$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa File: 6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa (raw, json) Hash identifier: SfDoVEfEVe5elMAQFwG3K1HmNK6kllBSJJVKD//3uBo= Subject key identifier: FB:30:A2:27:00:4F:41:CD:F3:34:38:63:F5:54:CC:D0:4E:D6:F5:2B Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F43285849CE9A60EDD38F574EE38B23C0 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 2734 IP address blocks: 192.34.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:60:ed:d3:8f:57:4e:e3:8b:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=66ff9261-4e2d-4eb5-9ad8-0250f2e75678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:91:7e:eb:27:e8:a3:9f:80:fb:b5:c3:01:b7: 33:82:a2:c9:6c:e6:0e:1f:20:49:39:3f:54:9f:68: 2e:90:c3:15:d5:68:9f:83:b5:01:64:b5:c4:d3:d5: 53:71:d3:3e:a8:f6:f6:9c:d9:5f:95:ef:a5:c2:c3: 74:ed:75:33:10:2a:94:2a:6a:8c:48:96:61:8e:77: 6b:40:48:8a:01:12:4a:0a:1e:fe:f1:34:05:03:8f: 7b:d4:76:82:b3:48:c4:e0:96:9c:31:8b:14:4b:8c: a7:a5:c2:37:c1:f3:92:bd:57:70:52:31:6a:de:f8: e7:f6:25:d5:9a:8f:90:1b:06:9b:6f:3f:01:26:62: a8:f3:82:1e:3c:39:26:9f:56:d0:25:e9:dc:08:31: fc:0a:53:bc:58:15:b2:e8:b1:0b:4f:8e:b1:a4:81: a9:01:ed:fc:6b:12:24:4f:a0:15:39:26:72:28:78: 16:03:9d:4d:34:29:af:4c:76:2e:a7:76:78:70:c2: 28:56:b8:a7:84:1b:b9:fa:ad:86:65:fc:6b:86:07: f2:5d:c7:66:c8:cb:79:b0:ea:80:0e:ee:db:43:1e: 48:4d:2f:58:be:a2:38:23:e7:cc:93:4a:b6:e0:f3: 78:2c:57:f9:04:ee:ec:71:a7:9b:59:86:08:d1:fd: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:30:A2:27:00:4F:41:CD:F3:34:38:63:F5:54:CC:D0:4E:D6:F5:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 192.34.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:71:e2:1d:a8:53:1b:68:d4:aa:c9:17:0b:83:f6:ab:b5:56: 7a:8d:3c:29:b9:62:01:37:73:94:2f:2d:b2:f2:2d:82:cd:c5: 52:0e:08:e2:45:33:05:9b:d9:93:b9:d6:95:38:f2:d1:22:e4: cc:82:02:10:7d:1b:5e:bd:12:66:17:bc:89:44:c5:70:7b:ab: 44:24:2e:00:1c:b9:64:6d:2b:7e:55:70:ac:73:9c:56:14:e8: 02:37:53:78:d1:fa:2e:ff:76:06:0d:5a:7f:40:a2:a4:b1:ce: 30:61:e0:f0:36:81:9d:0d:09:f8:93:90:96:22:d7:cd:0f:4e: 94:e4:94:d7:2c:8c:25:a2:a7:26:e6:97:70:6e:88:14:00:73: 1b:be:fd:d6:3d:51:be:09:8a:99:c4:c8:76:bb:2f:c9:b9:2d: 3a:e5:b8:3a:ef:f2:9c:5a:05:c1:ec:22:f3:97:4a:6f:32:11: 89:e7:59:ac:d6:2e:45:3d:5d:22:de:96:88:f4:9b:40:db:04: 8b:86:dd:53:31:12:dc:eb:31:72:c8:c1:fb:f4:99:ba:8c:03: 36:50:05:de:b1:78:53:ef:e6:a3:8d:ea:eb:93:9f:d6:2b:11: 5b:47:f8:73:99:2d:d7:33:16:18:52:81:af:89:c7:f7:37:cf: 2b:9e:fe:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmDt049XTuOLI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NjZmZjkyNjEtNGUyZC00ZWI1LTlhZDgtMDI1MGYyZTc1Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZF+6yfoo5+A+7XDAbczgqLJbOYOHyBJOT9U n2gukMMV1Wifg7UBZLXE09VTcdM+qPb2nNlfle+lwsN07XUzECqUKmqMSJZhjndr QEiKARJKCh7+8TQFA4971HaCs0jE4JacMYsUS4ynpcI3wfOSvVdwUjFq3vjn9iXV mo+QGwabbz8BJmKo84IePDkmn1bQJencCDH8ClO8WBWy6LELT46xpIGpAe38axIk T6AVOSZyKHgWA51NNCmvTHYup3Z4cMIoVrinhBu5+q2GZfxrhgfyXcdmyMt5sOqA Du7bQx5ITS9YvqI4I+fMk0q24PN4LFf5BO7scaebWYYI0f1g2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPswoicAT0HN8zQ4Y/VUzNBO1vUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvNmNmMzhhZDEtNzBlNS0z OTQxLWFkM2UtZDlhYzc5YmIzYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwCIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpx4h2oUxto1KrJFwuD9qu1VnqNPCm5YgE3c5QvLbLyLYLNxVIOCOJF MwWb2ZO51pU48tEi5MyCAhB9G169EmYXvIlExXB7q0QkLgAcuWRtK35VcKxznFYU 6AI3U3jR+i7/dgYNWn9AoqSxzjBh4PA2gZ0NCfiTkJYi180PTpTklNcsjCWipybm l3BuiBQAcxu+/dY9Ub4JipnEyHa7L8m5LTrluDrv8pxaBcHsIvOXSm8yEYnnWazW LkU9XSLeloj0m0DbBIuG3VMxEtzrMXLIwfv0mbqMAzZQBd6xeFPv5qON6uuTn9Yr EVtH+HOZLdczFhhSga+Jx/c3zyue/pA= -----END CERTIFICATE-----Generated at Sat May 10 18:54:13 2025 by rpki-client