$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa File: 821b0144-f20d-3232-8bec-514d962865a2.roa (raw, json) Hash identifier: D71LqLjyqTeC0b0CxcxWX/u0quOWysNfqRy8l7VCMtg= Subject key identifier: 84:56:88:BB:C4:9B:EF:F5:A5:5A:07:6C:6E:74:62:D3:33:4F:F8:DB Certificate issuer: /CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5 Certificate serial: 010D0C9F432858494B64051A32C03FF70C15BE40 Authority key identifier: F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 36281 IP address blocks: 192.30.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:05:1a:32:c0:3f:f7:0c:15:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=1247c008-bcd7-4e0c-b33a-0deb0857ff00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:c5:ae:9a:53:4e:78:b6:32:89:2f:98:1c: c8:f6:c6:46:28:ca:f2:2b:11:43:1b:67:e0:73:3a: 56:88:01:44:f4:34:76:d0:a8:f7:dd:86:ea:29:ae: a0:f8:01:af:2f:37:95:47:ef:d6:c5:48:61:0b:4b: e5:99:71:00:97:ce:be:8b:57:f8:03:e7:04:09:71: a9:52:7b:70:e6:10:b7:dd:bd:45:04:bc:91:d3:2f: 2a:11:6a:b6:e8:e5:45:c0:8f:24:a1:27:22:fb:99: 26:e9:23:4f:d2:3a:d2:65:9f:39:e7:f3:0b:9e:65: 4b:be:49:7b:51:80:36:9f:b1:75:bb:46:be:c1:34: 70:89:14:4e:c6:0b:87:fa:24:2b:83:ce:1e:5e:56: ef:97:1c:c4:fb:6d:e7:32:18:b8:64:5c:b7:0e:ff: b6:5c:c1:99:e1:dc:b8:e7:c3:4a:f9:58:31:1e:01: d5:b6:8e:3f:b8:36:be:01:1c:78:1c:cb:fb:4c:b9: 91:28:4f:d5:2e:44:79:e8:05:25:75:5e:fc:54:8f: a3:70:03:49:76:84:55:2c:fc:e4:b8:cb:73:f3:2e: ec:c2:94:c5:db:21:dc:cc:dd:63:8b:78:1f:6e:02: 20:b1:e6:d6:9b:17:7a:e4:8f:bd:6e:2b:6a:39:6c: f9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:56:88:BB:C4:9B:EF:F5:A5:5A:07:6C:6E:74:62:D3:33:4F:F8:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.crl X509v3 Authority Key Identifier: keyid:F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer sbgp-ipAddrBlock: critical IPv4: 192.30.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:51:2e:1b:67:37:22:ad:6a:6b:2e:e2:20:22:5a:29:b8:09: 62:9f:b0:8a:cf:12:e5:16:1e:54:6b:c6:37:f9:0e:7b:95:71: 8f:b8:b3:ff:00:91:4d:13:c3:b6:e3:68:9d:a3:3a:ba:c5:ca: f6:b3:6d:19:32:0f:69:4b:34:2e:80:f2:a1:e0:a0:a3:c2:11: 86:21:9d:53:c6:e8:15:56:a2:04:fc:ae:7a:ed:ff:4f:7b:49: 0f:ff:3c:53:33:4d:32:c0:84:21:6c:b2:fe:3d:bf:81:1a:be: d2:fe:a9:aa:98:81:c3:81:bb:7d:19:91:c0:ae:84:a8:fe:71: 91:83:48:5d:6f:8f:8f:e5:b9:79:a8:dc:d7:af:72:cd:9c:aa: fe:f4:00:db:7e:33:1f:81:64:76:a1:c0:19:7e:4e:0a:a6:78: c6:10:aa:24:52:28:f5:b6:5f:b0:9d:7f:9b:b4:2e:cc:db:07: 00:7d:5c:0c:b2:7b:c1:de:82:31:b8:7d:bd:81:d6:19:0b:3b: 29:ca:29:90:a1:37:31:60:b0:7b:37:87:5b:5d:e7:77:9b:ff: d0:83:d9:ef:b3:e6:7f:11:d8:e8:a3:92:c9:da:d9:33:09:e9: 6e:eb:73:8a:c7:43:b9:b2:48:3c:2c:3e:94:4f:b9:71:73:8f: 98:de:2b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAUaMsA/9wwVvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNmNjcyZDYtOWM4NS00ZWM2LWI2ZTUtNTc0N2NlZmQx MGM1MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MTI0N2MwMDgtYmNkNy00ZTBjLWIzM2EtMGRlYjA4NTdmZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWbFrppTTni2MokvmBzI9sZGKMryKxFDG2fg czpWiAFE9DR20Kj33YbqKa6g+AGvLzeVR+/WxUhhC0vlmXEAl86+i1f4A+cECXGp Untw5hC33b1FBLyR0y8qEWq26OVFwI8koSci+5km6SNP0jrSZZ855/MLnmVLvkl7 UYA2n7F1u0a+wTRwiRROxguH+iQrg84eXlbvlxzE+23nMhi4ZFy3Dv+2XMGZ4dy4 58NK+VgxHgHVto4/uDa+ARx4HMv7TLmRKE/VLkR56AUldV78VI+jcANJdoRVLPzk uMtz8y7swpTF2yHczN1ji3gfbgIgsebWmxd65I+9bitqOWz5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRWiLvEm+/1pVoHbG50YtMzT/jbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80Y2Y2 NzJkNi05Yzg1LTRlYzYtYjZlNS01NzQ3Y2VmZDEwYzUvODIxYjAxNDQtZjIwZC0z MjMyLThiZWMtNTE0ZDk2Mjg2NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGNmNjcyZDYtOWM4NS00ZWM2LWI2 ZTUtNTc0N2NlZmQxMGM1LzRjZjY3MmQ2LTljODUtNGVjNi1iNmU1LTU3NDdjZWZk MTBjNS5jcmwwHwYDVR0jBBgwFoAU+PXwZGO4IFK5kiWDK/2JQt6Zb5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80Y2Y2NzJkNi05Yzg1LTRlYzYtYjZlNS01NzQ3 Y2VmZDEwYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFRLhtnNyKtamsu4iAiWim4CWKfsIrPEuUWHlRrxjf5DnuVcY+4s/8A kU0Tw7bjaJ2jOrrFyvazbRkyD2lLNC6A8qHgoKPCEYYhnVPG6BVWogT8rnrt/097 SQ//PFMzTTLAhCFssv49v4EavtL+qaqYgcOBu30ZkcCuhKj+cZGDSF1vj4/luXmo 3Nevcs2cqv70ANt+Mx+BZHahwBl+TgqmeMYQqiRSKPW2X7Cdf5u0LszbBwB9XAyy e8HegjG4fb2B1hkLOynKKZChNzFgsHs3h1td53eb/9CD2e+z5n8R2Oijksna2TMJ 6W7rc4rHQ7mySDwsPpRPuXFzj5jeK48= -----END CERTIFICATE-----Generated at Mon May 5 22:32:41 2025 by rpki-client