$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa File: 8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa (raw, json) Hash identifier: 1MLhIDXWmljyt0aOm2F+wygdi0dblqTgJm1ZpZPO0Ao= Subject key identifier: F1:B3:57:D7:87:D2:85:44:A1:1E:B3:1E:69:60:00:71:4A:A9:3D:B9 Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F43285849A3548482BFBEDD8A157A9380 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 54840 IP address blocks: 192.30.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:84:82:bf:be:dd:8a:15:7a:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=2b1234f8-dcc2-4a7f-962d-136334946622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:c8:2b:41:a0:f7:3f:43:94:ce:2a:93:ba: ed:4d:4a:17:68:4a:5c:87:ca:0b:dc:a5:98:62:2f: 63:ca:12:40:ca:bb:b5:8f:cf:01:7e:b4:d9:da:7d: 77:89:03:f0:e8:44:4c:64:51:a7:8f:fd:eb:bd:fd: 02:4a:21:12:85:a2:f3:4a:db:2e:ae:2e:ec:c1:3d: 0c:e2:12:96:2f:5b:86:d4:6c:2d:d2:74:4d:db:d6: 63:6e:a7:7a:93:d0:1d:a4:15:22:22:d6:0d:45:ca: 58:0a:89:63:0f:c9:51:0e:72:ef:f3:e7:78:ca:08: 50:47:27:6b:e2:4f:f6:29:fd:1e:6c:7b:d9:73:96: 8f:bb:27:e3:9d:a8:5c:42:e6:19:2b:cd:f6:0f:a9: c6:21:25:ac:9e:b2:5e:8e:27:d1:c0:4f:a8:3e:70: 81:20:90:a5:29:46:ea:3e:8e:4c:da:2d:80:9d:01: 6c:f5:92:f6:d0:33:d0:2f:a6:a2:a6:55:8a:4a:37: 22:40:d5:9d:19:82:5a:f7:65:f8:e3:9e:a2:06:8b: 90:66:8a:0f:ce:9f:d3:51:be:bd:20:be:34:17:fe: 99:56:71:cd:b8:46:db:f7:d7:cf:2e:01:ca:66:d3: 41:98:62:21:8b:41:35:e5:a6:3f:de:23:d8:56:d4: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B3:57:D7:87:D2:85:44:A1:1E:B3:1E:69:60:00:71:4A:A9:3D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c5:8e:1b:59:e0:9c:f4:b9:46:62:77:55:84:70:8c:9e:cf: 7d:a5:69:d6:37:5c:48:4c:07:93:45:01:e7:d4:3e:10:45:fa: b1:58:e7:c8:43:ac:15:59:c7:38:d9:ef:08:29:27:18:cb:30: 84:f6:00:5f:19:d2:c7:0a:64:83:6d:c3:7a:51:b1:0d:a8:ce: b1:fa:a5:ca:50:11:4f:a3:1b:ba:c1:1a:5c:b3:b2:19:46:15: 8c:47:2e:0c:3d:37:7a:74:76:a3:6e:9d:88:b8:ce:09:22:c1: be:6f:0a:5b:7f:87:d8:7d:39:e7:a1:8a:89:f2:cb:98:6d:92: f4:48:b4:2f:da:13:ea:8a:b2:ca:de:a4:66:86:80:62:62:8b: bd:fc:2d:c7:0b:90:97:7e:31:4f:79:36:eb:f6:2c:eb:7f:12: 43:e0:3a:fe:e0:0f:50:3e:d7:2c:92:4f:19:66:b7:20:4f:da: 61:cf:5f:93:31:7a:70:45:fb:f4:1b:94:38:30:a5:18:1b:d3: 92:2b:40:b6:0b:f5:b2:1f:ac:dd:24:34:32:d5:58:98:9e:7c: 9f:40:e4:f7:c7:b5:7d:d3:40:c1:dd:56:72:13:96:32:36:52: 40:b3:bb:fa:f4:29:50:47:e4:c8:80:27:aa:7e:02:7b:37:ee: 14:a4:51:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVISCv77dihV6k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk MmIxMjM0ZjgtZGNjMi00YTdmLTk2MmQtMTM2MzM0OTQ2NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/TIK0Gg9z9DlM4qk7rtTUoXaEpch8oL3KWY Yi9jyhJAyru1j88BfrTZ2n13iQPw6ERMZFGnj/3rvf0CSiEShaLzStsuri7swT0M 4hKWL1uG1Gwt0nRN29Zjbqd6k9AdpBUiItYNRcpYColjD8lRDnLv8+d4yghQRydr 4k/2Kf0ebHvZc5aPuyfjnahcQuYZK832D6nGISWsnrJejifRwE+oPnCBIJClKUbq Po5M2i2AnQFs9ZL20DPQL6aiplWKSjciQNWdGYJa92X4456iBouQZooPzp/TUb69 IL40F/6ZVnHNuEbb99fPLgHKZtNBmGIhi0E15aY/3iPYVtSs+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGzV9eH0oVEoR6zHmlgAHFKqT25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOGE0MDc0NGEtZWNmMS0z NjEwLWI5ZDYtOWRhN2RhODcwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrFjhtZ4Jz0uUZid1WEcIyez32ladY3XEhMB5NFAefUPhBF+rFY58hD rBVZxzjZ7wgpJxjLMIT2AF8Z0scKZINtw3pRsQ2ozrH6pcpQEU+jG7rBGlyzshlG FYxHLgw9N3p0dqNunYi4zgkiwb5vClt/h9h9Oeehionyy5htkvRItC/aE+qKssre pGaGgGJii738LccLkJd+MU95Nuv2LOt/EkPgOv7gD1A+1yySTxlmtyBP2mHPX5Mx enBF+/QblDgwpRgb05IrQLYL9bIfrN0kNDLVWJiefJ9A5PfHtX3TQMHdVnITljI2 UkCzu/r0KVBH5MiAJ6p+Ans37hSkUVo= -----END CERTIFICATE-----Generated at Thu May 15 08:09:59 2025 by rpki-client