$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa File: 2094b4f3-9720-3bee-8fcd-e854d365402a.roa (raw, json) Hash identifier: 18x0JB+BEmCnjlBusyv5Kzr8sTH5j7odWvWFK2DokW0= Subject key identifier: 4B:D3:5B:91:DB:CE:A6:CF:1B:91:39:16:72:2B:B8:E3:3A:47:52:9F Certificate issuer: /CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e Certificate serial: 010D0C9F43285849CE9A61E0AA711E431F49A098 Authority key identifier: EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 393877 IP address blocks: 192.133.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:61:e0:aa:71:1e:43:1f:49:a0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=8fac5a37-19e9-4fc6-bb5f-0a0abf2de5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b3:ac:67:22:96:e0:42:9a:35:e4:c0:b1:27: 97:90:f1:8a:2e:99:c9:9b:82:e5:77:3a:48:1a:ed: 3d:9d:da:ac:9a:89:6a:81:85:94:9c:dd:0e:27:de: db:db:35:f9:37:44:16:bc:6f:2e:67:73:fd:58:15: 78:4b:54:35:ef:fe:bb:f0:12:f7:75:95:2d:39:48: e5:f3:26:f3:23:b6:10:a0:27:10:84:36:dc:62:23: 51:ba:ad:e5:c1:19:24:a7:61:2d:97:75:c8:53:f6: 58:33:f8:76:19:6a:9c:5e:82:4d:b2:9a:03:c6:f2: ce:78:d9:9c:21:8f:06:f7:ed:e8:f9:20:82:3a:fd: 46:82:17:de:91:de:b3:d3:de:96:f8:49:9e:9c:80: 72:f2:93:a4:a7:5d:af:7d:7d:52:91:0b:47:fc:a9: d5:cb:3e:98:74:8d:d1:f2:0f:b0:35:3f:20:99:0e: f1:19:fb:ce:76:22:72:0f:49:86:56:05:4f:02:f2: 8f:42:ba:b3:c6:54:c9:1a:bf:2c:98:04:2c:67:49: ff:07:95:87:8b:a9:f4:53:eb:cc:72:12:91:31:ec: c8:b4:0b:bc:3f:72:64:30:d1:c1:b8:29:19:2c:4c: 79:df:a5:5f:de:8a:8a:bf:bb:6f:00:71:8d:34:b6: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D3:5B:91:DB:CE:A6:CF:1B:91:39:16:72:2B:B8:E3:3A:47:52:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl X509v3 Authority Key Identifier: keyid:EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer sbgp-ipAddrBlock: critical IPv4: 192.133.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:6e:30:84:4c:7e:a6:1d:9b:25:42:00:d9:1b:4f:ac:10:3b: d4:e0:4b:82:96:29:68:46:bf:0d:74:95:d1:28:e1:26:e8:c5: 88:a2:43:97:33:52:73:62:dc:7a:b5:bc:02:1b:74:65:c3:a1: 98:4c:99:ba:45:46:59:55:58:a9:a8:43:e7:24:e7:b9:1c:d0: 18:c5:60:26:92:2e:4d:44:5a:91:93:07:19:39:b3:0d:9a:3f: 64:98:f9:30:97:d1:b4:d5:2c:9f:f7:62:40:80:ed:23:16:61: 11:85:cd:49:d7:3d:69:32:7e:f5:bc:42:8e:34:5b:a8:e0:f9: 42:3c:e2:19:83:02:0b:d8:58:7f:c0:65:d8:54:8c:9e:d8:bf: b4:f8:b7:55:0d:0d:fa:4e:6e:55:51:ce:22:75:08:9e:64:fa: e5:7b:de:6b:bb:0f:12:a1:d0:d1:bc:01:b6:e5:17:00:60:5e: 31:41:92:e6:24:f6:6c:6b:3e:f7:0c:8f:0f:b5:09:70:22:34: e8:ee:bc:a9:b7:9a:bf:12:15:c6:68:19:9b:3e:6f:34:a2:64: d9:eb:30:06:69:fb:42:86:b5:dc:ba:55:0d:df:c5:2f:dd:eb: 8f:87:af:13:a2:cb:87:61:d4:12:84:bf:e5:34:b0:ee:ff:7d: 76:b7:9b:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmHgqnEeQx9JoJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZhMGFiZDUtN2NmOC00MmNmLThhNDYtNjI2YjUwZWZk MzBlMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OGZhYzVhMzctMTllOS00ZmM2LWJiNWYtMGEwYWJmMmRlNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLOsZyKW4EKaNeTAsSeXkPGKLpnJm4LldzpI Gu09ndqsmolqgYWUnN0OJ97b2zX5N0QWvG8uZ3P9WBV4S1Q17/678BL3dZUtOUjl 8ybzI7YQoCcQhDbcYiNRuq3lwRkkp2Etl3XIU/ZYM/h2GWqcXoJNspoDxvLOeNmc IY8G9+3o+SCCOv1Gghfekd6z096W+EmenIBy8pOkp12vfX1SkQtH/KnVyz6YdI3R 8g+wNT8gmQ7xGfvOdiJyD0mGVgVPAvKPQrqzxlTJGr8smAQsZ0n/B5WHi6n0U+vM chKRMezItAu8P3JkMNHBuCkZLEx536Vf3oqKv7tvAHGNNLZo8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvTW5HbzqbPG5E5FnIruOM6R1KfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmEw YWJkNS03Y2Y4LTQyY2YtOGE0Ni02MjZiNTBlZmQzMGUvMjA5NGI0ZjMtOTcyMC0z YmVlLThmY2QtZTg1NGQzNjU0MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZhMGFiZDUtN2NmOC00MmNmLThh NDYtNjI2YjUwZWZkMzBlL2ZmYTBhYmQ1LTdjZjgtNDJjZi04YTQ2LTYyNmI1MGVm ZDMwZS5jcmwwHwYDVR0jBBgwFoAU73PAu59X8k66/FW5U4oSDxo0itkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmEwYWJkNS03Y2Y4LTQyY2YtOGE0Ni02MjZi NTBlZmQzMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIUtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMxuMIRMfqYdmyVCANkbT6wQO9TgS4KWKWhGvw10ldEo4SboxYiiQ5cz UnNi3Hq1vAIbdGXDoZhMmbpFRllVWKmoQ+ck57kc0BjFYCaSLk1EWpGTBxk5sw2a P2SY+TCX0bTVLJ/3YkCA7SMWYRGFzUnXPWkyfvW8Qo40W6jg+UI84hmDAgvYWH/A ZdhUjJ7Yv7T4t1UNDfpOblVRziJ1CJ5k+uV73mu7DxKh0NG8AbblFwBgXjFBkuYk 9mxrPvcMjw+1CXAiNOjuvKm3mr8SFcZoGZs+bzSiZNnrMAZp+0KGtdy6VQ3fxS/d 64+HrxOiy4dh1BKEv+U0sO7/fXa3m+8= -----END CERTIFICATE-----Generated at Wed May 14 02:48:15 2025 by rpki-client