$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa File: dd3f5672-56e3-308a-a96f-4014a9782301.roa (raw, json) Hash identifier: 7JkYIbR7RvrhJIVpVEX5VeQ4uFKgkOPeoEBZc1j2JG4= Subject key identifier: D5:DA:92:81:84:9C:54:39:A3:47:14:21:3D:DB:9B:0D:15:FC:8E:51 Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F432858498664198163B85C6EBECE2300 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa Signing time: Mon 14 Apr 2025 16:13:50 +0000 ROA not before: Mon 14 Apr 2025 16:13:50 +0000 ROA not after: Sun 13 Jul 2025 16:13:50 +0000 asID: 30211 IP address blocks: 192.161.68.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:64:19:81:63:b8:5c:6e:be:ce:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Apr 14 16:13:50 2025 GMT Not After : Jul 13 16:13:50 2025 GMT Subject: CN=3831e919-e588-4be2-b355-46193a6d9c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:74:9d:d8:72:41:7c:0d:e9:13:f1:a3:17: 5a:ee:aa:b4:4f:57:f8:8c:e3:73:94:d3:3c:97:4d: b7:48:f4:72:9e:d0:f4:5b:9a:8a:35:4d:47:0d:ca: 6c:a2:67:44:04:ae:a2:fc:a6:4b:1f:98:e4:8c:e5: b3:64:9d:f6:ce:6d:39:99:78:a5:fa:da:12:cc:f6: fc:69:35:8d:44:21:c7:04:36:d2:f7:09:95:d5:37: e7:c1:da:57:87:7f:f3:42:ac:bd:5d:ae:0c:b5:e5: 90:8a:06:e8:fe:f1:ce:80:1c:58:48:6e:b7:f7:8f: ac:9d:3a:fa:0e:0c:05:b6:35:7c:f2:0c:48:c1:53: a7:f8:1a:21:e3:c9:8b:82:d5:ae:1b:ba:82:b7:c8: 2e:8c:6d:d9:b1:ac:e7:e7:ad:20:f8:37:1b:fe:db: 36:c8:ae:d2:ba:02:8c:a2:01:9f:71:39:b2:54:cd: 45:f1:dc:7b:29:86:69:80:19:d1:9b:a5:cb:6e:e0: c6:8d:b6:79:ac:38:3b:36:e8:2b:80:d7:8c:26:37: 41:38:64:26:8d:01:26:de:6f:3f:e8:f8:db:1f:d0: af:cd:bd:32:60:4c:05:1b:92:13:dd:ae:70:4b:63: 84:c1:bc:25:41:df:63:e5:6e:d6:76:d5:f5:4e:1f: a1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DA:92:81:84:9C:54:39:A3:47:14:21:3D:DB:9B:0D:15:FC:8E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv4: 192.161.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:13:73:cf:e3:b4:1e:83:f9:54:51:bc:73:4a:0f:7d:70:c2: f1:8b:c0:60:c6:0e:a5:29:21:4d:8a:d1:b6:4e:50:36:69:29: db:82:1d:f2:84:42:33:45:23:b2:ff:10:0e:85:c0:61:57:c3: eb:10:fc:51:4f:a2:0b:f7:55:f9:39:cf:f7:37:70:d3:20:14: 2e:2c:af:49:4e:a0:1e:9f:4e:0d:d1:9f:d6:ea:93:84:f4:64: 55:a6:60:18:53:e1:97:49:31:dd:ce:a6:f4:4f:f0:e1:ac:7d: de:c8:32:4b:03:9b:e9:40:76:24:36:b6:25:db:56:cb:bf:d0: 0c:56:38:73:a3:11:ba:5d:99:de:20:55:70:c3:84:94:26:3e: 33:14:c3:15:c5:66:8c:5a:04:28:c1:f9:0c:ac:24:f4:c6:7a: 4f:00:62:34:bd:67:3e:05:cb:4b:ca:96:61:9a:0e:6a:0e:48: 76:84:6d:e1:75:76:ec:f4:1f:75:9f:50:bc:4f:1f:0c:3c:07: f7:64:2f:d8:7d:9c:c0:2b:f6:67:b5:f3:dc:ed:69:97:f1:9b: 62:a5:57:72:0b:86:a4:56:aa:1a:87:8d:d4:04:5e:49:7e:b7: a1:e8:6c:67:ad:58:3b:4d:1a:d0:c6:48:e3:4a:be:50:52:64: f7:d5:4b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGZBmBY7hcbr7OIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI1MDQxNDE2MTM1MFoXDTI1MDcxMzE2MTM1MFowLzEtMCsGA1UEAxMk MzgzMWU5MTktZTU4OC00YmUyLWIzNTUtNDYxOTNhNmQ5YzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYh0ndhyQXwN6RPxoxda7qq0T1f4jONzlNM8 l023SPRyntD0W5qKNU1HDcpsomdEBK6i/KZLH5jkjOWzZJ32zm05mXil+toSzPb8 aTWNRCHHBDbS9wmV1TfnwdpXh3/zQqy9Xa4MteWQigbo/vHOgBxYSG6394+snTr6 DgwFtjV88gxIwVOn+Boh48mLgtWuG7qCt8gujG3Zsazn560g+Dcb/ts2yK7SugKM ogGfcTmyVM1F8dx7KYZpgBnRm6XLbuDGjbZ5rDg7NugrgNeMJjdBOGQmjQEm3m8/ 6PjbH9Cvzb0yYEwFG5IT3a5wS2OEwbwlQd9j5W7WdtX1Th+hEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXakoGEnFQ5o0cUIT3bmw0V/I5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvZGQzZjU2NzItNTZlMy0z MDhhLWE5NmYtNDAxNGE5NzgyMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFETc8/jtB6D+VRRvHNKD31wwvGLwGDGDqUpIU2K0bZOUDZpKduCHfKE QjNFI7L/EA6FwGFXw+sQ/FFPogv3Vfk5z/c3cNMgFC4sr0lOoB6fTg3Rn9bqk4T0 ZFWmYBhT4ZdJMd3OpvRP8OGsfd7IMksDm+lAdiQ2tiXbVsu/0AxWOHOjEbpdmd4g VXDDhJQmPjMUwxXFZoxaBCjB+QysJPTGek8AYjS9Zz4Fy0vKlmGaDmoOSHaEbeF1 duz0H3WfULxPHww8B/dkL9h9nMAr9me189ztaZfxm2KlV3ILhqRWqhqHjdQEXkl+ t6HobGetWDtNGtDGSONKvlBSZPfVSwY= -----END CERTIFICATE-----Generated at Tue May 13 00:27:55 2025 by rpki-client