$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa File: 534e5e03-5a54-38cc-a774-6d07f571b6a5.roa (raw, json) Hash identifier: EwK13+/ViS4V5Idlb69PAqZgcNqcArTn4hbcS73oE0o= Subject key identifier: 89:9F:B0:D3:A2:BC:53:6C:E4:FE:65:78:EE:23:50:F1:0F:28:98:34 Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F432858496E498BBCA8879672037DA200 Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 40545 IP address blocks: 199.190.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:8b:bc:a8:87:96:72:03:7d:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=4bc97c97-083c-4ba8-9b98-6a1eb8fbc172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:60:3d:b9:3a:ce:ff:0a:6f:39:9f:96:26: 3d:33:5d:a9:be:b6:47:91:9e:dc:09:96:f3:a9:57: 6d:f8:b5:57:34:b7:74:6e:b0:dc:fc:1e:dd:c9:77: 21:ac:42:d0:f0:02:06:d0:30:e1:f1:4e:54:20:56: 41:35:43:3f:d6:32:14:ac:78:49:78:1d:63:7a:9b: 56:a0:f4:bc:c0:06:1e:fc:a3:a5:a1:02:34:b8:bb: 18:b6:b3:a2:bc:64:5e:f9:8f:32:b5:87:73:8c:27: 10:09:7d:cd:e1:05:c5:1d:11:38:d1:be:b0:56:ca: 57:e2:9a:ed:ab:71:83:41:e8:6e:e6:74:8e:5c:3f: 40:a1:13:9f:57:e5:0e:15:ac:31:11:5d:d9:5d:a2: 95:32:92:a1:36:c0:24:c8:ea:88:4b:fb:3b:a0:69: 56:44:2d:a8:bd:e2:2d:92:a5:bb:24:8c:67:21:5b: b6:a4:8a:ed:42:0d:d2:9c:80:ff:71:5a:c1:70:63: 01:5c:48:c7:38:3f:6e:35:6a:7f:08:59:ed:90:c4: f8:f0:00:13:05:5e:81:ba:31:d0:81:2b:4b:7b:22: 4d:51:fc:c5:49:cb:1c:b8:c5:7e:23:8c:fc:2f:11: 10:09:d3:16:5a:2a:83:d9:c4:0a:7b:45:44:7c:4c: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9F:B0:D3:A2:BC:53:6C:E4:FE:65:78:EE:23:50:F1:0F:28:98:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 199.190.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5f:84:80:68:99:db:e7:44:53:11:15:d9:45:a5:9b:66:f2: bf:87:4c:ef:ca:5e:a9:c1:8b:db:8e:1a:25:b8:2a:b0:99:0e: 5f:56:19:17:02:a0:eb:f2:c8:f4:e5:91:92:b2:5d:4e:14:4f: f6:1a:55:8d:64:ea:0e:66:bf:47:be:60:f3:65:f2:79:b8:94: 70:20:95:4c:d8:28:31:10:cb:26:23:1b:3c:21:cf:97:31:33: 5a:29:9a:66:fb:0b:13:92:9b:e3:1d:2a:7e:d4:0e:62:6b:79: fe:3e:2c:c7:6d:83:4d:c9:0f:29:fe:53:9d:4a:9b:21:6a:08: 4d:80:52:dd:24:00:73:1a:bf:09:7b:e5:53:80:5e:f9:58:83: 8f:fe:b4:d9:31:1c:df:77:bf:ba:ef:50:28:b6:c4:46:2d:2d: 04:22:88:b3:cc:f1:2c:61:86:5a:99:3f:8e:a5:61:a7:a0:ba: 7d:c1:65:64:f2:32:a1:22:c1:4a:66:08:ef:14:2c:60:b8:36: 3e:9f:fa:70:d2:26:fb:8e:62:ad:37:e8:d1:f8:02:da:63:13: 93:fd:d4:b6:51:cb:70:d7:7b:8c:97:ab:f6:84:f5:23:24:96: e7:34:57:ba:c2:a4:d7:ab:2c:3b:f5:92:3a:7d:65:ac:09:a5: 1e:c8:d4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYu8qIeWcgN9ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk NGJjOTdjOTctMDgzYy00YmE4LTliOTgtNmExZWI4ZmJjMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9NgPbk6zv8KbzmfliY9M12pvrZHkZ7cCZbz qVdt+LVXNLd0brDc/B7dyXchrELQ8AIG0DDh8U5UIFZBNUM/1jIUrHhJeB1jeptW oPS8wAYe/KOloQI0uLsYtrOivGRe+Y8ytYdzjCcQCX3N4QXFHRE40b6wVspX4prt q3GDQehu5nSOXD9AoROfV+UOFawxEV3ZXaKVMpKhNsAkyOqIS/s7oGlWRC2oveIt kqW7JIxnIVu2pIrtQg3SnID/cVrBcGMBXEjHOD9uNWp/CFntkMT48AATBV6BujHQ gStLeyJNUfzFScscuMV+I4z8LxEQCdMWWiqD2cQKe0VEfEzEnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImfsNOivFNs5P5leO4jUPEPKJg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvNTM0ZTVlMDMtNWE1NC0z OGNjLWE3NzQtNmQwN2Y1NzFiNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx77EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1fhIBomdvnRFMRFdlFpZtm8r+HTO/KXqnBi9uOGiW4KrCZDl9WGRcC oOvyyPTlkZKyXU4UT/YaVY1k6g5mv0e+YPNl8nm4lHAglUzYKDEQyyYjGzwhz5cx M1opmmb7CxOSm+MdKn7UDmJref4+LMdtg03JDyn+U51KmyFqCE2AUt0kAHMavwl7 5VOAXvlYg4/+tNkxHN93v7rvUCi2xEYtLQQiiLPM8SxhhlqZP46lYaegun3BZWTy MqEiwUpmCO8ULGC4Nj6f+nDSJvuOYq036NH4AtpjE5P91LZRy3DXe4yXq/aE9SMk luc0V7rCpNerLDv1kjp9ZawJpR7I1Nk= -----END CERTIFICATE-----Generated at Sat May 10 13:29:33 2025 by rpki-client