$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa File: de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa (raw, json) Hash identifier: aAm89kYynCtvPkLlUDanO85MqIxTomOCkSdfJjbgrD8= Subject key identifier: F6:E3:E0:FF:F2:55:AC:55:A8:64:A0:A7:1B:BB:52:90:AA:1E:33:12 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C0A4EA068015203B01FB89C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396356 IP address blocks: 192.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ea:06:80:15:20:3b:01:fb:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=15f4c87e-dfe2-4781-8317-daa81f050bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:48:11:8d:a0:74:a9:f2:f1:1a:33:f0:0a:10: 03:00:06:1b:2a:8d:ec:7e:ac:a0:4b:71:4a:29:1f: ab:f6:24:94:98:5a:ce:44:97:ba:42:7b:b6:43:6d: 18:42:1c:f9:9b:ef:55:83:7d:e2:ff:fa:96:1d:28: 20:b4:03:43:bc:b3:e1:0f:ec:f5:1d:b5:a7:81:a3: 07:53:9f:2c:4d:2f:36:1c:57:17:b5:50:88:66:bd: f4:fa:a1:97:bb:16:f1:98:c6:f8:fb:2c:57:f6:a5: 50:ac:ee:51:bc:e5:fc:42:e3:25:64:a1:16:5d:0b: 5d:ff:1e:c2:13:e7:dc:2b:d1:e4:06:26:5a:57:06: 2c:b0:15:88:75:5e:60:b1:a5:0f:dc:2b:ab:07:ad: e7:db:5d:34:a4:10:c7:4c:b1:ca:d5:99:79:17:1b: 63:d9:7f:fb:c0:4a:24:68:62:8e:73:e7:bb:dd:97: b2:32:33:10:dd:5c:61:0b:77:23:2c:84:a0:fb:c9: 34:4b:60:f9:de:ed:86:29:e6:b4:11:6b:60:d7:b3: cc:90:33:b9:d9:9f:78:9c:2e:20:fa:8a:2e:6b:d5: e8:05:08:01:73:39:bf:02:6e:15:eb:e2:69:58:a0: 63:24:20:9a:8b:6d:60:f8:ca:ee:e1:d7:0a:2a:94: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E3:E0:FF:F2:55:AC:55:A8:64:A0:A7:1B:BB:52:90:AA:1E:33:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:91:b8:a8:27:01:fe:49:b8:dc:fe:12:ff:93:12:84:5d:1c: 71:79:1d:eb:cb:c6:58:0f:25:83:8b:52:99:5d:5f:46:bb:0c: e6:47:10:62:7a:47:8e:c0:f0:05:7a:43:8b:b1:f9:1f:4e:1f: ea:2e:5f:2a:86:e7:c7:e0:07:6e:0a:29:6f:d9:a3:48:2a:31: 0d:17:e1:65:0a:09:0d:b4:d9:6a:2a:eb:6d:a8:88:5b:1d:80: 70:22:82:28:73:d5:a1:ca:45:80:3b:be:94:45:32:a1:5b:39: 44:82:d7:20:7b:2b:03:ee:ed:0e:6b:d9:f6:64:15:82:91:af: 0e:33:96:4d:4c:3f:62:7e:ed:75:97:b3:c8:9f:e1:f3:20:7b: fd:e4:1c:49:91:bc:23:32:92:9d:ee:89:bc:11:03:80:9d:2f: 38:8a:dc:c1:0e:98:c2:a2:9d:5d:2c:14:6e:d8:ec:c4:72:e8: 9f:78:17:26:21:5a:7e:fd:ae:40:4b:23:ad:ed:e1:df:6e:d6: 6e:82:c8:5b:af:9a:5a:c2:e6:e8:ce:a7:ea:e8:d2:e9:bc:4c: eb:30:e7:b7:ba:ee:1e:88:2c:d8:fb:da:56:1d:76:56:17:e0: 1e:2c:10:bc:1a:10:bf:fd:36:40:59:42:f6:76:6c:f4:f8:d4: 79:5f:89:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOoGgBUgOwH7icAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MTVmNGM4N2UtZGZlMi00NzgxLTgzMTctZGFhODFmMDUwYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEgRjaB0qfLxGjPwChADAAYbKo3sfqygS3FK KR+r9iSUmFrORJe6Qnu2Q20YQhz5m+9Vg33i//qWHSggtANDvLPhD+z1HbWngaMH U58sTS82HFcXtVCIZr30+qGXuxbxmMb4+yxX9qVQrO5RvOX8QuMlZKEWXQtd/x7C E+fcK9HkBiZaVwYssBWIdV5gsaUP3CurB63n2100pBDHTLHK1Zl5Fxtj2X/7wEok aGKOc+e73ZeyMjMQ3VxhC3cjLISg+8k0S2D53u2GKea0EWtg17PMkDO52Z94nC4g +ooua9XoBQgBczm/Am4V6+JpWKBjJCCai21g+Mru4dcKKpSAyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbj4P/yVaxVqGSgpxu7UpCqHjMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGUzZmEzZjUtNTY1Mi0z YWQ4LWJkNGMtNjg5YzYwOGQzOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWRuKgnAf5JuNz+Ev+TEoRdHHF5HevLxlgPJYOLUpldX0a7DOZHEGJ6 R47A8AV6Q4ux+R9OH+ouXyqG58fgB24KKW/Zo0gqMQ0X4WUKCQ202Woq622oiFsd gHAigihz1aHKRYA7vpRFMqFbOUSC1yB7KwPu7Q5r2fZkFYKRrw4zlk1MP2J+7XWX s8if4fMge/3kHEmRvCMykp3uibwRA4CdLziK3MEOmMKinV0sFG7Y7MRy6J94FyYh Wn79rkBLI63t4d9u1m6CyFuvmlrC5ujOp+ro0um8TOsw57e67h6ILNj72lYddlYX 4B4sELwaEL/9NkBZQvZ2bPT41Hlfieg= -----END CERTIFICATE-----Generated at Fri May 9 07:18:41 2025 by rpki-client