$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa File: f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa (raw, json) Hash identifier: dM24fvzUC/Z/auCZQDjWfiddlZ8iBt6tJXwiMzNnwVY= Subject key identifier: F5:5C:A9:A9:43:86:6A:9D:3A:C4:AA:A9:B2:83:D9:71:45:08:6B:BB Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658 Certificate serial: 010D0C9F43285849BDDA1FAEDEE951399E3F5C00 Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 8987 IP address blocks: 192.16.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:1f:ae:de:e9:51:39:9e:3f:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=36802e66-8183-4a0b-aacf-8ce5ee9b6ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:d2:51:e5:89:ad:9a:03:e0:3a:2e:df:5a: 0b:a6:ad:8b:d9:58:82:dd:69:b1:66:f0:18:78:00: 3b:7f:b7:19:2e:a6:08:5c:9b:7c:60:f8:66:a6:d6: d1:83:08:b0:1f:00:4a:b7:64:b0:7b:fa:ed:47:a5: fa:b3:48:d9:37:c6:08:9e:82:e9:8c:b1:30:07:1b: 5c:1b:da:e2:29:b5:bf:7e:3d:69:1f:7a:67:e3:3d: 1c:9d:54:1c:a8:02:25:d4:8b:f2:34:a0:b5:41:45: c2:6f:27:c1:73:79:ba:9c:16:bc:6f:62:ac:03:e5: 13:6f:3a:14:56:93:b9:ee:df:0d:a6:e8:7e:58:cd: 10:7c:95:59:85:1f:c5:c8:bf:9d:82:2c:c4:c9:11: cc:6d:6e:24:fc:39:d4:93:d1:f3:2c:74:dd:21:c3: 15:0b:47:a3:d3:93:73:c0:de:d6:9d:76:39:d8:48: 80:02:e1:7b:05:d1:06:6e:0f:a3:09:55:b3:81:4b: af:1e:73:d3:38:f4:cf:ad:5a:53:7e:e8:ed:5e:e8: 79:9d:db:99:6e:77:ca:db:a7:d7:27:b6:f9:ab:63: 9e:ba:3f:78:84:a7:d3:31:63:39:55:f1:8c:53:ae: b1:57:34:bf:e8:c9:c8:b9:7f:c5:f7:c4:79:42:c9: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5C:A9:A9:43:86:6A:9D:3A:C4:AA:A9:B2:83:D9:71:45:08:6B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl X509v3 Authority Key Identifier: keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer sbgp-ipAddrBlock: critical IPv4: 192.16.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a5:ec:b4:8e:51:b2:94:81:07:cd:e8:d4:3b:3c:59:6b:8e: 39:00:4c:72:59:0f:1b:c9:e6:af:5f:fe:f0:5f:b4:4b:17:32: 55:e7:b3:d5:e1:72:b4:56:52:fc:59:73:be:19:eb:2d:da:39: a2:65:be:58:f7:64:10:23:b4:e2:2f:6b:79:4b:d9:82:49:5e: 19:35:5c:36:95:f4:3a:a3:0a:ff:2a:c4:9b:60:18:29:09:37: 5a:3c:bf:15:e1:a2:89:f3:ff:71:96:a1:3b:d8:87:9a:6b:d6: 48:f4:a4:44:48:43:a6:94:d9:94:07:36:99:d5:b2:ae:0e:02: 05:e6:8c:49:19:46:0c:ce:98:f0:0f:c3:06:99:43:14:fc:81: 82:37:74:92:d0:f1:b7:f5:99:0f:1f:45:9d:d1:62:d3:cc:a4: ee:5f:e6:0a:68:ab:e1:43:a5:01:96:26:e6:2b:a2:96:b5:91: 5f:8e:9b:56:4d:d4:d0:ce:8c:6c:ff:5b:09:af:06:7f:9a:f2: 84:12:73:8e:96:98:3c:94:6b:7c:cb:ff:57:b6:9a:bc:63:3f: 52:ab:47:9e:51:7a:6f:47:7f:f1:02:d4:09:79:25:c1:c5:4f: 63:85:6d:9c:8e:48:69:49:38:19:8a:56:1d:89:de:61:aa:80: d5:9d:c7:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92h+u3ulROZ4/XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0 NjU4MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MzY4MDJlNjYtODE4My00YTBiLWFhY2YtOGNlNWVlOWI2ZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ3SUeWJrZoD4Dou31oLpq2L2ViC3WmxZvAY eAA7f7cZLqYIXJt8YPhmptbRgwiwHwBKt2Swe/rtR6X6s0jZN8YInoLpjLEwBxtc G9riKbW/fj1pH3pn4z0cnVQcqAIl1IvyNKC1QUXCbyfBc3m6nBa8b2KsA+UTbzoU VpO57t8Npuh+WM0QfJVZhR/FyL+dgizEyRHMbW4k/DnUk9HzLHTdIcMVC0ej05Nz wN7WnXY52EiAAuF7BdEGbg+jCVWzgUuvHnPTOPTPrVpTfujtXuh5nduZbnfK26fX J7b5q2Oeuj94hKfTMWM5VfGMU66xVzS/6MnIuX/F98R5Qsm1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVcqalDhmqdOsSqqbKD2XFFCGu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvZjk2NTZiMmYtNmRkMC0z MTNjLWJhZWEtNGVlOTNiOGUyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3 OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3 NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz ZTdlNzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+l7LSOUbKUgQfN6NQ7PFlrjjkATHJZDxvJ5q9f/vBftEsXMlXns9Xh crRWUvxZc74Z6y3aOaJlvlj3ZBAjtOIva3lL2YJJXhk1XDaV9DqjCv8qxJtgGCkJ N1o8vxXhoonz/3GWoTvYh5pr1kj0pERIQ6aU2ZQHNpnVsq4OAgXmjEkZRgzOmPAP wwaZQxT8gYI3dJLQ8bf1mQ8fRZ3RYtPMpO5f5gpoq+FDpQGWJuYropa1kV+Om1ZN 1NDOjGz/WwmvBn+a8oQSc46WmDyUa3zL/1e2mrxjP1KrR55Rem9Hf/EC1Al5JcHF T2OFbZyOSGlJOBmKVh2J3mGqgNWdx5w= -----END CERTIFICATE-----Generated at Tue May 6 15:35:46 2025 by rpki-client