$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/4083c404-4409-3a7c-aa54-d033a1411256.roa File: 4083c404-4409-3a7c-aa54-d033a1411256.roa (raw, json) Hash identifier: xdGCndKd4wBTKMA8vHBouLbleHrTbVr6J/8VjWNoESw= Subject key identifier: 32:97:AA:CD:0D:2E:7A:BF:37:AA:FB:80:5B:97:89:5C:1F:16:E8:D9 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F43285849C3AB83B7F721015B45525F00 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/4083c404-4409-3a7c-aa54-d033a1411256.roa Signing time: Tue 06 May 2025 15:02:02 +0000 ROA not before: Tue 06 May 2025 15:02:02 +0000 ROA not after: Mon 04 Aug 2025 15:02:02 +0000 asID: 7050 IP address blocks: 192.107.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:ab:83:b7:f7:21:01:5b:45:52:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: May 6 15:02:02 2025 GMT Not After : Aug 4 15:02:02 2025 GMT Subject: CN=7923f704-52e1-4173-ba5b-5a281d85a4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:b1:49:f0:0d:d9:6d:76:bf:6d:db:3f:7d: 06:19:d8:87:16:01:14:7c:5d:b6:bc:9a:b2:61:4e: c9:47:a2:ae:e2:2b:53:e9:88:b2:ab:93:f2:5e:5e: 61:d1:79:57:db:ea:68:22:21:98:c2:24:bb:17:8e: b0:3e:84:51:48:76:36:97:90:d4:3a:9f:24:da:09: ce:f9:7a:b8:4b:ea:b6:57:87:ab:f2:00:69:de:9b: b0:c2:03:07:36:8b:b4:eb:50:0d:99:11:5e:2e:a1: 4b:65:69:fd:8a:c2:93:d8:ab:05:38:32:d4:9a:1a: ed:b4:42:16:93:47:32:45:08:1b:d5:84:31:fa:94: d5:3d:c3:37:68:c6:38:50:08:c8:e2:71:9f:91:ab: 2b:af:68:46:1c:52:12:c0:4b:b2:40:8b:96:8f:5c: 8d:cf:c1:cf:5c:0a:02:a3:c0:e8:8d:35:48:50:4b: 9b:66:a3:5b:38:8c:06:81:1e:cb:8d:55:17:53:d9: 0d:d6:96:0b:28:1e:06:c1:c6:50:e6:9c:22:02:f0: 19:2e:9a:80:8e:7d:b2:40:5a:93:96:d9:ab:38:1b: 54:f3:67:a5:45:c7:62:eb:49:32:3c:83:64:c2:1e: 2e:ed:34:c9:07:58:1f:21:86:65:bc:a6:4f:a8:e1: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:97:AA:CD:0D:2E:7A:BF:37:AA:FB:80:5B:97:89:5C:1F:16:E8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/4083c404-4409-3a7c-aa54-d033a1411256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 192.107.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d4:98:50:21:9e:ac:27:f6:1f:b5:e4:bf:61:35:c1:da:86: 82:1c:ce:57:56:19:5b:27:90:74:85:cd:03:70:e7:d8:16:3b: c9:25:ea:1d:a4:9d:30:d4:6a:ff:23:b8:99:31:f2:59:af:30: 58:73:e5:21:c4:78:ae:fd:cc:9c:82:90:dd:cd:67:ee:0d:7d: 8a:75:8c:39:dd:91:68:f4:43:1c:f5:da:ea:24:5c:2b:76:13: 4d:ca:23:69:05:32:96:0a:fa:b3:97:b3:d1:f5:2d:aa:36:a8: 89:3f:26:f4:ef:4d:d0:32:7d:a6:30:1b:f4:33:d0:5e:4d:57: 68:dd:10:e9:d3:74:34:ba:5a:a5:54:38:64:5f:07:34:3d:ce: 51:ee:d8:cf:ed:03:7d:29:17:52:bd:63:dd:0d:71:49:1f:96: 9b:eb:18:d4:61:54:26:64:c5:ce:ed:a1:39:a9:1a:d1:df:28: 56:5d:04:cf:95:83:8f:08:ff:aa:18:96:fe:f1:4d:c8:97:ee: bc:b9:26:18:53:26:30:33:f9:48:56:f9:b6:11:9d:66:7a:0e: 0c:89:fc:78:bf:16:77:6e:63:34:c0:2b:49:e5:90:4e:e0:98: 10:c2:ed:78:6b:b3:7b:f0:e8:83:af:e9:eb:2d:ec:0f:40:23: 2d:b9:e2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDq4O39yEBW0VSXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI1MDUwNjE1MDIwMloXDTI1MDgwNDE1MDIwMlowLzEtMCsGA1UEAxMk NzkyM2Y3MDQtNTJlMS00MTczLWJhNWItNWEyODFkODVhNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNOxSfAN2W12v23bP30GGdiHFgEUfF22vJqy YU7JR6Ku4itT6Yiyq5PyXl5h0XlX2+poIiGYwiS7F46wPoRRSHY2l5DUOp8k2gnO +Xq4S+q2V4er8gBp3puwwgMHNou061ANmRFeLqFLZWn9isKT2KsFODLUmhrttEIW k0cyRQgb1YQx+pTVPcM3aMY4UAjI4nGfkasrr2hGHFISwEuyQIuWj1yNz8HPXAoC o8DojTVIUEubZqNbOIwGgR7LjVUXU9kN1pYLKB4GwcZQ5pwiAvAZLpqAjn2yQFqT ltmrOBtU82elRcdi60kyPINkwh4u7TTJB1gfIYZlvKZPqOHiYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKXqs0NLnq/N6r7gFuXiVwfFujZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvNDA4M2M0MDQtNDQwOS0z YTdjLWFhNTQtZDAzM2ExNDExMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGsvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrUmFAhnqwn9h+15L9hNcHahoIczldWGVsnkHSFzQNw59gWO8kl6h2k nTDUav8juJkx8lmvMFhz5SHEeK79zJyCkN3NZ+4NfYp1jDndkWj0Qxz12uokXCt2 E03KI2kFMpYK+rOXs9H1Lao2qIk/JvTvTdAyfaYwG/Qz0F5NV2jdEOnTdDS6WqVU OGRfBzQ9zlHu2M/tA30pF1K9Y90NcUkflpvrGNRhVCZkxc7toTmpGtHfKFZdBM+V g48I/6oYlv7xTciX7ry5JhhTJjAz+UhW+bYRnWZ6DgyJ/Hi/FnduYzTAK0nlkE7g mBDC7Xhrs3vw6IOv6est7A9AIy254gE= -----END CERTIFICATE-----Generated at Tue May 13 10:17:45 2025 by rpki-client