$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/27e249ea-3d3b-3689-bdd9-e178895538b2.roa File: 27e249ea-3d3b-3689-bdd9-e178895538b2.roa (raw, json) Hash identifier: 8LzafxZRVvKBm70wx5FrKfqQiNRCbJhe0MT1I4e6iZU= Subject key identifier: 20:09:16:14:55:62:D9:54:A2:C8:5E:3B:5A:BE:87:4E:3C:8C:B5:F1 Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699 Certificate serial: 010D0C9F43285849CE9A4B864BF4C74EEE029480 Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/27e249ea-3d3b-3689-bdd9-e178895538b2.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 134.195.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:4b:86:4b:f4:c7:4e:ee:02:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=68de5e39-85ed-4b79-a437-908d663be5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:65:df:c9:26:a4:71:fb:5d:7f:d7:63:a5: 22:9d:c3:68:a1:56:37:68:d8:8f:75:80:64:af:46: 5b:73:44:d6:b7:53:2a:34:6f:54:5c:d3:25:0e:a0: 59:90:86:71:b2:7b:f8:e4:00:a8:8d:93:af:4e:40: 13:b4:09:4a:96:b1:bf:c0:44:62:4d:4d:de:b4:c8: 48:71:2b:b7:f1:97:eb:23:52:ad:1e:5c:d3:4e:ef: 01:eb:50:f0:d8:79:ef:2b:7b:c9:48:48:38:ed:f0: ab:f0:6c:bf:c7:2f:a2:93:8b:df:f1:1e:42:d3:55: 0f:56:67:d1:5f:b0:f5:96:e0:e5:a2:4a:df:80:1c: 79:67:5a:a1:5d:b8:33:99:11:19:6b:94:df:5f:26: b9:24:29:c2:59:b4:54:9c:81:fd:21:9d:a8:2e:e1: d8:3c:22:79:40:00:da:c4:cc:16:f3:9d:b4:4f:a8: 75:75:69:dc:80:c7:84:c1:38:72:79:e8:da:d7:32: 87:9e:2f:cd:9d:05:c8:38:58:60:72:61:92:ee:b3: d0:09:b9:35:16:f7:30:5f:56:6a:55:d7:c5:36:8e: 75:e9:47:06:ae:62:53:7a:ea:de:12:50:91:64:38: b5:bf:2e:74:f5:f3:17:c4:e2:a6:1b:b8:ff:a6:fb: 36:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:09:16:14:55:62:D9:54:A2:C8:5E:3B:5A:BE:87:4E:3C:8C:B5:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/27e249ea-3d3b-3689-bdd9-e178895538b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl X509v3 Authority Key Identifier: keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer sbgp-ipAddrBlock: critical IPv4: 134.195.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:42:b2:24:0a:0d:7c:0c:e5:89:81:78:f8:a6:e6:f3:71:f3: f9:2b:af:63:82:f2:ab:17:f6:90:f7:b5:2c:97:1d:4a:9d:66: 94:b6:1d:55:70:03:5c:f6:f5:20:f2:9d:c5:95:52:fb:8b:d5: 29:db:d8:7f:e5:b8:bc:d6:36:32:b7:b2:af:d3:f4:10:c3:21: a3:88:6f:06:e1:0f:a3:92:6c:df:29:93:34:0c:79:48:13:3d: 5a:a2:da:2c:bf:27:d7:67:c5:79:a8:ff:db:42:4e:b9:91:60: b0:50:85:93:ee:36:3d:a1:24:96:4d:0c:8c:d8:6e:4b:63:dd: 3a:38:2d:64:28:94:ad:e7:72:70:f2:84:93:87:23:42:c0:85: 17:84:18:81:99:57:8b:23:07:e7:cd:fc:54:7b:3c:9b:ff:1a: 3b:fa:5a:64:d6:45:c0:98:ba:46:3d:50:fb:59:cd:8a:72:8a: b2:9c:da:6d:a8:5f:84:76:9f:03:2d:b2:3e:e2:98:b5:bd:2f: 9b:6d:ab:c8:64:4d:1b:83:1d:64:c3:65:e7:4a:c0:c8:55:51: 0c:64:7d:9a:fe:7e:a1:09:65:fc:e9:f7:34:61:9b:1e:96:a0: cf:35:80:c2:62:e0:5b:7c:85:d7:06:a0:53:d5:6a:84:63:d5: 40:47:ca:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkuGS/THTu4ClIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJmYTI4NzgtNzE1ZS00NzkzLWFmMmEtNDMyNTgzZWEw Njk5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NjhkZTVlMzktODVlZC00Yjc5LWE0MzctOTA4ZDY2M2JlNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA1l38kmpHH7XX/XY6UincNooVY3aNiPdYBk r0Zbc0TWt1MqNG9UXNMlDqBZkIZxsnv45ACojZOvTkATtAlKlrG/wERiTU3etMhI cSu38ZfrI1KtHlzTTu8B61Dw2HnvK3vJSEg47fCr8Gy/xy+ik4vf8R5C01UPVmfR X7D1luDlokrfgBx5Z1qhXbgzmREZa5TfXya5JCnCWbRUnIH9IZ2oLuHYPCJ5QADa xMwW8520T6h1dWncgMeEwThyeeja1zKHni/NnQXIOFhgcmGS7rPQCbk1FvcwX1Zq VdfFNo516UcGrmJTeureElCRZDi1vy509fMXxOKmG7j/pvs2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAJFhRVYtlUosheO1q+h048jLXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZh Mjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1ODNlYTA2OTkvMjdlMjQ5ZWEtM2QzYi0z Njg5LWJkZDktZTE3ODg5NTUzOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmYTI4NzgtNzE1ZS00NzkzLWFm MmEtNDMyNTgzZWEwNjk5L2EyZmEyODc4LTcxNWUtNDc5My1hZjJhLTQzMjU4M2Vh MDY5OS5jcmwwHwYDVR0jBBgwFoAU6BplsqVg16P5Ea0VVOp5ypXtsF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZhMjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1 ODNlYTA2OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChCsiQKDXwM5YmBePim5vNx8/krr2OC8qsX9pD3tSyXHUqdZpS2HVVw A1z29SDyncWVUvuL1Snb2H/luLzWNjK3sq/T9BDDIaOIbwbhD6OSbN8pkzQMeUgT PVqi2iy/J9dnxXmo/9tCTrmRYLBQhZPuNj2hJJZNDIzYbktj3To4LWQolK3ncnDy hJOHI0LAhReEGIGZV4sjB+fN/FR7PJv/Gjv6WmTWRcCYukY9UPtZzYpyirKc2m2o X4R2nwMtsj7imLW9L5ttq8hkTRuDHWTDZedKwMhVUQxkfZr+fqEJZfzp9zRhmx6W oM81gMJi4Ft8hdcGoFPVaoRj1UBHyrI= -----END CERTIFICATE-----Generated at Sun May 11 13:44:49 2025 by rpki-client