$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa File: 49ed5a06-61cd-30da-8170-9d7403ef7745.roa (raw, json) Hash identifier: miC/FF3+LkPXE+f+j5v/RrtZVaQzGIrN5wjpj8vWZCE= Subject key identifier: 81:02:90:FC:6F:2E:35:A8:CD:40:14:1F:29:3B:ED:94:E2:B4:CF:76 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F432858496054168FA695633694938AC0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 192.252.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:16:8f:a6:95:63:36:94:93:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=a48e9faf-7d00-4e1a-8053-0bca905e199a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:23:b8:fa:c4:1a:4b:0e:aa:bf:98:04:41:b7: 44:a8:fa:9e:79:b9:06:48:21:0f:07:59:f2:27:43: 36:b0:4f:2d:19:02:55:72:f3:3a:8b:0b:58:84:e4: 44:93:b6:d2:4d:6c:03:11:e0:bb:0d:0c:9f:b3:9d: eb:18:30:80:97:11:bd:5c:06:4d:9e:3f:55:c2:88: 84:9c:b9:0a:4e:8c:41:5f:5e:e0:ae:c3:25:f5:af: ed:f4:17:23:28:6f:ac:a9:ca:0c:fd:01:0f:b4:62: bf:a9:5d:f3:cb:e4:f8:f2:40:da:65:14:a4:49:d5: e5:01:89:9b:92:82:28:e0:62:b9:8f:52:07:55:d3: df:b0:58:5b:14:7f:4c:e3:72:9e:3f:60:8d:fc:c9: af:66:5c:5b:76:d6:c8:06:e5:ac:af:bf:e9:19:44: f3:e1:3d:a6:cc:f3:df:67:3a:f9:f5:3d:5f:c4:45: a1:52:de:5b:89:f9:ea:17:91:4a:1b:0e:1f:9d:b9: 99:6a:71:10:67:10:e0:3f:9a:a2:78:b9:d8:0e:4f: e7:92:f7:e2:c2:c8:fb:b5:cb:36:5e:a3:d0:bc:85: 2b:7b:18:79:9a:cc:7a:ee:29:f9:76:8f:e0:5c:b3: 69:17:53:09:01:7e:6f:23:b9:ac:18:c7:3d:d2:2c: de:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:02:90:FC:6F:2E:35:A8:CD:40:14:1F:29:3B:ED:94:E2:B4:CF:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 192.252.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7f:50:f5:ab:b2:9c:0c:0a:d6:b6:24:f5:96:7e:eb:bf:01: 4b:c8:fe:01:a6:db:5a:27:89:5c:70:43:14:58:1c:67:3c:8d: 57:0f:c9:36:e2:7e:0e:40:c5:04:8f:72:d5:4a:e6:37:7f:25: e3:f2:17:d9:17:b3:21:c8:89:34:3d:5e:77:d1:b0:78:bf:55: 61:85:92:fb:56:6b:a7:96:03:b3:25:a4:e2:21:41:0b:d1:2b: 35:b1:a8:f4:6f:25:4f:50:44:9f:00:cc:b6:a0:a5:97:cc:6d: 80:8a:9d:96:65:ae:98:9d:fb:69:43:78:b5:83:23:e1:f4:ed: 42:f1:14:46:a6:15:62:96:74:1f:25:fd:03:49:cb:c7:49:4d: 6c:72:e0:bb:da:80:d9:da:4c:d4:79:fa:cd:d4:b7:31:4f:c6: 7a:28:30:b7:6a:8b:cb:a8:cf:b2:1f:6c:d2:dd:f0:15:7c:86: e8:21:46:ad:98:fc:b3:c0:83:28:3b:da:56:25:10:2c:bc:d1: a2:35:bc:e6:4c:28:db:31:6d:8c:c9:92:d3:10:1c:a2:06:96: 4a:eb:84:ee:f7:f1:5d:99:0d:75:7e:22:7e:e3:28:ef:9c:8d: 8b:98:d7:ed:b1:d3:98:c6:47:e7:88:1f:cb:06:dc:a4:18:c7: 2c:e7:aa:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBaPppVjNpSTisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk YTQ4ZTlmYWYtN2QwMC00ZTFhLTgwNTMtMGJjYTkwNWUxOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yO4+sQaSw6qv5gEQbdEqPqeebkGSCEPB1ny J0M2sE8tGQJVcvM6iwtYhOREk7bSTWwDEeC7DQyfs53rGDCAlxG9XAZNnj9VwoiE nLkKToxBX17grsMl9a/t9BcjKG+sqcoM/QEPtGK/qV3zy+T48kDaZRSkSdXlAYmb koIo4GK5j1IHVdPfsFhbFH9M43KeP2CN/MmvZlxbdtbIBuWsr7/pGUTz4T2mzPPf Zzr59T1fxEWhUt5bifnqF5FKGw4fnbmZanEQZxDgP5qieLnYDk/nkvfiwsj7tcs2 XqPQvIUrexh5msx67in5do/gXLNpF1MJAX5vI7msGMc90ize+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIECkPxvLjWozUAUHyk77ZTitM92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDllZDVhMDYtNjFjZC0z MGRhLTgxNzAtOWQ3NDAzZWY3NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9/UPWrspwMCta2JPWWfuu/AUvI/gGm21oniVxwQxRYHGc8jVcPyTbi fg5AxQSPctVK5jd/JePyF9kXsyHIiTQ9XnfRsHi/VWGFkvtWa6eWA7MlpOIhQQvR KzWxqPRvJU9QRJ8AzLagpZfMbYCKnZZlrpid+2lDeLWDI+H07ULxFEamFWKWdB8l /QNJy8dJTWxy4LvagNnaTNR5+s3UtzFPxnooMLdqi8uoz7IfbNLd8BV8hughRq2Y /LPAgyg72lYlECy80aI1vOZMKNsxbYzJktMQHKIGlkrrhO738V2ZDXV+In7jKO+c jYuY1+2x05jGR+eIH8sG3KQYxyznqjk= -----END CERTIFICATE-----Generated at Sun May 11 16:42:10 2025 by rpki-client