$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa File: 87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa (raw, json) Hash identifier: qkiVmmPMVTF3GQsiNWX/E6vyXciNOBDt/FLDlZ/k2+w= Subject key identifier: 5D:18:7E:80:CB:26:33:6C:B1:05:A5:B9:79:78:F1:F6:B6:B2:C1:00 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F43285849C904F5A7E4DC5A09A09A8480 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 4226 IP address blocks: 199.192.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f5:a7:e4:dc:5a:09:a0:9a:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=f3a67ae6-dd9d-4a8e-ba89-fb85960a1baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:47:a3:6c:12:b9:cc:2f:c2:00:cf:15:4b: 90:eb:3f:8c:a7:27:ac:e4:66:d7:34:ef:32:a8:29: d9:8a:1d:b4:51:ff:89:07:ed:8b:89:a5:72:03:26: 7f:51:26:4a:62:29:f4:7a:b8:5c:38:04:26:f9:72: fd:71:5d:f2:35:26:66:c3:16:5f:46:57:18:6b:54: 5e:d2:31:40:07:d3:09:d5:03:db:44:e7:3c:73:29: a4:0e:f0:c9:bd:ec:6c:91:42:54:27:00:cf:cf:44: da:65:5e:ae:fc:88:21:e6:d4:0e:eb:fe:76:a0:23: d3:db:c7:ed:b4:b3:ba:5e:3a:00:ba:03:ce:57:1b: d7:b3:1a:a2:6a:f0:e0:29:ff:9a:c0:00:d2:b0:86: bc:0d:6c:9c:1b:d2:8a:7b:d6:57:2f:cf:ae:b6:5e: c1:ea:cd:59:3a:c7:ff:aa:7e:38:dc:3e:10:09:ed: fd:ae:e8:96:12:70:c6:74:7c:1e:f6:32:1b:9e:af: 64:ec:cf:22:3b:24:31:df:28:58:4e:3d:c3:e1:52: 1c:84:b7:8c:95:90:c5:cf:f0:a9:4b:17:03:1d:df: c9:e5:b0:30:8c:05:47:16:1f:0d:2e:78:37:97:4f: 88:14:cb:da:7d:ab:66:14:cf:8f:da:53:ba:42:ca: 2a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:18:7E:80:CB:26:33:6C:B1:05:A5:B9:79:78:F1:F6:B6:B2:C1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv4: 199.192.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c7:f8:3f:c1:39:ef:c5:17:9b:25:76:6d:3e:1d:dc:51:7b: ab:51:a8:1a:dd:e5:18:0b:ef:eb:fb:13:8d:d8:32:31:be:77: d0:9b:33:57:7e:98:21:fd:ff:c3:2a:11:c6:46:fc:69:ff:de: 72:a9:ef:b9:3b:f1:3c:c5:2a:87:cf:5f:e4:e5:5e:b1:1e:20: 40:59:d1:a0:fd:69:b9:78:0c:86:1d:40:d0:50:ca:ec:04:f5: dc:e7:39:d5:a7:77:cc:ca:97:db:25:19:ae:5d:5e:87:94:3e: 8c:eb:88:3d:dd:c7:5c:38:fc:47:f1:d0:1c:c2:0d:e5:17:42: 88:c1:4e:d7:a2:d8:8e:f8:73:e0:a9:da:ef:9a:c8:c3:87:b7: 0a:3d:ff:c9:e1:1e:70:d3:8c:fb:f6:c4:ea:82:ff:06:cc:e0: 61:1d:b4:19:f2:b4:8c:4c:1e:4b:54:ce:94:94:14:5e:be:a7: eb:2e:64:60:b7:f1:7b:19:94:32:6b:0d:15:fd:8b:86:f8:01: b2:8f:52:ee:f4:a8:fd:f1:16:46:f3:e1:ec:25:8b:ee:19:56: 37:16:43:35:cf:1b:c7:ca:e9:f2:87:ec:8e:50:f3:b1:b4:6d: 4b:3f:73:99:4d:95:51:3e:96:c0:52:16:2a:63:13:3a:d8:25: 0b:29:82:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPWn5NxaCaCahIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk ZjNhNjdhZTYtZGQ5ZC00YThlLWJhODktZmI4NTk2MGExYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiptHo2wSucwvwgDPFUuQ6z+Mpyes5GbXNO8y qCnZih20Uf+JB+2LiaVyAyZ/USZKYin0erhcOAQm+XL9cV3yNSZmwxZfRlcYa1Re 0jFAB9MJ1QPbROc8cymkDvDJvexskUJUJwDPz0TaZV6u/Igh5tQO6/52oCPT28ft tLO6XjoAugPOVxvXsxqiavDgKf+awADSsIa8DWycG9KKe9ZXL8+utl7B6s1ZOsf/ qn443D4QCe39ruiWEnDGdHwe9jIbnq9k7M8iOyQx3yhYTj3D4VIchLeMlZDFz/Cp SxcDHd/J5bAwjAVHFh8NLng3l0+IFMvafatmFM+P2lO6Qsoq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0YfoDLJjNssQWluXl48fa2ssEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODdjOWM4NjYtZmFhMi0z ZDJiLThjNmEtOTQ3ZmJiYjU3NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8BgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbH+D/BOe/FF5sldm0+HdxRe6tRqBrd5RgL7+v7E43YMjG+d9CbM1d+ mCH9/8MqEcZG/Gn/3nKp77k78TzFKofPX+TlXrEeIEBZ0aD9abl4DIYdQNBQyuwE 9dznOdWnd8zKl9slGa5dXoeUPozriD3dx1w4/Efx0BzCDeUXQojBTtei2I74c+Cp 2u+ayMOHtwo9/8nhHnDTjPv2xOqC/wbM4GEdtBnytIxMHktUzpSUFF6+p+suZGC3 8XsZlDJrDRX9i4b4AbKPUu70qP3xFkbz4ewli+4ZVjcWQzXPG8fK6fKH7I5Q87G0 bUs/c5lNlVE+lsBSFipjEzrYJQspgmc= -----END CERTIFICATE-----Generated at Sun May 11 08:36:42 2025 by rpki-client