$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa File: ab4a7e1a-4ce4-327a-b528-184e489b447c.roa (raw, json) Hash identifier: cBkArcP4ihKFeDdZEF0bTYhQBOSHHTTECvK//HbtD5Y= Subject key identifier: 11:5F:20:FC:82:87:0B:17:BC:79:09:48:CC:68:2B:37:F8:84:31:97 Certificate issuer: /CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Certificate serial: 010D0C9F43285849C0A4D484634CF3776C98C780 Authority key identifier: 1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 394090 IP address blocks: 192.136.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d4:84:63:4c:f3:77:6c:98:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=ff449ffb-5a16-411b-8ef6-c30ec378cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:e5:95:b9:ef:16:43:fd:08:da:9a:8f:59: 83:21:bf:7c:56:8a:b2:15:5a:93:29:b5:77:ff:33: 46:a2:67:96:83:ee:03:e1:37:9d:59:23:d2:f6:56: 37:07:97:76:95:06:62:10:90:c0:8b:20:0f:7d:c7: 35:96:2b:e7:d8:f5:bb:20:35:24:0f:27:c2:bc:ea: e2:f2:d0:24:69:e9:6b:1c:4d:9a:be:26:93:53:45: 24:e2:73:15:9d:e7:a5:81:79:20:9e:6f:e3:d9:c4: 32:14:62:42:fe:ed:fc:69:6b:87:86:6f:22:bf:14: e5:81:93:96:d2:df:ac:2d:72:a2:a0:a8:a7:c5:74: 60:3c:42:43:a1:4c:08:de:73:20:66:e2:ef:59:62: d8:0f:74:84:12:28:76:c1:98:96:ce:f0:76:73:2b: 6b:c2:56:1f:e7:bc:05:48:13:84:df:d0:6e:90:53: 32:2a:20:16:78:5f:4f:ea:3b:35:d7:6d:7d:50:04: 20:a2:21:85:e1:70:d0:40:5d:6e:72:fd:9b:42:02: ee:cf:24:c1:d7:15:55:4c:bf:31:bb:fc:e0:8a:2b: a7:1d:89:74:77:5a:4b:06:b2:47:52:70:0b:75:3c: 7d:49:32:3b:b3:9f:80:aa:49:ae:ef:eb:c0:a1:2f: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5F:20:FC:82:87:0B:17:BC:79:09:48:CC:68:2B:37:F8:84:31:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl X509v3 Authority Key Identifier: keyid:1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer sbgp-ipAddrBlock: critical IPv4: 192.136.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d7:4e:22:41:ac:58:7e:df:29:b7:2b:1c:95:0f:88:69:d6: 31:b5:69:ec:6e:f6:ee:94:69:3d:07:df:1e:91:05:15:c1:f3: 28:64:74:1a:a6:d4:60:e1:bf:27:4a:55:17:e3:26:e5:ec:12: 51:09:e2:cb:3a:11:76:fa:dc:05:df:7b:3d:a7:0e:70:64:96: cd:51:61:64:73:a0:52:59:2a:d9:0b:62:a2:b0:a1:60:88:39: e7:67:37:ec:d5:42:7b:6b:3c:b8:67:d3:e3:5b:96:28:02:69: 26:78:2e:7c:e6:f6:4e:09:ef:3f:01:e9:a8:ac:fb:21:db:8b: 9f:50:09:0a:59:81:a2:ae:cc:3a:56:ba:6b:0c:98:5d:9b:f5: c2:87:ff:94:cf:97:72:dd:eb:18:13:45:a3:ba:73:28:cc:c4: e2:da:72:02:6d:71:19:a6:fd:c3:cf:f8:71:c4:da:3e:91:61: d4:25:13:48:4a:6a:fa:e8:6f:fe:b8:34:4c:64:b9:91:06:4e: 7d:6a:37:b1:c5:02:7e:a4:2d:f1:29:9f:3b:c9:79:df:e4:24: 9a:89:78:93:db:03:b7:40:49:c9:8c:f7:a0:f7:1a:64:22:69: 6e:b9:00:be:49:e8:0d:4a:1b:73:b2:0e:54:b1:b8:3c:43:f3: 00:3c:d8:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNSEY0zzd2yYx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzZjY3MTctMjA0OC00NGMxLWFlNzctNTBlNWNlNmU5 ZGVhMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmY0NDlmZmItNWExNi00MTFiLThlZjYtYzMwZWMzNzhjYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhrllbnvFkP9CNqaj1mDIb98VoqyFVqTKbV3 /zNGomeWg+4D4TedWSPS9lY3B5d2lQZiEJDAiyAPfcc1livn2PW7IDUkDyfCvOri 8tAkaelrHE2aviaTU0Uk4nMVneelgXkgnm/j2cQyFGJC/u38aWuHhm8ivxTlgZOW 0t+sLXKioKinxXRgPEJDoUwI3nMgZuLvWWLYD3SEEih2wZiWzvB2cytrwlYf57wF SBOE39BukFMyKiAWeF9P6js11219UAQgoiGF4XDQQF1ucv2bQgLuzyTB1xVVTL8x u/zgiiunHYl0d1pLBrJHUnALdTx9STI7s5+Aqkmu7+vAoS8NKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFfIPyChwsXvHkJSMxoKzf4hDGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNm NjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1Y2U2ZTlkZWEvYWI0YTdlMWEtNGNlNC0z MjdhLWI1MjgtMTg0ZTQ4OWI0NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGMzZjY3MTctMjA0OC00NGMxLWFl NzctNTBlNWNlNmU5ZGVhLzRjM2Y2NzE3LTIwNDgtNDRjMS1hZTc3LTUwZTVjZTZl OWRlYS5jcmwwHwYDVR0jBBgwFoAUGznG6Jb5p5VqOxqjxSoENpY+TaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNmNjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1 Y2U2ZTlkZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbXTiJBrFh+3ym3KxyVD4hp1jG1aexu9u6UaT0H3x6RBRXB8yhkdBqm 1GDhvydKVRfjJuXsElEJ4ss6EXb63AXfez2nDnBkls1RYWRzoFJZKtkLYqKwoWCI OednN+zVQntrPLhn0+NbligCaSZ4Lnzm9k4J7z8B6ais+yHbi59QCQpZgaKuzDpW umsMmF2b9cKH/5TPl3Ld6xgTRaO6cyjMxOLacgJtcRmm/cPP+HHE2j6RYdQlE0hK avrob/64NExkuZEGTn1qN7HFAn6kLfEpnzvJed/kJJqJeJPbA7dAScmM96D3GmQi aW65AL5J6A1KG3OyDlSxuDxD8wA82EI= -----END CERTIFICATE-----Generated at Sat May 10 13:47:37 2025 by rpki-client