$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa File: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (raw, json) Hash identifier: ejO490ZyizmSe8aRUsmUXA96SjmhaY7AH090cXatEZE= Subject key identifier: 17:CA:39:39:C4:18:08:E0:BB:AA:65:0C:47:61:17:2B:05:13:48:E1 Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F43285849FCAA772F0DDC419FDDF68D80 Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 53423 IP address blocks: 192.171.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:77:2f:0d:dc:41:9f:dd:f6:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=744f0ff9-227a-40a6-9114-2fc458906c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:74:ae:ca:8a:4b:bc:b3:4c:1b:f1:36:0a: 52:61:69:49:a9:1a:2d:79:46:93:bc:a5:3a:e6:db: 15:c3:8a:8d:8a:34:ef:25:a1:c5:03:cd:63:b8:37: 3d:4a:c2:5b:a8:68:d0:e4:6a:45:1e:96:28:af:87: 8c:cd:2a:84:a1:9c:07:85:44:e6:e0:6b:04:f2:ec: 89:aa:07:dc:50:82:26:36:46:e9:d3:dc:9d:f2:0d: a8:7d:12:c2:94:64:bd:23:d7:bb:84:df:86:d9:95: cf:e5:0a:b8:9a:58:ff:a3:77:ca:77:62:5c:ff:96: 4f:c1:e2:7c:67:af:c8:1f:91:a7:f7:d1:67:1a:ea: 95:e5:1a:66:d7:60:97:01:36:ff:7b:4b:77:32:89: 5e:06:59:4d:62:c0:d6:7b:fa:23:07:a6:97:15:1d: ea:c1:ff:d5:08:a7:62:a3:c5:7b:f8:67:01:4b:57: 29:c0:3c:2d:0f:6f:11:ca:2a:8c:ff:57:2e:16:c4: 8f:d0:f8:e1:23:9d:5b:96:1e:1f:5b:6f:18:fe:d6: 7d:b9:71:1f:76:98:08:5b:2c:78:03:f3:2f:54:ee: 5e:12:3f:09:36:50:cf:6d:37:02:62:f4:79:9d:9e: f1:d7:29:35:60:6b:ff:f1:0d:42:14:48:9b:a5:0e: 97:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CA:39:39:C4:18:08:E0:BB:AA:65:0C:47:61:17:2B:05:13:48:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: 192.171.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:84:21:a6:8d:d2:2f:d5:d6:91:d0:f1:70:a0:1e:93:84:a8: 5f:df:6c:e3:9e:6a:08:ec:25:97:d4:5b:f8:3a:6c:4f:0d:fe: dd:80:80:9e:ef:e1:9d:ad:fb:1d:9e:80:b0:a3:27:23:87:2f: 69:29:48:59:a8:53:62:2e:96:d4:9f:35:a5:c4:4b:8f:b4:a1: 0c:06:9d:98:09:19:f0:3b:e7:ae:1c:16:07:e4:d0:fa:1e:c9: b9:32:71:4e:7a:a6:88:91:2e:f6:51:41:8b:d0:e9:7a:a8:4d: a6:aa:c7:75:5c:26:f0:2e:ed:cf:4a:81:36:7c:bb:76:20:ad: db:24:f0:7b:aa:82:68:fd:f9:9a:20:7b:af:5d:83:16:00:82: 5d:99:4d:da:9e:8c:33:68:eb:02:de:fa:7c:90:a4:6e:ac:24: 71:83:9d:56:89:b1:53:06:04:bb:09:34:8f:0f:ea:34:6e:cb: 11:41:08:27:7c:ed:05:00:b0:76:20:bd:bc:d6:b6:fa:9f:3c: 35:b9:56:87:f3:ca:8b:90:1a:ca:0a:a7:9e:c1:ac:ec:7a:d3: 72:3b:74:9b:db:00:db:a1:3b:b8:ed:96:ce:dd:34:56:21:71: cf:44:d2:ef:3f:be:3e:8d:39:a5:0b:0a:bd:b1:04:eb:01:47: 5c:a5:bd:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qncvDdxBn932jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NzQ0ZjBmZjktMjI3YS00MGE2LTkxMTQtMmZjNDU4OTA2Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGF0rsqKS7yzTBvxNgpSYWlJqRoteUaTvKU6 5tsVw4qNijTvJaHFA81juDc9SsJbqGjQ5GpFHpYor4eMzSqEoZwHhUTm4GsE8uyJ qgfcUIImNkbp09yd8g2ofRLClGS9I9e7hN+G2ZXP5Qq4mlj/o3fKd2Jc/5ZPweJ8 Z6/IH5Gn99FnGuqV5Rpm12CXATb/e0t3MoleBllNYsDWe/ojB6aXFR3qwf/VCKdi o8V7+GcBS1cpwDwtD28RyiqM/1cuFsSP0PjhI51blh4fW28Y/tZ9uXEfdpgIWyx4 A/MvVO5eEj8JNlDPbTcCYvR5nZ7x1yk1YGv/8Q1CFEibpQ6XZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfKOTnEGAjgu6plDEdhFysFE0jhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvMjYxMmRjMDItMzAzNi0z Y2VkLWJhMmMtOGUxYzA0YTJiMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGEIaaN0i/V1pHQ8XCgHpOEqF/fbOOeagjsJZfUW/g6bE8N/t2AgJ7v 4Z2t+x2egLCjJyOHL2kpSFmoU2IultSfNaXES4+0oQwGnZgJGfA7564cFgfk0Poe ybkycU56poiRLvZRQYvQ6XqoTaaqx3VcJvAu7c9KgTZ8u3Ygrdsk8Huqgmj9+Zog e69dgxYAgl2ZTdqejDNo6wLe+nyQpG6sJHGDnVaJsVMGBLsJNI8P6jRuyxFBCCd8 7QUAsHYgvbzWtvqfPDW5VofzyouQGsoKp57BrOx603I7dJvbANuhO7jtls7dNFYh cc9E0u8/vj6NOaULCr2xBOsBR1ylvRI= -----END CERTIFICATE-----Generated at Mon Jun 30 22:33:53 2025 by rpki-client