$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa File: 41914f71-9ef4-3fe3-a531-72a93a74531a.roa (raw, json) Hash identifier: /ZwMOUJEV0nn8Ytysa7LSNHFmO5AslC4uV5ILB+58ZY= Subject key identifier: A6:94:00:2D:A1:CA:CB:57:B5:AF:F0:13:C2:E7:2E:49:FB:6E:4E:A1 Certificate issuer: /CN=d0871315-1c52-46f6-bb0e-2113ca1f139d Certificate serial: 010D0C9F43285849C4D4BA3FB3FD5BA43BD77380 Authority key identifier: E3:CB:E3:7E:4E:90:9D:3C:13:A3:5E:40:5F:C3:9B:5F:8F:2F:0D:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 33060 IP address blocks: 192.133.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:ba:3f:b3:fd:5b:a4:3b:d7:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0871315-1c52-46f6-bb0e-2113ca1f139d Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=ff3a8deb-ac8a-4d50-9fd0-dc7a69d9fd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:7b:3e:f6:cb:f3:97:73:07:de:8f:6b:5d: c8:58:46:11:72:5a:49:73:af:63:6f:2b:3b:4f:33: 8d:97:30:97:cc:0e:a8:63:d4:9b:39:dd:3f:c5:24: 8c:1d:6e:5f:a0:b5:4f:6b:f3:6a:5c:84:ad:0c:c0: 33:cd:79:c9:c3:36:32:43:e6:bf:34:a7:1d:37:46: 72:28:32:07:36:e9:e8:2b:da:db:38:5f:de:f4:1c: 64:f1:6b:3e:71:34:b2:51:ec:2a:8e:f9:3c:b0:ea: 08:09:41:ee:4f:45:69:bb:02:d9:c8:cf:be:f0:d6: b5:f8:4c:fe:1f:1c:4d:dd:32:df:dc:f8:9a:9b:85: f7:1a:57:5e:9b:3a:01:ad:5b:e8:31:97:bb:4f:39: e5:09:0d:10:81:c4:03:cd:17:25:6d:df:85:44:2e: 8e:af:48:2b:b1:33:ab:12:bc:0b:3d:b5:b1:fc:75: f0:9f:3a:31:11:cf:1b:96:c2:e6:57:10:aa:cf:02: d5:ef:7e:2a:d1:ef:6d:d1:cc:87:86:32:2b:0e:f6: 92:7d:a6:cd:b0:01:3c:5c:fc:84:c8:f0:a6:db:53: c5:d5:ff:74:ec:e1:3e:ae:33:60:27:04:56:bf:be: 5d:1f:2b:7d:18:61:07:85:81:17:0e:b2:f4:44:77: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:94:00:2D:A1:CA:CB:57:B5:AF:F0:13:C2:E7:2E:49:FB:6E:4E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.crl X509v3 Authority Key Identifier: keyid:E3:CB:E3:7E:4E:90:9D:3C:13:A3:5E:40:5F:C3:9B:5F:8F:2F:0D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer sbgp-ipAddrBlock: critical IPv4: 192.133.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:94:03:28:9a:5e:d9:ee:e7:5c:39:af:43:e1:d1:3b:b3:95: 48:06:f4:47:ed:63:e1:f3:13:8a:a0:f0:a3:4e:09:c1:93:a0: ea:1b:69:fe:6e:e9:43:76:6e:70:8c:84:b0:50:a0:c7:14:eb: a9:4d:79:09:44:f1:d6:6e:8e:e2:34:79:1f:d0:bd:91:92:bc: 16:8c:30:93:4d:66:8c:0a:dd:54:ba:a0:28:5d:83:ee:36:97: e1:2b:6d:ab:65:b8:60:a1:75:c5:33:54:63:fd:00:9d:9c:d2: d1:26:95:76:25:8e:80:46:d9:60:47:60:3b:70:7f:0d:36:d0: 90:94:be:67:74:84:f4:e6:49:c9:63:04:43:99:30:e6:f8:9d: 67:8d:4b:a2:02:52:11:2b:f4:3a:ff:74:f2:aa:13:8e:d7:a2: 1a:ef:01:73:0f:e5:d3:1c:d2:29:10:b8:12:ef:21:99:cb:4d: 17:0e:36:81:f2:de:24:86:26:ce:db:ce:98:20:a2:8b:4f:13: 32:0f:1d:79:ba:bf:56:4f:5c:b0:ce:fc:9f:cb:5a:4a:4d:f9: 66:95:f8:98:67:ea:42:8c:2e:c1:68:90:f3:dd:e8:b9:ad:1e: 9a:7e:58:82:8f:5a:9c:95:76:ae:c5:e8:cc:77:a5:a5:d4:79: bd:d5:8e:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1Lo/s/1bpDvXc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA4NzEzMTUtMWM1Mi00NmY2LWJiMGUtMjExM2NhMWYx MzlkMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZmYzYThkZWItYWM4YS00ZDUwLTlmZDAtZGM3YTY5ZDlmZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRt7PvbL85dzB96Pa13IWEYRclpJc69jbys7 TzONlzCXzA6oY9SbOd0/xSSMHW5foLVPa/NqXIStDMAzzXnJwzYyQ+a/NKcdN0Zy KDIHNunoK9rbOF/e9Bxk8Ws+cTSyUewqjvk8sOoICUHuT0VpuwLZyM++8Na1+Ez+ HxxN3TLf3Piam4X3GldemzoBrVvoMZe7TznlCQ0QgcQDzRclbd+FRC6Or0grsTOr ErwLPbWx/HXwnzoxEc8blsLmVxCqzwLV734q0e9t0cyHhjIrDvaSfabNsAE8XPyE yPCm21PF1f907OE+rjNgJwRWv75dHyt9GGEHhYEXDrL0RHeNkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaUAC2hystXta/wE8LnLkn7bk6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMDg3 MTMxNS0xYzUyLTQ2ZjYtYmIwZS0yMTEzY2ExZjEzOWQvNDE5MTRmNzEtOWVmNC0z ZmUzLWE1MzEtNzJhOTNhNzQ1MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDA4NzEzMTUtMWM1Mi00NmY2LWJi MGUtMjExM2NhMWYxMzlkL2QwODcxMzE1LTFjNTItNDZmNi1iYjBlLTIxMTNjYTFm MTM5ZC5jcmwwHwYDVR0jBBgwFoAU48vjfk6QnTwTo15AX8ObX48vDeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMDg3MTMxNS0xYzUyLTQ2ZjYtYmIwZS0yMTEz Y2ExZjEzOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaUAyiaXtnu51w5r0Ph0TuzlUgG9EftY+HzE4qg8KNOCcGToOobaf5u 6UN2bnCMhLBQoMcU66lNeQlE8dZujuI0eR/QvZGSvBaMMJNNZowK3VS6oChdg+42 l+ErbatluGChdcUzVGP9AJ2c0tEmlXYljoBG2WBHYDtwfw020JCUvmd0hPTmSclj BEOZMOb4nWeNS6ICUhEr9Dr/dPKqE47XohrvAXMP5dMc0ikQuBLvIZnLTRcONoHy 3iSGJs7bzpggootPEzIPHXm6v1ZPXLDO/J/LWkpN+WaV+Jhn6kKMLsFokPPd6Lmt Hpp+WIKPWpyVdq7F6Mx3paXUeb3Vjuw= -----END CERTIFICATE-----Generated at Sun May 11 10:17:05 2025 by rpki-client