$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa File: 52bbdc2f-bbde-3036-8aca-e24454a54d90.roa (raw, json) Hash identifier: dqKuSCyHufUr5yZoxvBfhf9aj0pCbO/KbSWFg7A7KDM= Subject key identifier: C0:99:0C:0F:9E:D0:C1:A6:93:E8:7A:7F:67:77:82:D3:66:F7:D8:1D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849AA4F72896D471673DF65FD00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 2000 IP address blocks: 192.41.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:72:89:6d:47:16:73:df:65:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=995bdc8d-e624-48a8-8977-1a3488dc9476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:95:29:f4:7f:f4:92:82:5d:55:6d:d9:63: ca:75:60:fb:12:f7:ea:9a:e6:d2:28:9a:19:70:53: 28:0a:00:b8:a4:4d:65:46:f1:df:97:aa:93:d2:24: 92:40:83:99:be:37:63:3e:0e:db:cb:b5:d7:fd:8d: 8f:a2:b6:db:4a:08:0d:1f:2e:70:f2:2f:58:1d:c1: a9:ee:86:7f:6a:60:73:98:3b:23:ea:dd:04:7e:11: cf:17:9f:8f:1d:b3:e5:9c:2b:04:1d:49:24:cb:85: aa:ae:db:42:dc:a8:c2:79:34:fb:2a:61:38:d8:af: 27:15:36:3c:c2:3d:3e:21:d4:8f:e1:93:96:95:46: d9:21:c6:fb:9d:4e:53:26:5e:49:35:89:3c:bd:12: be:ec:12:88:3f:b4:ae:eb:01:2b:fe:10:26:43:f6: 33:5f:52:06:cc:6a:18:4b:0e:70:37:58:14:46:1a: b6:3f:f6:59:88:a7:38:fa:f0:85:14:11:e9:0a:b0: a6:52:80:e1:6d:55:3a:1d:32:83:49:67:fe:ad:db: 66:95:e0:b0:1b:5b:b7:34:64:1c:f6:bf:07:75:d6: 4f:8a:d7:4d:9c:28:c8:2d:92:b9:f1:f3:90:9a:00: b1:d0:a6:6f:c1:94:5d:69:2f:96:ce:8a:e9:54:79: 1d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:99:0C:0F:9E:D0:C1:A6:93:E8:7A:7F:67:77:82:D3:66:F7:D8:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.41.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:15:21:ed:48:4d:39:d0:72:b3:8e:58:dc:b3:5c:31:dd:a9: 71:b2:e8:d1:b4:12:1e:33:16:8c:20:21:f1:3c:8c:91:c3:51: ed:b2:28:99:f6:42:ad:57:bb:d2:2a:28:a2:a3:7c:74:3d:81: 61:aa:b3:74:d0:60:29:d2:49:df:74:b9:64:ad:0a:f3:1b:33: 8b:90:c1:ce:a6:ea:4b:dc:7e:fc:3a:8c:69:b3:53:f3:32:a4: c3:42:de:cc:ea:6d:f6:08:40:ae:f1:d3:1e:91:02:7f:53:af: 5c:d4:5d:d9:25:ec:19:03:a6:cc:1d:8c:78:a0:59:23:95:b9: c4:b6:56:83:02:4e:8d:ad:3d:75:44:d8:8e:2d:19:74:b7:21: c0:e6:a6:e8:4d:25:76:88:97:d2:e5:76:4c:9e:fb:ad:07:2f: ae:24:d8:9b:19:35:df:f6:5a:ef:9d:bb:43:51:6b:20:42:e1: 92:52:d2:0d:e2:af:20:f1:b2:7e:11:6e:25:36:11:cc:0e:3f: 57:3c:82:98:c3:33:5a:f5:33:38:ff:98:f0:ae:c7:06:03:1f: d8:07:ba:40:66:9a:86:ed:45:2f:6a:f0:d6:9f:82:a0:35:92: 8b:93:08:b7:69:0d:9d:86:59:99:e3:d3:ff:fe:44:6b:0b:f4: 54:ed:7b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3KJbUcWc99l/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk OTk1YmRjOGQtZTYyNC00OGE4LTg5NzctMWEzNDg4ZGM5NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSGVKfR/9JKCXVVt2WPKdWD7EvfqmubSKJoZ cFMoCgC4pE1lRvHfl6qT0iSSQIOZvjdjPg7by7XX/Y2PorbbSggNHy5w8i9YHcGp 7oZ/amBzmDsj6t0EfhHPF5+PHbPlnCsEHUkky4WqrttC3KjCeTT7KmE42K8nFTY8 wj0+IdSP4ZOWlUbZIcb7nU5TJl5JNYk8vRK+7BKIP7Su6wEr/hAmQ/YzX1IGzGoY Sw5wN1gURhq2P/ZZiKc4+vCFFBHpCrCmUoDhbVU6HTKDSWf+rdtmleCwG1u3NGQc 9r8HddZPitdNnCjILZK58fOQmgCx0KZvwZRdaS+WzorpVHkd+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCZDA+e0MGmk+h6f2d3gtNm99gdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTJiYmRjMmYtYmJkZS0z MDM2LThhY2EtZTI0NDU0YTU0ZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoVIe1ITTnQcrOOWNyzXDHdqXGy6NG0Eh4zFowgIfE8jJHDUe2yKJn2 Qq1Xu9IqKKKjfHQ9gWGqs3TQYCnSSd90uWStCvMbM4uQwc6m6kvcfvw6jGmzU/My pMNC3szqbfYIQK7x0x6RAn9Tr1zUXdkl7BkDpswdjHigWSOVucS2VoMCTo2tPXVE 2I4tGXS3IcDmpuhNJXaIl9Lldkye+60HL64k2JsZNd/2Wu+du0NRayBC4ZJS0g3i ryDxsn4RbiU2EcwOP1c8gpjDM1r1Mzj/mPCuxwYDH9gHukBmmobtRS9q8NafgqA1 kouTCLdpDZ2GWZnj0//+RGsL9FTte+o= -----END CERTIFICATE-----Generated at Sun May 11 03:40:56 2025 by rpki-client