$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa File: 4a22aa0c-164e-338c-b284-0e4f40ef468d.roa (raw, json) Hash identifier: SLQxdqLnp1wHRg7+/KOr2lFx4Q/UWt0NyK1O+mLOGQA= Subject key identifier: B2:BC:6F:A9:64:C0:2E:34:CC:F7:F5:B6:DD:98:7C:5E:B3:CA:6A:C0 Certificate issuer: /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Certificate serial: 010D0C9F43285849B149EE1FDE67B5D78AB86200 Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 395960 IP address blocks: 192.184.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ee:1f:de:67:b5:d7:8a:b8:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0101f8ca-d994-42c5-ad19-64a2c14e64d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:77:4d:da:48:0e:91:e6:c6:98:56:bb:b3: 33:ba:d9:6a:4d:36:9f:6f:32:22:40:c0:72:3f:c8: 96:6d:e8:fc:a0:02:a8:40:9e:21:0e:bd:08:48:71: e6:e3:b9:7f:b9:1a:d6:77:e0:6d:51:f6:3d:ce:b0: 3b:cf:13:8d:df:4b:8d:65:12:6b:d9:f7:b0:4d:61: 1c:37:8d:2d:c9:e9:ff:78:52:93:f3:b1:87:3e:85: 0b:63:1f:1f:fa:99:b3:fb:4b:d6:d6:45:c2:0b:d8: ea:c3:0d:19:e2:bb:9f:2a:bf:aa:13:ec:ef:b6:30: 40:44:50:7f:92:32:78:d2:80:e7:c8:58:aa:ce:78: 58:a8:ea:5b:91:9d:64:16:1b:ab:2c:ed:fb:4d:9a: 4d:c9:fa:34:d7:56:17:51:aa:1a:b5:70:ca:9a:cd: 1e:4f:d5:d2:dc:39:14:20:82:b1:f8:96:41:50:e2: 40:db:73:e0:d7:2a:e0:90:01:29:7b:31:b5:68:2a: cb:1b:44:ee:58:e4:49:5e:df:2a:a9:fd:24:61:ab: a2:16:69:67:5a:8d:63:25:5d:cb:27:96:ea:aa:59: 78:35:43:e2:24:ed:01:bb:2d:2f:07:24:41:aa:2b: 53:53:e0:b0:4d:b8:a2:7b:05:30:5d:dc:d7:51:5b: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:6F:A9:64:C0:2E:34:CC:F7:F5:B6:DD:98:7C:5E:B3:CA:6A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl X509v3 Authority Key Identifier: keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer sbgp-ipAddrBlock: critical IPv4: 192.184.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c3:c5:aa:d2:e0:a6:72:fb:5d:d6:63:06:8b:21:bc:b6:da: 7b:d6:5f:14:ed:dc:93:1c:c1:35:bb:87:d4:8a:27:95:76:e1: 7b:49:db:ef:f3:ed:9e:bb:66:ed:6b:2d:ac:c4:8d:f9:ad:6b: ae:11:84:2e:a1:70:76:64:0e:8f:48:e4:e2:2d:de:32:d0:f0: 27:6c:d4:d7:f0:62:7a:0a:1e:bc:aa:5a:eb:d4:81:48:7b:b4: e6:54:77:cf:3c:dd:0f:e5:bb:f8:81:21:3c:e8:b0:81:18:74: 22:39:bb:9a:ca:2d:2c:ac:03:bf:3b:59:63:04:ac:27:bd:7b: d0:2d:ba:43:10:1b:76:3d:d0:b1:d8:73:e2:7a:5b:b5:e1:6f: c3:db:2c:d1:95:df:2f:60:88:b8:12:56:73:03:31:39:4e:f9: 69:c3:55:c3:79:4e:df:7c:5d:3c:fe:ed:3b:e2:a0:a5:ad:b5: dd:b1:d1:42:61:2b:e7:1b:a7:6d:68:90:bd:42:6c:08:49:4a: 90:44:0d:cb:e5:82:01:b2:87:12:5a:cc:09:e7:0f:1f:f0:d2: 0c:16:00:b8:45:6e:e8:7b:b6:e6:b4:f7:aa:64:8e:87:86:58: 4f:52:db:03:dc:59:6b:f9:6c:05:5b:5a:44:07:88:be:1f:cf: 99:0c:30:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSe4f3me114q4YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi MDg3MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDEwMWY4Y2EtZDk5NC00MmM1LWFkMTktNjRhMmMxNGU2NGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVZ3TdpIDpHmxphWu7MzutlqTTafbzIiQMBy P8iWbej8oAKoQJ4hDr0ISHHm47l/uRrWd+BtUfY9zrA7zxON30uNZRJr2fewTWEc N40tyen/eFKT87GHPoULYx8f+pmz+0vW1kXCC9jqww0Z4rufKr+qE+zvtjBARFB/ kjJ40oDnyFiqznhYqOpbkZ1kFhurLO37TZpNyfo011YXUaoatXDKms0eT9XS3DkU IIKx+JZBUOJA23Pg1yrgkAEpezG1aCrLG0TuWORJXt8qqf0kYauiFmlnWo1jJV3L J5bqqll4NUPiJO0Buy0vByRBqitTU+CwTbiiewUwXdzXUVueLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK8b6lkwC40zPf1tt2YfF6zymrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvNGEyMmFhMGMtMTY0ZS0z MzhjLWIyODQtMGU0ZjQwZWY0NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh YmY4YmIwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLjqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErDxarS4KZy+13WYwaLIby22nvWXxTt3JMcwTW7h9SKJ5V24XtJ2+/z 7Z67Zu1rLazEjfmta64RhC6hcHZkDo9I5OIt3jLQ8Cds1NfwYnoKHryqWuvUgUh7 tOZUd8883Q/lu/iBITzosIEYdCI5u5rKLSysA787WWMErCe9e9AtukMQG3Y90LHY c+J6W7Xhb8PbLNGV3y9giLgSVnMDMTlO+WnDVcN5Tt98XTz+7TvioKWttd2x0UJh K+cbp21okL1CbAhJSpBEDcvlggGyhxJazAnnDx/w0gwWALhFbuh7tua096pkjoeG WE9S2wPcWWv5bAVbWkQHiL4fz5kMMCM= -----END CERTIFICATE-----Generated at Sat May 10 17:32:23 2025 by rpki-client