$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa File: bc7b5153-4728-3649-bc82-4499eb9a7abb.roa (raw, json) Hash identifier: YAjso7gd5y8BShiu+ITAMoT6L7SaOlZxnctYiPiODhM= Subject key identifier: 66:CC:D0:1E:6F:42:44:43:C7:75:0A:D0:F2:BF:CD:10:11:26:44:3B Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F43285849BF3F676DE5E17C5F512C3600 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 192.41.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:67:6d:e5:e1:7c:5f:51:2c:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=26eba2b4-2144-47f5-8b59-8edb433f5fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:dc:9c:d6:64:e5:40:5c:cc:9f:1f:51:97: 08:93:00:32:c9:4d:13:40:9c:20:62:0e:7b:17:84: ef:4f:47:1b:61:17:e8:09:07:3d:03:1a:5e:a8:70: f2:40:10:d6:ed:f0:8b:57:90:2f:55:2b:b2:8d:54: 18:0f:89:5d:3b:4e:4a:a9:04:12:60:dd:63:3a:75: ed:f0:5a:b3:6a:bb:e9:dd:1b:29:b9:db:01:32:4c: bd:5e:9c:f7:01:c8:64:58:33:5e:90:fc:80:8f:32: a7:2f:c0:1d:14:5c:a0:13:c1:d8:28:a7:12:86:14: 5a:53:3c:34:76:23:ab:35:28:90:b7:8e:c7:a5:aa: fd:33:56:96:1a:83:a8:e4:40:77:2d:81:2a:ef:72: 0f:88:9c:92:85:6b:3f:0c:4a:22:27:bc:67:b0:a9: 50:4d:5b:1c:6e:91:b4:1b:1e:60:e3:70:84:2b:0f: af:0b:f0:8b:5b:50:07:85:52:3f:b9:8f:d9:16:bf: fb:4f:cb:b4:ca:ff:ee:52:50:3b:06:4e:9d:ac:9b: 44:9e:41:4b:8b:43:13:e1:14:06:a8:4e:11:a5:1c: a2:75:e7:c4:5b:ae:4a:ff:7d:59:0f:b8:e9:b7:88: aa:5f:a6:c0:9e:83:27:6f:3f:c5:2b:0d:c4:a6:67: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CC:D0:1E:6F:42:44:43:C7:75:0A:D0:F2:BF:CD:10:11:26:44:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 192.41.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0e:b0:b6:f3:58:6b:35:44:c7:c7:86:c0:85:f1:26:d9:8e: eb:1d:9a:86:08:95:8d:4d:85:a4:e0:64:1a:18:01:5b:48:6d: 44:d5:ae:98:42:10:38:8e:ce:f0:12:35:93:fb:f7:d1:2e:1d: 78:7a:3b:e7:a6:54:f5:10:ff:2b:3e:6b:fa:9e:1d:c4:9c:ff: da:e4:ae:fa:ab:52:53:03:c1:5f:da:0f:ea:27:21:ec:ed:99: d7:7c:22:7f:a2:04:3a:37:c6:4d:e9:c5:b2:0c:38:94:2b:63: 0d:0e:a1:f9:3a:91:4b:da:8e:7d:3e:b4:f6:e7:91:ed:f3:b9: 2f:1c:86:c0:d3:c9:16:de:0a:d6:fb:02:ed:57:6d:ad:ee:c2: ea:a5:9f:24:18:c0:22:1b:76:e2:d2:b5:d4:4d:58:a0:6a:47: 40:18:76:6f:c0:3f:a9:06:66:3e:2d:16:9e:45:26:78:cb:90: bd:e4:46:0b:71:75:58:06:a8:b0:1d:19:70:f2:6f:9f:13:e0: 72:39:e8:cd:93:b1:8b:bf:49:14:30:4c:01:fb:20:9e:f8:ec: 5e:0b:d6:61:e6:e5:0c:8b:c3:2d:34:ee:f4:a6:27:bf:5b:31: 51:be:de:9a:3d:89:fd:9d:49:c6:49:f4:08:98:ac:12:0c:1d: 14:b1:43:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2dt5eF8X1EsNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MjZlYmEyYjQtMjE0NC00N2Y1LThiNTktOGVkYjQzM2Y1ZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowbcnNZk5UBczJ8fUZcIkwAyyU0TQJwgYg57 F4TvT0cbYRfoCQc9AxpeqHDyQBDW7fCLV5AvVSuyjVQYD4ldO05KqQQSYN1jOnXt 8Fqzarvp3RspudsBMky9Xpz3AchkWDNekPyAjzKnL8AdFFygE8HYKKcShhRaUzw0 diOrNSiQt47Hpar9M1aWGoOo5EB3LYEq73IPiJyShWs/DEoiJ7xnsKlQTVscbpG0 Gx5g43CEKw+vC/CLW1AHhVI/uY/ZFr/7T8u0yv/uUlA7Bk6drJtEnkFLi0MT4RQG qE4RpRyidefEW65K/31ZD7jpt4iqX6bAnoMnbz/FKw3EpmdhUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbM0B5vQkRDx3UK0PK/zRARJkQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvYmM3YjUxNTMtNDcyOC0z NjQ5LWJjODItNDQ5OWViOWE3YWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsOsLbzWGs1RMfHhsCF8SbZjusdmoYIlY1NhaTgZBoYAVtIbUTVrphC EDiOzvASNZP799EuHXh6O+emVPUQ/ys+a/qeHcSc/9rkrvqrUlMDwV/aD+onIezt mdd8In+iBDo3xk3pxbIMOJQrYw0Oofk6kUvajn0+tPbnke3zuS8chsDTyRbeCtb7 Au1Xba3uwuqlnyQYwCIbduLStdRNWKBqR0AYdm/AP6kGZj4tFp5FJnjLkL3kRgtx dVgGqLAdGXDyb58T4HI56M2TsYu/SRQwTAH7IJ747F4L1mHm5QyLwy007vSmJ79b MVG+3po9if2dScZJ9AiYrBIMHRSxQ3M= -----END CERTIFICATE-----Generated at Sun May 11 11:48:22 2025 by rpki-client