$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/226cf27a-5877-327d-98bc-a0d2165e6324.roa File: 226cf27a-5877-327d-98bc-a0d2165e6324.roa (raw, json) Hash identifier: DxL9x/H4kmhgmcOg+cAnzydW1Xjni+gdtXv5ebWTDwY= Subject key identifier: 36:FA:90:3C:1E:5D:66:BD:56:FC:BC:FF:A4:D3:AD:6A:45:F6:56:D5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B83E6DA314DD1119D503BB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/226cf27a-5877-327d-98bc-a0d2165e6324.roa Signing time: Fri 02 May 2025 12:48:21 +0000 ROA not before: Fri 02 May 2025 12:48:21 +0000 ROA not after: Thu 31 Jul 2025 12:48:21 +0000 asID: 329007 IP address blocks: 192.253.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:3e:6d:a3:14:dd:11:19:d5:03:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 2 12:48:21 2025 GMT Not After : Jul 31 12:48:21 2025 GMT Subject: CN=a02ba25a-66df-4559-9e67-75cc60d822b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:5e:30:66:de:c5:87:83:77:52:ea:95:aa: e7:72:9d:58:95:93:dc:25:4e:d2:42:e6:0e:b1:8d: e5:f7:20:36:1b:5a:7a:df:dd:31:3b:79:99:e1:22: 89:7f:3a:e3:17:a9:b6:8c:90:e5:aa:25:74:d1:68: 34:78:bb:16:3b:a1:c8:ca:cb:79:85:8e:61:9f:29: ae:95:17:10:f5:96:dd:a9:68:f1:93:6f:1c:6c:63: 95:c4:30:7e:ef:02:6b:60:2c:8b:e5:87:c6:84:3e: 00:52:a5:8f:64:c2:28:b2:9e:7a:78:96:5a:8b:dd: 19:6a:50:45:98:5f:05:23:84:34:9c:97:df:8f:ed: 2a:9a:d2:e8:ae:c1:0b:b2:5e:32:b1:0a:5d:ec:8f: ea:1b:9e:81:46:da:1c:fb:5e:a1:a9:0d:76:72:b4: fc:a7:cd:0f:7e:da:08:67:81:e1:4d:95:dd:51:7b: f3:5b:c3:41:56:3f:0e:c5:21:46:11:88:c3:c7:b0: b6:13:d2:10:bb:2b:44:24:27:82:1b:47:6c:05:a2: a7:49:98:96:d4:03:29:5b:d7:b3:e1:6b:66:f5:23: e8:1c:c3:29:af:22:2d:f1:b8:e3:24:f1:52:96:0e: d9:d8:62:ef:f6:1e:3a:83:e2:12:7a:59:fc:19:5a: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FA:90:3C:1E:5D:66:BD:56:FC:BC:FF:A4:D3:AD:6A:45:F6:56:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/226cf27a-5877-327d-98bc-a0d2165e6324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:95:0b:de:38:0f:c4:e5:3e:3b:0f:18:0b:c6:24:ae:f2:0c: 0d:3c:56:9e:7e:63:c0:7f:ea:4b:de:e5:8c:a3:0a:ac:a4:71: a8:3b:ed:56:9b:dc:66:9e:75:f6:e3:13:50:f8:69:51:7c:4a: b7:05:97:6b:5d:6e:70:a2:13:96:07:ad:3f:27:be:ae:6c:36: bb:16:f7:c8:e2:9d:4b:c4:3d:fa:de:92:11:0d:16:3b:43:09: 69:9b:7d:90:13:c1:e3:0f:74:b8:10:99:4d:0a:c1:f2:41:07: 06:e0:d9:c7:4c:72:35:5c:94:92:8b:16:b7:fc:50:5e:a2:b5: f9:80:ca:38:fa:e0:98:d1:db:6c:42:07:ba:23:ba:9e:8d:cc: a9:cc:fc:e4:2b:4d:18:2a:96:92:54:3c:60:b4:ec:13:d8:0a: 70:8c:af:86:13:ea:87:63:99:2b:80:72:7d:ef:91:1b:79:7d: 37:ea:56:55:25:0d:1b:f3:87:22:51:d8:e6:4d:eb:ed:28:d1: 5f:8c:25:92:25:f4:56:5f:0d:4f:46:a7:e9:ed:ae:d0:f8:33: 34:b6:39:7c:25:4c:dc:4c:8d:a6:a3:fc:64:9f:31:28:52:fe: 02:e8:b9:84:46:cd:7b:b1:ac:bd:b2:67:6a:40:c8:28:c3:4b: e8:4c:0b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm4Pm2jFN0RGdUDuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwMjEyNDgyMVoXDTI1MDczMTEyNDgyMVowLzEtMCsGA1UEAxMk YTAyYmEyNWEtNjZkZi00NTU5LTllNjctNzVjYzYwZDgyMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbReMGbexYeDd1Lqlarncp1YlZPcJU7SQuYO sY3l9yA2G1p6390xO3mZ4SKJfzrjF6m2jJDlqiV00Wg0eLsWO6HIyst5hY5hnymu lRcQ9ZbdqWjxk28cbGOVxDB+7wJrYCyL5YfGhD4AUqWPZMIosp56eJZai90ZalBF mF8FI4Q0nJffj+0qmtLorsELsl4ysQpd7I/qG56BRtoc+16hqQ12crT8p80PftoI Z4HhTZXdUXvzW8NBVj8OxSFGEYjDx7C2E9IQuytEJCeCG0dsBaKnSZiW1AMpW9ez 4Wtm9SPoHMMpryIt8bjjJPFSlg7Z2GLv9h46g+ISeln8GVoG7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb6kDweXWa9Vvy8/6TTrWpF9lbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjI2Y2YyN2EtNTg3Ny0z MjdkLTk4YmMtYTBkMjE2NWU2MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqVC944D8TlPjsPGAvGJK7yDA08Vp5+Y8B/6kve5YyjCqykcag77Vab 3GaedfbjE1D4aVF8SrcFl2tdbnCiE5YHrT8nvq5sNrsW98jinUvEPfrekhENFjtD CWmbfZATweMPdLgQmU0KwfJBBwbg2cdMcjVclJKLFrf8UF6itfmAyjj64JjR22xC B7ojup6NzKnM/OQrTRgqlpJUPGC07BPYCnCMr4YT6odjmSuAcn3vkRt5fTfqVlUl DRvzhyJR2OZN6+0o0V+MJZIl9FZfDU9Gp+ntrtD4MzS2OXwlTNxMjaaj/GSfMShS /gLouYRGzXuxrL2yZ2pAyCjDS+hMCy0= -----END CERTIFICATE-----Generated at Mon May 12 19:47:43 2025 by rpki-client