$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa File: 20ba3136-7192-3d31-ba1d-b329c8840df5.roa (raw, json) Hash identifier: rAl6p2BzVCQoFo6AbqHkmf/iXy1EGnU+bymAml7i/AM= Subject key identifier: 45:E7:B9:96:1A:4F:C8:DC:AB:17:45:3B:DE:DE:D6:5B:6C:D2:85:CD Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F43285849C20A12AD5ACA8D84E0743A80 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 53405 IP address blocks: 192.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:12:ad:5a:ca:8d:84:e0:74:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=8f05923a-bafc-437e-b6e7-c0876086799b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:e6:fe:5f:bc:9f:ca:fb:3f:ec:8c:74:63: e9:5c:3c:26:63:52:9f:5a:42:a5:5d:8e:c7:7b:a6: 59:95:28:2a:19:00:e4:d5:eb:8a:bc:85:80:ac:e8: d6:80:17:1e:38:9c:26:52:72:db:81:6a:18:d3:9c: 36:22:15:78:8a:96:c2:eb:9d:f5:db:d3:ff:19:12: 4b:1a:5a:04:8e:a0:82:14:bc:d7:b8:53:2a:63:28: 27:09:7e:38:f1:35:9a:fe:17:e7:30:bb:d9:9d:0a: 7e:47:62:a3:7b:d8:89:26:9b:9e:7c:84:60:d5:1d: 99:7e:1d:c8:89:ca:14:29:33:4d:70:da:0f:b4:9e: 78:b4:80:7e:51:2b:25:1e:b8:eb:bb:0b:dc:16:52: c1:2f:8e:db:1b:be:e6:68:f8:0e:45:ac:b4:e5:51: 42:38:47:41:ec:ef:82:40:22:20:f1:66:f9:4a:61: 78:f7:2f:90:13:77:b4:a7:c4:0f:c2:b0:96:7f:b7: ff:46:26:44:42:aa:84:ee:bf:a4:34:29:27:2c:f8: 5e:69:d9:9b:43:7e:e1:47:53:db:7e:3a:f8:73:ed: 1a:58:9e:b6:8d:cc:c1:ed:6f:6f:fb:99:4f:47:b2: 77:c1:9f:46:f1:28:b5:05:b1:17:3a:41:d5:ab:be: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E7:B9:96:1A:4F:C8:DC:AB:17:45:3B:DE:DE:D6:5B:6C:D2:85:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv4: 192.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4d:46:39:37:9a:44:84:59:df:33:55:f9:70:9d:c3:07:a2: 18:c7:36:73:63:8d:da:19:f7:ef:a9:2a:94:b9:99:c7:83:67: f4:05:0e:b2:f8:f0:2b:ec:26:41:8f:0d:f1:18:43:ed:f4:54: fa:b0:db:6a:af:86:1b:a6:da:d2:cc:61:32:af:48:72:f7:39: d8:f6:cf:ac:aa:ce:15:2a:fb:67:8c:2d:46:54:08:54:25:4f: a5:54:2e:96:cd:72:6f:3e:0f:59:13:b5:a1:f4:82:df:ee:19: b2:47:ac:ef:9f:fc:71:1c:2e:a5:f9:0f:65:75:a7:de:68:97: cc:7c:cf:b5:d2:2d:cc:80:5c:d0:91:9e:29:7f:f3:ba:3b:b7: 75:dc:b8:86:ac:27:9a:ec:46:79:7b:a4:45:35:10:d8:54:6d: 17:f9:85:14:4f:54:2d:ec:6d:da:cd:c3:d2:48:2e:da:40:85: 65:81:0c:fb:21:fa:b4:0f:31:9f:09:38:40:f3:36:6d:c2:66: ae:cf:ec:dd:89:85:cb:cf:73:ec:24:1b:f3:f7:97:7b:86:2d: 1a:8a:bd:11:ea:41:2a:11:13:bc:3c:77:79:48:55:09:1c:c6: f7:b6:1a:05:8b:16:fa:2c:35:0c:63:d9:95:2b:dc:b0:da:f3: 2a:41:e8:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChKtWsqNhOB0OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OGYwNTkyM2EtYmFmYy00MzdlLWI2ZTctYzA4NzYwODY3OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF/m/l+8n8r7P+yMdGPpXDwmY1KfWkKlXY7H e6ZZlSgqGQDk1euKvIWArOjWgBceOJwmUnLbgWoY05w2IhV4ipbC653129P/GRJL GloEjqCCFLzXuFMqYygnCX448TWa/hfnMLvZnQp+R2Kje9iJJpuefIRg1R2Zfh3I icoUKTNNcNoPtJ54tIB+USslHrjruwvcFlLBL47bG77maPgORay05VFCOEdB7O+C QCIg8Wb5SmF49y+QE3e0p8QPwrCWf7f/RiZEQqqE7r+kNCknLPheadmbQ37hR1Pb fjr4c+0aWJ62jczB7W9v+5lPR7J3wZ9G8Si1BbEXOkHVq778OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXnuZYaT8jcqxdFO97e1lts0oXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvMjBiYTMxMzYtNzE5Mi0z ZDMxLWJhMWQtYjMyOWM4ODQwZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwMfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFNRjk3mkSEWd8zVflwncMHohjHNnNjjdoZ9++pKpS5mceDZ/QFDrL4 8CvsJkGPDfEYQ+30VPqw22qvhhum2tLMYTKvSHL3Odj2z6yqzhUq+2eMLUZUCFQl T6VULpbNcm8+D1kTtaH0gt/uGbJHrO+f/HEcLqX5D2V1p95ol8x8z7XSLcyAXNCR nil/87o7t3XcuIasJ5rsRnl7pEU1ENhUbRf5hRRPVC3sbdrNw9JILtpAhWWBDPsh +rQPMZ8JOEDzNm3CZq7P7N2JhcvPc+wkG/P3l3uGLRqKvRHqQSoRE7w8d3lIVQkc xve2GgWLFvosNQxj2ZUr3LDa8ypB6Jc= -----END CERTIFICATE-----Generated at Sat May 10 02:16:57 2025 by rpki-client