5e:ab:7e:be:62:11:a5:c2:e2:50:26:2e: f8:53:b5:e4:24:50:ac:5c:24:e2:bf:f7:4f:9a:74:48:9b:d2: ff:c7:da:02:c3:5b:3f:93:9c:79:80:c0:5d:d5:74:80:1b:b9: 70:6d:c3:e7:e2:48:30:70:7c:ec:b2:e4:08:3b:91:44:68:3f: 40:4a:4a:fa:55:28:03:0d:41:03:e9:bd:e1:5f:7e:b5:33:af: 9a:03:8f:f2:e5:ff:60:82:b3:38:a7:8a:56:7f:96:b3:ab:ec: 9e:a2:b8:a6:51:85:94:12:10:1d:ff:a7:ef:63:27:fc:4b:b4: 59:f8:7b:17:9a:2d:8d:91:cc:78:7d:e1:54:1d:44:c4:2f:a0: 22:52:b1:bc:71:e7:5e:74:32:86:94:28:77:d1:57:9c:a2:2b: 34:0e:9a:cb:69:1f:ad:73:d3:83:41:d6:aa:32:96:70:98:6b: 11:b5:de:7f:a4:08:0b:12:0a:77:3a:6e:69:ab:c1:04:44:d5: 86:e2:a0:9f:23:9a:93:80:04:79:a5:73:26:37:6d:0c:df:a7: bc:49:0d:f9:29:a8:05:28:0e:07:05:10:65:ba:b5:14:a4:a3: 35:27:7b:ea:6a:9e:c8:d8:ba:06:46:f3:df:00:b0:83:30:de: c6:72:92:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+PmjcSFfd5KYdkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI1MDYxOTEyNDYzOFoXDTI1MDkxNzEyNDYzOFowLzEtMCsGA1UEAxMk YWRiYzJkNGEtMGExMC00ZWQ4LTljZDMtMjQyZTJkMjJmZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bzk3Rs33h4l+Hn3VM9L3ap1Vu1Dd89zPIoE NUlj7QhUWrXvRrvWdNshX1JwLLLZbTVIz4Xm/ynZyn/xN9VeznywN7EHHQpSVWpr bYPBWVUOd24YPBZvMbSJBee996GKZtiRqb/CtMhvbEJ6gsmpbdrYLhJm5N4N1MAG auNOgtIsXkbuFuK+rrKC3jNMJFmq7T7qBpC0QGiFlZfD+1B5P5MnQ1yu5cXRYfee aOGRSwLTeFNq0Hmo0RtL7/ur5qwNV60f8fLc+rPJ5eByESKsT9epS+kKRh4H8wKU 1+e1FXIRDYaeGhgJfAefv8u0Fy/aBgks5pNJaw/omu9sfsDgkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE6uj8mWP5qGPtr3vlMZfR6rZsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvYWE0MDg3ZDctZGMzZS0z M2Q5LTkxOWYtMTUxZWVlMDMzN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoS5m/qoF6rfr5iEaXC4lAmLvhTteQkUKxcJOK/90+adEib0v/H2gLD Wz+TnHmAwF3VdIAbuXBtw+fiSDBwfOyy5Ag7kURoP0BKSvpVKAMNQQPpveFffrUz r5oDj/Ll/2CCszinilZ/lrOr7J6iuKZRhZQSEB3/p+9jJ/xLtFn4exeaLY2RzHh9 4VQdRMQvoCJSsbxx5150MoaUKHfRV5yiKzQOmstpH61z04NB1qoylnCYaxG13n+k CAsSCnc6bmmrwQRE1YbioJ8jmpOABHmlcyY3bQzfp7xJDfkpqAUoDgcFEGW6tRSk ozUne+pqnsjYugZG898AsIMw3sZykr8= -----END CERTIFICATE-----Generated at Mon Jun 30 14:14:06 2025 by rpki-client