$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa File: 4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa (raw, json) Hash identifier: 3b47wT2bbfv/52NK8lg56IN5z5kPHFSQadyJsKjPoAE= Subject key identifier: 4E:4A:ED:C9:DC:AE:93:43:AA:70:71:D5:94:EF:CB:8A:D9:1B:00:71 Certificate issuer: /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Certificate serial: 010D0C9F43285849B57A0644637AD5AB1C65DF90 Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 30456 IP address blocks: 195.88.218.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:06:44:63:7a:d5:ab:1c:65:df:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=f2d8cbd1-e27f-45e6-b510-c9995be13135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:1f:70:86:d9:35:d1:04:18:dd:19:c4:56: a2:4a:b0:48:97:cb:02:b3:d8:47:68:58:e1:b1:40: 84:83:dd:cd:b8:a0:ff:54:ae:a8:bf:73:74:b9:6d: 8f:ba:e3:c5:c4:3f:5e:68:ca:3f:ef:40:65:e1:2c: 61:73:61:f3:3a:a7:51:d8:67:b9:3d:e4:ca:22:02: a0:d1:4d:f6:99:26:3f:94:db:a2:a8:97:d3:60:94: 87:f8:52:50:b7:e0:d1:21:a3:0d:59:49:cc:ec:af: 29:3d:35:2e:33:7a:9f:26:b3:54:d1:6e:86:25:70: 84:e8:54:c0:8a:e3:d7:d9:d1:7f:b8:b9:3f:31:95: 5a:1c:ba:34:8f:3d:7a:df:95:dd:81:10:e2:20:8b: 1b:50:50:4c:1c:10:65:7e:4e:23:9b:c7:53:e7:47: 94:a2:c2:a3:57:a9:df:b4:be:dd:a8:66:76:ef:41: c5:22:fa:c8:a6:59:be:da:db:7a:46:be:61:a3:53: 64:f5:dc:ca:0a:42:df:2b:9f:1c:67:0c:59:a7:dd: 05:ba:07:2b:95:2c:c0:68:1f:80:6b:52:a8:65:52: d2:16:a9:9f:59:89:b3:fc:c1:68:94:19:74:99:24: 0e:4a:55:d7:ac:eb:cd:7f:25:e8:9c:92:82:93:ba: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4A:ED:C9:DC:AE:93:43:AA:70:71:D5:94:EF:CB:8A:D9:1B:00:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl X509v3 Authority Key Identifier: keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer sbgp-ipAddrBlock: critical IPv4: 195.88.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:6d:6d:27:87:48:09:1f:c4:8f:5a:09:71:74:1b:bb:d1:d8: e9:9a:55:06:f3:81:73:8a:19:7f:67:61:0e:5d:2d:ca:75:2d: 9c:b6:5f:23:87:f0:3b:52:2b:f8:f3:ca:82:fd:9c:c3:8f:6e: 76:d7:d6:31:b8:3c:d9:a1:f2:0c:96:f9:52:86:fb:cd:d0:5c: 78:1c:51:6a:58:47:40:e4:11:ae:e3:84:36:db:7f:8c:30:9e: 3b:76:84:61:e8:40:13:50:ad:82:0d:e8:72:8d:cd:3d:88:9f: 1e:1e:13:c7:5f:58:60:9a:c0:71:4e:6d:7a:a9:43:37:0d:a4: e7:7e:7e:c4:7d:1b:0f:b0:22:db:30:e5:69:66:2b:c4:ba:a3: 1e:6a:a7:13:e4:6e:79:35:d0:66:b2:dc:e9:6c:4a:2d:50:d0: 4c:36:5d:70:6f:f3:f6:58:6f:33:3a:31:b1:34:0d:43:77:25: 66:2d:2f:44:bb:fd:83:7e:d8:2b:62:f0:12:12:5a:5b:5e:a2: 3c:88:80:ee:47:36:d1:63:ef:cd:2a:37:c0:99:9a:28:4b:a9: cb:04:26:5c:93:8a:89:90:a3:7d:54:4a:a5:55:f4:57:90:f5: a8:23:85:f8:6f:c3:3f:c3:3d:ae:93:c5:cb:3a:a4:18:f5:c8: 42:68:f1:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1egZEY3rVqxxl35AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3 NDgzMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZjJkOGNiZDEtZTI3Zi00NWU2LWI1MTAtYzk5OTViZTEzMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLcfcIbZNdEEGN0ZxFaiSrBIl8sCs9hHaFjh sUCEg93NuKD/VK6ov3N0uW2PuuPFxD9eaMo/70Bl4Sxhc2HzOqdR2Ge5PeTKIgKg 0U32mSY/lNuiqJfTYJSH+FJQt+DRIaMNWUnM7K8pPTUuM3qfJrNU0W6GJXCE6FTA iuPX2dF/uLk/MZVaHLo0jz1635XdgRDiIIsbUFBMHBBlfk4jm8dT50eUosKjV6nf tL7dqGZ270HFIvrIplm+2tt6Rr5ho1Nk9dzKCkLfK58cZwxZp90FugcrlSzAaB+A a1KoZVLSFqmfWYmz/MFolBl0mSQOSlXXrOvNfyXonJKCk7ojJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5K7cncrpNDqnBx1ZTvy4rZGwBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvNGJkYzNmMjYtY2QwYS0z MmQ2LWExZDItZTU4MDJkNzJlYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0 ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0 MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1jaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdtbSeHSAkfxI9aCXF0G7vR2OmaVQbzgXOKGX9nYQ5dLcp1LZy2XyOH 8DtSK/jzyoL9nMOPbnbX1jG4PNmh8gyW+VKG+83QXHgcUWpYR0DkEa7jhDbbf4ww njt2hGHoQBNQrYIN6HKNzT2Inx4eE8dfWGCawHFObXqpQzcNpOd+fsR9Gw+wItsw 5WlmK8S6ox5qpxPkbnk10Gay3OlsSi1Q0Ew2XXBv8/ZYbzM6MbE0DUN3JWYtL0S7 /YN+2Cti8BISWlteojyIgO5HNtFj780qN8CZmihLqcsEJlyTiomQo31USqVV9FeQ 9agjhfhvwz/DPa6Txcs6pBj1yEJo8Yk= -----END CERTIFICATE-----Generated at Tue May 6 10:36:56 2025 by rpki-client