$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa File: cd00af14-086a-320d-acc3-d521035dec44.roa (raw, json) Hash identifier: RHGwL0c4wa5fwX5lXgJ/WhvqDbX7DSQdf+dmLDtuatM= Subject key identifier: 5A:E3:80:E8:DF:6D:DA:B9:5B:DA:62:FA:B2:7F:21:64:AF:04:52:FD Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285849C63A2480D3682EFAA2660240 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa Signing time: Wed 07 May 2025 13:01:01 +0000 ROA not before: Wed 07 May 2025 13:01:01 +0000 ROA not after: Tue 05 Aug 2025 13:01:01 +0000 asID: 36352 IP address blocks: 192.119.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:3a:24:80:d3:68:2e:fa:a2:66:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: May 7 13:01:01 2025 GMT Not After : Aug 5 13:01:01 2025 GMT Subject: CN=8ac6d328-ceb2-412f-ad29-bad0c0c4c1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:68:46:a1:d5:49:fb:5e:a8:01:d7:49:4c: 1b:7e:2f:16:41:6f:f6:f2:18:54:8e:db:29:1b:4f: c5:43:f1:f8:33:d1:ad:b8:1f:d3:ef:6b:6f:67:9d: 90:ab:1e:a6:2c:17:aa:a9:c0:3d:3f:77:61:ef:f7: c2:3f:51:f5:a0:e2:39:7c:2c:de:c0:38:be:52:8f: 9c:7a:5f:90:cf:06:8e:83:87:5a:d7:d2:d1:11:f3: 0a:b6:bb:39:5f:a0:d2:2d:fe:7c:84:6c:f4:c0:51: 8f:e7:b9:97:21:a8:93:c8:f5:08:cd:b3:bf:16:af: 58:d0:f9:58:95:ae:45:fd:9b:5b:59:25:9e:49:50: b9:f2:f2:36:c9:8b:60:ec:8b:34:9f:25:67:e2:60: fd:bf:e8:b2:29:4a:40:eb:0c:62:d9:7f:99:5a:7d: 10:7f:44:7e:f9:8a:53:c1:92:13:10:bc:7a:f3:42: c8:1f:4f:76:8f:53:b4:ef:5c:bb:5e:1c:3b:e7:0a: 24:35:41:9c:69:88:03:37:ac:d9:b9:6e:33:41:08: c2:43:fb:0e:d4:c9:5d:d5:f3:ac:7d:78:d9:70:63: 20:c9:00:2e:df:43:96:5e:09:36:2a:8b:32:6e:a9: ad:10:67:f0:a1:ec:9a:62:af:8b:64:a8:5f:14:47: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:80:E8:DF:6D:DA:B9:5B:DA:62:FA:B2:7F:21:64:AF:04:52:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9d:ba:93:8c:69:73:08:53:80:41:3e:24:f7:78:9a:91:18: ae:a6:d7:3f:0f:23:fc:f7:70:65:b9:78:81:3b:ca:0c:d7:42: 2c:a7:06:2a:64:05:55:2e:b8:b0:b1:cf:fb:3b:d1:22:54:6d: 0e:ec:4f:fb:c3:d8:6e:5e:48:06:c4:fa:20:67:57:60:43:8d: e3:f9:7e:fa:e7:93:46:15:3f:4a:7b:6c:34:1d:90:8d:40:95: ae:7b:4d:d9:89:ca:0b:13:17:c4:fb:60:7c:5d:0f:c7:87:5f: 79:97:9b:4e:a7:9c:6c:ac:ee:fe:e8:85:46:c5:e9:bd:fd:a6: 33:84:39:eb:c4:dd:e1:9a:f6:2c:ae:59:96:9a:77:4b:0e:0c: f9:d5:93:83:e8:7f:94:65:27:0c:c6:11:37:fd:c2:da:90:87: 17:50:cd:f8:5d:d3:79:6b:f7:19:59:5c:62:57:eb:9f:83:15: 1d:2f:8e:e3:c5:71:98:80:94:3a:c6:3c:a6:57:71:f3:0c:f5: 87:e3:c0:50:20:8f:fa:0b:e6:47:6a:96:c3:93:da:c0:e4:64: b8:8b:87:cf:0f:19:54:84:6c:c2:86:f0:05:0d:9b:d2:37:c6: f3:fb:a5:a8:22:bf:e5:d0:d3:eb:70:c7:bb:56:84:34:08:5d: 7f:66:7c:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnGOiSA02gu+qJmAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDUwNzEzMDEwMVoXDTI1MDgwNTEzMDEwMVowLzEtMCsGA1UEAxMk OGFjNmQzMjgtY2ViMi00MTJmLWFkMjktYmFkMGMwYzRjMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiahoRqHVSfteqAHXSUwbfi8WQW/28hhUjtsp G0/FQ/H4M9GtuB/T72tvZ52Qqx6mLBeqqcA9P3dh7/fCP1H1oOI5fCzewDi+Uo+c el+QzwaOg4da19LREfMKtrs5X6DSLf58hGz0wFGP57mXIaiTyPUIzbO/Fq9Y0PlY la5F/ZtbWSWeSVC58vI2yYtg7Is0nyVn4mD9v+iyKUpA6wxi2X+ZWn0Qf0R++YpT wZITELx680LIH092j1O071y7Xhw75wokNUGcaYgDN6zZuW4zQQjCQ/sO1Mld1fOs fXjZcGMgyQAu30OWXgk2KosybqmtEGfwoeyaYq+LZKhfFEcQ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrjgOjfbdq5W9pi+rJ/IWSvBFL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvY2QwMGFmMTQtMDg2YS0z MjBkLWFjYzMtZDUyMTAzNWRlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKdupOMaXMIU4BBPiT3eJqRGK6m1z8PI/z3cGW5eIE7ygzXQiynBipk BVUuuLCxz/s70SJUbQ7sT/vD2G5eSAbE+iBnV2BDjeP5fvrnk0YVP0p7bDQdkI1A la57TdmJygsTF8T7YHxdD8eHX3mXm06nnGys7v7ohUbF6b39pjOEOevE3eGa9iyu WZaad0sODPnVk4Pof5RlJwzGETf9wtqQhxdQzfhd03lr9xlZXGJX65+DFR0vjuPF cZiAlDrGPKZXcfMM9YfjwFAgj/oL5kdqlsOT2sDkZLiLh88PGVSEbMKG8AUNm9I3 xvP7pagiv+XQ0+twx7tWhDQIXX9mfHI= -----END CERTIFICATE-----Generated at Sat May 10 16:18:19 2025 by rpki-client