$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa File: 3d492e08-a473-35f6-83a9-8895fc07259c.roa (raw, json) Hash identifier: 3Lo6NdSTFUp00z1CzOARmP99hDgEFrveA0TIH4ygoZw= Subject key identifier: 39:9D:AA:79:2D:79:EB:6A:2E:2A:61:AB:20:67:5B:71:62:6A:0F:54 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F43285849C79F60FFAD92B67D4BCD72B8 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 55178 IP address blocks: 192.230.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:60:ff:ad:92:b6:7d:4b:cd:72:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=3b841266-e20e-436f-b69f-eb09fbf79041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:8d:87:e2:8c:61:5f:16:33:d0:59:67:d2: 46:16:be:a7:66:d2:5f:88:aa:c9:99:78:f6:cf:c1: 3d:2f:56:51:f4:7f:e2:52:5c:e4:9a:77:6d:64:f4: 70:f7:58:50:08:37:be:ed:e6:93:0a:fa:32:5d:29: 02:c1:81:5b:45:2d:d7:86:1c:5c:27:76:26:60:7f: 2f:b7:33:65:ba:ad:cb:5b:1e:37:e7:ae:e1:66:7e: 16:af:4d:d5:28:1e:a6:10:15:f5:a8:78:9b:67:43: ee:af:87:19:bd:d0:d8:c6:29:d3:1f:d7:53:3c:af: 67:20:2f:fb:24:e3:58:2f:1c:1b:b7:0a:03:86:a1: b9:06:fa:00:aa:2e:66:37:e6:60:69:30:d4:15:f6: 40:dd:d7:bf:c5:d5:de:3f:cf:7c:b2:05:f9:4b:78: fe:6e:0b:67:7c:c5:c7:9a:71:f2:5e:93:66:11:93: b0:d3:e2:9d:25:8f:89:b3:a8:28:08:75:11:3e:83: 59:09:45:f2:20:6c:32:d4:2f:98:f5:f3:78:fc:bf: 6e:cc:c1:17:da:bd:d4:63:07:05:d8:19:be:a9:b2: 23:df:bd:ed:4a:47:c1:91:70:21:bc:26:f6:a0:43: 47:a2:77:c2:f1:01:18:f1:8d:d8:ef:71:f1:6d:6d: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9D:AA:79:2D:79:EB:6A:2E:2A:61:AB:20:67:5B:71:62:6A:0F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:5d:bc:36:8b:1c:a9:43:09:bf:48:35:ee:77:71:aa:cd:c7: 27:44:75:a1:c2:aa:2d:cf:e0:20:2e:bf:49:4b:b5:ec:ea:56: e6:82:e4:e4:d7:84:b0:94:38:dd:44:19:b0:ca:79:e2:77:a9: c4:5b:62:14:1e:d5:f0:fc:e8:22:be:f0:9f:34:d6:b1:b5:ec: 99:d3:3c:f2:66:64:cc:99:d7:81:74:e6:dc:dc:47:bb:1f:26: b4:0f:0f:a6:a1:d4:11:37:d0:b0:0f:1e:69:c3:b6:2f:5e:2b: e0:16:0f:30:a4:97:81:f1:c1:0b:ce:44:52:21:b6:aa:19:f0: 80:fb:39:51:4e:1d:2b:72:f6:c6:a0:a2:ae:cd:4a:eb:10:75: 2d:d6:c3:b3:a4:1d:49:4c:35:26:39:80:27:1a:9e:9d:96:e3: 0e:a2:80:df:49:43:c3:67:0d:b6:ce:8f:b8:23:74:b7:3a:a0: bd:d8:9d:7b:4a:01:0c:65:34:71:63:54:e1:d6:ce:ac:1e:8b: 92:fc:6c:e1:04:3a:66:d1:c9:d4:f8:48:ab:8d:5d:da:6a:68: 84:6f:da:7c:d9:16:dc:d7:01:f1:80:3d:d1:db:c4:14:af:7e: 82:a9:b0:4a:63:02:38:37:47:30:7f:1e:2b:73:0f:80:6f:f5: 4f:d5:03:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2D/rZK2fUvNcrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk M2I4NDEyNjYtZTIwZS00MzZmLWI2OWYtZWIwOWZiZjc5MDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlGNh+KMYV8WM9BZZ9JGFr6nZtJfiKrJmXj2 z8E9L1ZR9H/iUlzkmndtZPRw91hQCDe+7eaTCvoyXSkCwYFbRS3XhhxcJ3YmYH8v tzNluq3LWx43567hZn4Wr03VKB6mEBX1qHibZ0Pur4cZvdDYxinTH9dTPK9nIC/7 JONYLxwbtwoDhqG5BvoAqi5mN+ZgaTDUFfZA3de/xdXeP898sgX5S3j+bgtnfMXH mnHyXpNmEZOw0+KdJY+Js6goCHURPoNZCUXyIGwy1C+Y9fN4/L9uzMEX2r3UYwcF 2Bm+qbIj373tSkfBkXAhvCb2oENHonfC8QEY8Y3Y73HxbW35NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmdqnkteetqLiphqyBnW3Fiag9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvM2Q0OTJlMDgtYTQ3My0z NWY2LTgzYTktODg5NWZjMDcyNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFdvDaLHKlDCb9INe53carNxydEdaHCqi3P4CAuv0lLtezqVuaC5OTX hLCUON1EGbDKeeJ3qcRbYhQe1fD86CK+8J801rG17JnTPPJmZMyZ14F05tzcR7sf JrQPD6ah1BE30LAPHmnDti9eK+AWDzCkl4HxwQvORFIhtqoZ8ID7OVFOHSty9sag oq7NSusQdS3Ww7OkHUlMNSY5gCcanp2W4w6igN9JQ8NnDbbOj7gjdLc6oL3YnXtK AQxlNHFjVOHWzqwei5L8bOEEOmbRydT4SKuNXdpqaIRv2nzZFtzXAfGAPdHbxBSv foKpsEpjAjg3RzB/HitzD4Bv9U/VA6I= -----END CERTIFICATE-----Generated at Sat May 10 03:48:33 2025 by rpki-client