$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa File: 8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa (raw, json) Hash identifier: hCMTkA4W04vuOmMZQ2DKFFf9WTIksa2OT0XNpibIUFY= Subject key identifier: 75:06:5B:25:1A:D9:35:FF:23:C4:53:2C:EE:89:09:4F:20:DA:AB:BB Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F43285849A8E9DA01B85D8364BE343CC0 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 683 IP address blocks: 192.5.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:da:01:b8:5d:83:64:be:34:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=1acfa77e-37ad-4209-8874-f50c40b07aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:9b:5d:83:71:c0:b3:8e:4a:99:ad:6b:7e: f4:71:29:b9:d2:0a:bd:18:8f:51:5f:86:0e:c2:f1: 61:f6:eb:72:83:8b:68:d5:85:d2:d4:a2:6f:46:0d: 4e:0d:37:ee:79:4f:fe:25:36:14:31:39:1b:b7:8a: a5:cc:97:32:06:86:42:40:da:95:e7:ae:4a:dc:67: b9:48:3b:41:02:6a:2f:25:1b:b7:19:9f:79:84:56: ac:ce:ff:4d:b9:be:b5:34:6d:04:8a:08:e4:7e:8c: 52:03:ff:87:1c:9f:0c:55:a8:8d:07:2c:3e:49:90: f9:54:e2:ec:51:b8:ed:51:87:b1:85:e4:29:41:35: 2a:34:41:ec:33:37:e6:b2:4c:60:35:57:88:9f:26: 4d:80:62:44:6d:30:1c:7a:d3:45:f1:55:e8:24:60: 20:79:18:38:07:e4:37:56:ce:87:2b:16:8e:d3:e6: bc:21:48:5a:ec:1e:b2:ab:20:28:09:9d:89:90:b5: 37:ae:c8:e1:ba:c5:5f:d5:ea:0b:57:52:de:5e:fe: dd:b1:75:99:6c:e1:8d:f0:dd:c7:13:10:69:74:8a: c3:f8:e2:03:34:0a:c6:bb:a8:35:10:87:5c:96:81: 1b:c5:f9:40:4c:31:ef:59:76:cd:15:94:5d:a9:b2: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:06:5B:25:1A:D9:35:FF:23:C4:53:2C:EE:89:09:4F:20:DA:AB:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 192.5.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:38:ee:06:bc:c0:43:e0:38:95:47:bd:22:0c:e6:83:42:8d: 9f:a2:53:35:e0:f7:8a:79:c8:03:09:53:21:aa:32:eb:cd:74: 4e:39:58:c9:6c:bb:25:7e:ac:39:51:52:e0:e1:da:e8:c2:b6: 82:42:05:bc:33:2d:97:14:ab:fe:b8:18:c2:9a:7f:99:25:cd: f4:90:46:93:92:3b:b6:59:bb:08:ee:2a:7c:1c:90:eb:c3:e4: 9c:51:13:02:7a:fa:70:1d:50:83:08:2d:d0:e7:05:45:38:92: ba:9e:b8:02:e6:61:af:15:64:d1:44:5b:4a:17:6b:b1:74:d8: 08:9e:8d:86:3c:53:41:96:5d:c3:02:4f:eb:fc:59:bd:6a:f3: 84:f7:dd:f1:18:7a:9d:7c:b8:ed:6a:4c:67:c9:35:3d:53:c5: bd:36:22:b5:8b:63:e5:15:d0:65:64:cf:67:f2:4a:bc:8d:c7: 16:c3:af:2f:c0:5e:80:ec:2a:4f:60:67:30:c3:9c:94:23:33: a4:50:1f:67:39:40:a4:4d:4c:5f:e5:a5:d2:a4:cb:b8:52:3d: c1:35:91:2a:0d:b6:33:31:86:25:ea:39:f4:a1:00:e5:3c:f0: fd:7c:04:ed:e3:58:9a:22:ab:8b:77:fc:ae:74:d2:f9:a3:06: f5:a2:94:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6doBuF2DZL40PMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk MWFjZmE3N2UtMzdhZC00MjA5LTg4NzQtZjUwYzQwYjA3YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3KbXYNxwLOOSpmta370cSm50gq9GI9RX4YO wvFh9utyg4to1YXS1KJvRg1ODTfueU/+JTYUMTkbt4qlzJcyBoZCQNqV565K3Ge5 SDtBAmovJRu3GZ95hFaszv9Nub61NG0EigjkfoxSA/+HHJ8MVaiNByw+SZD5VOLs UbjtUYexheQpQTUqNEHsMzfmskxgNVeInyZNgGJEbTAcetNF8VXoJGAgeRg4B+Q3 Vs6HKxaO0+a8IUha7B6yqyAoCZ2JkLU3rsjhusVf1eoLV1LeXv7dsXWZbOGN8N3H ExBpdIrD+OIDNArGu6g1EIdcloEbxflATDHvWXbNFZRdqbIQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUGWyUa2TX/I8RTLO6JCU8g2qu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvOGNkNmM0YmMtOThhZC0z NzczLTk3NGQtY2E3YTFjMDMxZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU47ga8wEPgOJVHvSIM5oNCjZ+iUzXg94p5yAMJUyGqMuvNdE45WMls uyV+rDlRUuDh2ujCtoJCBbwzLZcUq/64GMKaf5klzfSQRpOSO7ZZuwjuKnwckOvD 5JxREwJ6+nAdUIMILdDnBUU4krqeuALmYa8VZNFEW0oXa7F02AiejYY8U0GWXcMC T+v8Wb1q84T33fEYep18uO1qTGfJNT1Txb02IrWLY+UV0GVkz2fySryNxxbDry/A XoDsKk9gZzDDnJQjM6RQH2c5QKRNTF/lpdKky7hSPcE1kSoNtjMxhiXqOfShAOU8 8P18BO3jWJoiq4t3/K500vmjBvWilGk= -----END CERTIFICATE-----Generated at Fri May 9 02:56:46 2025 by rpki-client