$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4b622fb8-a70a-3296-8165-1596b1eec07a.roa File: 4b622fb8-a70a-3296-8165-1596b1eec07a.roa (raw, json) Hash identifier: kIdnnH7jmgCGXIUljlF/gFDSM3rSncL4mlJWyBcKOJo= Subject key identifier: BF:2B:2A:0E:27:F6:86:A4:1A:4E:D9:E1:05:00:D7:8F:11:EB:EE:72 Certificate issuer: /CN=4007d5dc-09bf-4465-b6ab-84a07635a5a1 Certificate serial: 010D0C9F43285849B41496A25162AB0A5532CBD0 Authority key identifier: AF:A9:A2:EA:B1:C7:9E:19:3A:5F:09:05:4E:1C:11:6C:E5:24:50:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4b622fb8-a70a-3296-8165-1596b1eec07a.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 26677 IP address blocks: 192.197.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:96:a2:51:62:ab:0a:55:32:cb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4007d5dc-09bf-4465-b6ab-84a07635a5a1 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=ce8a6714-3057-4c14-8677-9988d2c19326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:84:39:e4:c7:33:dc:48:54:54:9c:95:9a: 8e:b9:d6:f4:25:e5:70:03:ef:42:36:38:89:44:0c: 56:d7:af:43:c6:d6:48:55:e7:21:35:d2:10:5e:23: 74:19:8b:77:cb:ff:31:2c:84:f4:d8:e2:57:20:05: 0b:8e:3a:39:fa:0e:b7:a5:fd:26:1e:bc:89:0a:24: 59:5c:06:88:2b:bc:71:c7:39:f3:88:d3:3f:89:5b: ea:ee:df:82:d0:ec:d9:09:1b:44:fb:36:c5:fe:f5: 95:3d:77:b1:36:86:34:12:ce:f2:d4:0f:58:53:f4: 7a:6f:8c:5c:dd:7e:6a:af:5f:6d:38:b1:1d:a9:a2: 29:8f:06:15:04:12:2c:d6:e1:3f:6b:fc:e9:44:fa: f1:ee:b0:54:c0:6e:2e:8b:18:14:f7:c1:fa:77:51: 0c:98:63:f6:7b:e1:aa:01:4e:12:31:e1:ae:c4:7f: b9:3b:e8:69:eb:40:3f:5f:93:b2:66:64:a3:86:1b: 6b:83:92:05:f0:f3:3b:57:e4:4c:d6:ec:6d:15:bb: fc:44:29:3b:df:a7:9d:48:3f:25:8a:62:63:e9:60: e9:8a:bc:c4:d7:d9:d2:fc:83:ce:ca:39:30:e4:2f: 84:77:67:af:52:fc:4d:5c:04:1d:5e:a8:1b:07:a5: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2B:2A:0E:27:F6:86:A4:1A:4E:D9:E1:05:00:D7:8F:11:EB:EE:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4b622fb8-a70a-3296-8165-1596b1eec07a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.crl X509v3 Authority Key Identifier: keyid:AF:A9:A2:EA:B1:C7:9E:19:3A:5F:09:05:4E:1C:11:6C:E5:24:50:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer sbgp-ipAddrBlock: critical IPv4: 192.197.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b2:2f:e8:90:22:9d:fd:07:83:eb:07:34:75:f3:ab:18:14: 1c:1c:9b:43:36:e0:3f:2a:98:e2:12:6e:67:41:f7:d5:81:49: cc:8b:8d:a6:64:7b:09:3e:63:74:5c:16:6b:c4:37:2f:5f:0b: c7:e7:61:5b:81:71:6a:1f:79:b2:e7:a8:34:53:6f:b4:6e:c0: 6e:b7:4e:a4:9c:ad:57:50:6f:e6:ef:dc:cc:f3:2a:b1:f2:54: 4d:40:1f:62:fe:48:2e:c5:00:f3:c8:6c:dc:76:8a:b6:25:18: ed:22:38:9d:f1:f4:8c:41:d7:59:98:e2:76:4c:fb:56:d9:f9: dd:0b:37:34:f5:38:fa:f9:65:0b:a5:8f:4d:dd:09:d2:17:32: b0:4b:31:22:32:49:44:a6:f7:f4:b8:1a:ca:6e:8f:fd:c0:49: ee:d8:b3:ca:70:ab:ad:c6:40:89:2c:12:f7:03:f5:50:b4:76: 33:42:a1:79:87:d5:3e:2b:18:1f:69:b4:be:fe:19:f7:00:f0: 5b:1e:73:d6:67:84:c5:4d:5d:c3:3d:a3:42:17:3c:12:84:95: 37:28:c7:e8:d7:b5:35:f5:a5:34:24:d7:c7:9f:6f:2f:a8:c3: 75:54:75:a2:8d:93:7d:93:45:cf:db:cf:1a:38:bd:ab:a4:2a: bf:dc:8f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0FJaiUWKrClUyy9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwN2Q1ZGMtMDliZi00NDY1LWI2YWItODRhMDc2MzVh NWExMB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk Y2U4YTY3MTQtMzA1Ny00YzE0LTg2NzctOTk4OGQyYzE5MzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoeEOeTHM9xIVFSclZqOudb0JeVwA+9CNjiJ RAxW169DxtZIVechNdIQXiN0GYt3y/8xLIT02OJXIAULjjo5+g63pf0mHryJCiRZ XAaIK7xxxznziNM/iVvq7t+C0OzZCRtE+zbF/vWVPXexNoY0Es7y1A9YU/R6b4xc 3X5qr19tOLEdqaIpjwYVBBIs1uE/a/zpRPrx7rBUwG4uixgU98H6d1EMmGP2e+Gq AU4SMeGuxH+5O+hp60A/X5OyZmSjhhtrg5IF8PM7V+RM1uxtFbv8RCk736edSD8l imJj6WDpirzE19nS/IPOyjkw5C+Ed2evUvxNXAQdXqgbB6Vu8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8rKg4n9oakGk7Z4QUA148R6+5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDA3 ZDVkYy0wOWJmLTQ0NjUtYjZhYi04NGEwNzYzNWE1YTEvNGI2MjJmYjgtYTcwYS0z Mjk2LTgxNjUtMTU5NmIxZWVjMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDAwN2Q1ZGMtMDliZi00NDY1LWI2 YWItODRhMDc2MzVhNWExLzQwMDdkNWRjLTA5YmYtNDQ2NS1iNmFiLTg0YTA3NjM1 YTVhMS5jcmwwHwYDVR0jBBgwFoAUr6mi6rHHnhk6XwkFThwRbOUkUE0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDA3ZDVkYy0wOWJmLTQ0NjUtYjZhYi04NGEw NzYzNWE1YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqyL+iQIp39B4PrBzR186sYFBwcm0M24D8qmOISbmdB99WBScyLjaZk ewk+Y3RcFmvENy9fC8fnYVuBcWofebLnqDRTb7RuwG63TqScrVdQb+bv3MzzKrHy VE1AH2L+SC7FAPPIbNx2irYlGO0iOJ3x9IxB11mY4nZM+1bZ+d0LNzT1OPr5ZQul j03dCdIXMrBLMSIySUSm9/S4Gspuj/3ASe7Ys8pwq63GQIksEvcD9VC0djNCoXmH 1T4rGB9ptL7+GfcA8Fsec9ZnhMVNXcM9o0IXPBKElTcox+jXtTX1pTQk18efby+o w3VUdaKNk32TRc/bzxo4vaukKr/cj50= -----END CERTIFICATE-----Generated at Sun May 11 11:46:23 2025 by rpki-client