$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/009f2b2f-a177-3aa5-a45e-16bf6ab14f36.roa File: 009f2b2f-a177-3aa5-a45e-16bf6ab14f36.roa (raw, json) Hash identifier: CWJy0k26WsaXN2Jfgp/USy8zOHmqQm0Nz1zhkvnxvUk= Subject key identifier: 74:3B:A1:39:09:90:B3:04:C3:8D:00:CE:E6:FF:A7:50:BE:2F:75:95 Certificate issuer: /CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec Certificate serial: 010D0C9F43285849C904F4D83EBBF192A2C59100 Authority key identifier: 12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/009f2b2f-a177-3aa5-a45e-16bf6ab14f36.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 46641 IP address blocks: 192.68.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f4:d8:3e:bb:f1:92:a2:c5:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=0608fc78-42b7-4aad-a55b-69c184e473a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:7e:76:b5:0f:af:b4:9d:d3:b1:fc:48:dd: 7b:d5:2f:24:81:e8:92:cc:b1:7d:e3:6f:22:42:41: ae:94:2e:5a:94:54:b1:b3:1d:78:4e:54:5f:fe:df: c8:96:08:30:49:7a:e4:63:06:db:d9:37:44:a8:10: 94:1d:4e:a6:fa:54:30:2c:5c:73:40:58:08:4b:7b: 21:40:b1:c2:41:4c:aa:da:90:83:e3:53:ff:40:f9: dd:9d:5e:50:1f:99:70:00:aa:3d:71:b6:08:c0:7e: 96:a6:23:b7:13:96:db:e4:77:8d:29:d4:18:80:00: e1:17:46:e2:df:ed:df:81:07:b7:c8:47:71:bb:22: 1b:be:33:27:b3:56:d7:15:d1:21:56:83:2b:88:fb: 8d:26:b8:ee:81:1c:99:fa:75:54:87:69:57:17:d9: 20:34:e6:d6:b0:79:0e:c7:75:70:75:39:0e:6a:33: 1a:65:6c:5a:51:41:78:d9:e7:5b:e9:1c:90:a6:f1: a3:01:af:e1:06:61:0f:ad:d5:2a:17:a2:42:ed:66: d2:b4:45:e6:1c:1a:cf:fa:83:c3:44:8a:bd:0a:bb: 36:f8:e6:e2:51:49:35:80:8e:bc:4c:72:59:b4:ac: 7e:31:ae:8c:f6:a0:73:e8:e6:35:ba:10:04:5a:c7: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3B:A1:39:09:90:B3:04:C3:8D:00:CE:E6:FF:A7:50:BE:2F:75:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/009f2b2f-a177-3aa5-a45e-16bf6ab14f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl X509v3 Authority Key Identifier: keyid:12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer sbgp-ipAddrBlock: critical IPv4: 192.68.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5a:34:3a:b7:56:11:82:68:0e:2b:2f:bb:52:ed:62:9b:46: 1d:1e:a6:c0:4f:84:bc:dd:37:c4:f4:bb:39:2e:f2:a2:71:2c: 71:74:d0:96:a1:0f:1c:44:a6:d3:4f:22:9f:c1:1c:1a:47:bb: 12:6c:1a:88:62:83:a1:28:4a:8d:f3:85:16:2a:d9:5c:4a:1e: a3:2a:8c:a7:d0:4b:0b:c2:8f:0d:91:81:6c:ba:48:4c:e8:b8: ee:bf:22:e3:2c:2e:5e:1a:b1:08:9f:51:6f:79:8a:52:33:44: 05:06:aa:a9:6a:2c:4e:01:33:bc:3c:a9:44:03:73:2a:35:3f: fd:88:f7:22:9d:68:7e:bd:28:6c:f2:b9:69:8b:b8:fa:ee:93: 5f:a9:f6:f8:9a:47:d6:80:28:33:52:11:af:51:a1:18:ef:27: 2f:98:d4:79:ba:14:1e:33:a8:9f:15:1a:66:23:c9:11:6b:3a: e5:53:a3:96:0d:b2:b0:a7:30:2c:6e:17:46:21:35:30:97:20: e9:71:db:d5:e2:b7:d2:df:cc:88:b3:2f:17:f3:34:6c:a0:f9: 84:07:05:80:13:53:d6:e7:b0:df:0d:1e:34:45:5b:06:07:3e: 95:5b:8b:22:ac:f1:da:7d:25:a1:84:28:e9:3d:10:96:de:57: d3:d7:c9:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPTYPrvxkqLFkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVmMDRmYmItNDRkOC00ZDQ4LThkMjMtZTRiMjA4MzFh MGVjMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MDYwOGZjNzgtNDJiNy00YWFkLWE1NWItNjljMTg0ZTQ3M2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B5+drUPr7Sd07H8SN171S8kgeiSzLF9428i QkGulC5alFSxsx14TlRf/t/IlggwSXrkYwbb2TdEqBCUHU6m+lQwLFxzQFgIS3sh QLHCQUyq2pCD41P/QPndnV5QH5lwAKo9cbYIwH6WpiO3E5bb5HeNKdQYgADhF0bi 3+3fgQe3yEdxuyIbvjMns1bXFdEhVoMriPuNJrjugRyZ+nVUh2lXF9kgNObWsHkO x3VwdTkOajMaZWxaUUF42edb6RyQpvGjAa/hBmEPrdUqF6JC7WbStEXmHBrP+oPD RIq9Crs2+ObiUUk1gI68THJZtKx+Ma6M9qBz6OY1uhAEWsdSsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ7oTkJkLMEw40Azub/p1C+L3WVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWYw NGZiYi00NGQ4LTRkNDgtOGQyMy1lNGIyMDgzMWEwZWMvMDA5ZjJiMmYtYTE3Ny0z YWE1LWE0NWUtMTZiZjZhYjE0ZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVmMDRmYmItNDRkOC00ZDQ4LThk MjMtZTRiMjA4MzFhMGVjLzRlZjA0ZmJiLTQ0ZDgtNGQ0OC04ZDIzLWU0YjIwODMx YTBlYy5jcmwwHwYDVR0jBBgwFoAUEi1E0ZJngVirE2Tins/kdrtSHJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWYwNGZiYi00NGQ4LTRkNDgtOGQyMy1lNGIy MDgzMWEwZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdaNDq3VhGCaA4rL7tS7WKbRh0epsBPhLzdN8T0uzku8qJxLHF00Jah DxxEptNPIp/BHBpHuxJsGohig6EoSo3zhRYq2VxKHqMqjKfQSwvCjw2RgWy6SEzo uO6/IuMsLl4asQifUW95ilIzRAUGqqlqLE4BM7w8qUQDcyo1P/2I9yKdaH69KGzy uWmLuPruk1+p9viaR9aAKDNSEa9RoRjvJy+Y1Hm6FB4zqJ8VGmYjyRFrOuVTo5YN srCnMCxuF0YhNTCXIOlx29Xit9LfzIizLxfzNGyg+YQHBYATU9bnsN8NHjRFWwYH PpVbiyKs8dp9JaGEKOk9EJbeV9PXyXk= -----END CERTIFICATE-----Generated at Mon May 12 02:17:10 2025 by rpki-client