$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa File: 011c8cd8-281d-317c-b66f-0fe8c16e848a.roa (raw, json) Hash identifier: 3/kuFHYIkHt+sZletMD3w4T+aDHenfSTMmtYokgWflM= Subject key identifier: AF:9B:BC:52:E0:E6:CC:B2:4F:ED:05:D2:2A:44:F0:18:5B:B6:0D:67 Certificate issuer: /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Certificate serial: 010D0C9F432858499294A0ADFFBCDA59A69FA940 Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 11472 IP address blocks: 208.65.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a0:ad:ff:bc:da:59:a6:9f:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=989af3b7-69cb-4a45-a1a7-a481eba1d3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:9f:29:be:1b:c6:a7:36:10:34:ba:cf:d7: da:8c:c6:a6:56:14:41:73:58:77:93:d6:e3:11:8f: 02:68:88:b8:6a:6a:5d:0e:3b:e4:08:16:67:a9:a6: 83:d5:98:a7:6c:06:c0:95:39:4d:36:ac:c5:7b:95: 56:5e:2b:d0:8a:b5:5f:52:3c:56:c8:5c:0e:85:42: bb:b6:dc:e9:bb:82:5c:78:cc:94:96:ed:fe:e2:f1: bc:e5:02:ca:73:fb:cf:58:6a:c3:c5:d1:e8:b9:08: 66:16:fa:cd:22:75:f2:fd:01:6b:20:b1:71:3b:27: 3d:26:92:71:5b:d4:ed:b6:32:0c:7c:82:0f:c9:81: b5:bb:7b:27:e9:f4:e1:db:0c:c5:2d:cc:3d:64:c0: 0e:9b:47:81:bf:7e:a4:ca:94:08:82:7a:60:91:92: a0:87:26:64:77:02:78:98:93:05:06:b8:81:3e:e5: f2:12:7a:8a:eb:31:33:9a:71:a9:54:42:ba:29:0f: 7f:47:1d:1b:48:e1:81:99:02:2d:90:b6:67:b6:64: 6b:76:55:79:a5:45:55:74:5c:22:48:e3:55:a3:dd: 6e:8c:ca:02:71:11:e2:63:01:c6:12:41:67:88:86: c7:4d:84:94:43:f5:bb:a7:f8:7f:4c:3c:ba:b4:9b: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9B:BC:52:E0:E6:CC:B2:4F:ED:05:D2:2A:44:F0:18:5B:B6:0D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl X509v3 Authority Key Identifier: keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer sbgp-ipAddrBlock: critical IPv4: 208.65.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0d:cc:d5:0b:37:94:a5:92:67:14:58:d5:4f:52:55:80:6c: db:0f:d3:31:b9:cb:12:5c:1d:dc:e9:b3:64:92:56:92:87:76: 43:cf:3e:53:ca:34:82:bf:b2:c6:a8:f8:d7:5e:6a:f0:aa:92: ff:56:4d:8a:b7:af:d7:2b:d3:78:68:6e:43:32:3e:c8:63:02: 94:49:fb:3a:be:c9:e6:8b:b2:06:20:ec:50:86:8c:4d:6d:d3: 79:02:50:14:15:49:c4:68:65:8b:4a:ba:ae:26:6a:f7:dc:5c: 2c:16:28:54:a0:ed:8b:59:98:a3:aa:a5:e3:19:78:b8:98:4d: 5b:da:88:26:b2:af:58:e0:9a:bf:f1:27:d4:9e:3e:ff:5f:99: 86:80:cc:c1:80:61:17:87:2b:b7:52:d8:b3:db:cf:21:83:e1: 54:e5:cb:d3:7d:e6:03:21:64:52:3c:8d:0e:16:de:02:33:01: 78:a6:0d:37:b9:c5:7a:08:9d:8f:e9:dd:57:e6:c7:b4:24:93: 78:7e:d8:5d:b5:8a:80:91:32:b5:ab:54:74:d6:19:e1:2d:99: e0:4c:22:8b:87:2f:13:5d:bc:27:be:fb:df:59:8b:c3:b0:e0: 9f:25:90:d4:81:3a:d4:4e:ef:35:e0:3d:db:cb:ff:23:b5:b5: f7:f8:af:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKCt/7zaWaafqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy NTNiMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk OTg5YWYzYjctNjljYi00YTQ1LWExYTctYTQ4MWViYTFkM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0OfKb4bxqc2EDS6z9fajMamVhRBc1h3k9bj EY8CaIi4ampdDjvkCBZnqaaD1ZinbAbAlTlNNqzFe5VWXivQirVfUjxWyFwOhUK7 ttzpu4JceMyUlu3+4vG85QLKc/vPWGrDxdHouQhmFvrNInXy/QFrILFxOyc9JpJx W9TttjIMfIIPyYG1u3sn6fTh2wzFLcw9ZMAOm0eBv36kypQIgnpgkZKghyZkdwJ4 mJMFBriBPuXyEnqK6zEzmnGpVEK6KQ9/Rx0bSOGBmQItkLZntmRrdlV5pUVVdFwi SONVo91ujMoCcRHiYwHGEkFniIbHTYSUQ/W7p/h/TDy6tJuJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+bvFLg5syyT+0F0ipE8Bhbtg1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0 YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvMDExYzhjZDgtMjgxZC0z MTdjLWI2NmYtMGZlOGMxNmU4NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1 YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1 YzU3MTI1M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQNzNULN5SlkmcUWNVPUlWAbNsP0zG5yxJcHdzps2SSVpKHdkPPPlPK NIK/ssao+NdeavCqkv9WTYq3r9cr03hobkMyPshjApRJ+zq+yeaLsgYg7FCGjE1t 03kCUBQVScRoZYtKuq4mavfcXCwWKFSg7YtZmKOqpeMZeLiYTVvaiCayr1jgmr/x J9SePv9fmYaAzMGAYReHK7dS2LPbzyGD4VTly9N95gMhZFI8jQ4W3gIzAXimDTe5 xXoInY/p3Vfmx7Qkk3h+2F21ioCRMrWrVHTWGeEtmeBMIouHLxNdvCe++99Zi8Ow 4J8lkNSBOtRO7zXgPdvL/yO1tff4r8k= -----END CERTIFICATE-----Generated at Sat May 10 08:36:19 2025 by rpki-client