$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa File: f9a44f0e-35ca-3a7b-b848-b030707c3804.roa (raw, json) Hash identifier: mnwBA7PeoWYUBftx4DOIN50sh6wlP/lvhych027mJ8g= Subject key identifier: D1:56:0A:D5:2E:E3:2D:1D:BF:38:BB:2F:31:66:8B:2C:D4:8A:70:BC Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F43285849B9AA0813F59438C42F179EF0 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 192.171.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:08:13:f5:94:38:c4:2f:17:9e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=34d4539b-de38-490a-920a-69a40ae205cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:65:f2:ae:d3:d0:1d:83:e4:a9:d8:49:75: da:2e:23:78:e6:2a:86:39:78:54:14:cc:94:cb:55: 4e:a8:6b:cb:54:47:f6:d7:32:bb:96:b4:05:94:69: e5:19:c3:e7:e1:5b:4c:2d:34:b7:25:10:bc:f3:57: e0:f0:7e:05:bc:8f:7c:af:ac:bd:67:b9:06:34:bd: 49:45:39:79:15:5d:68:75:7c:e2:0d:e5:d3:ef:b6: 5c:15:a4:d3:1e:53:bc:33:d1:e4:ec:5d:5d:fe:26: 91:41:7a:00:df:cb:49:7f:1a:71:be:65:39:3f:9c: f9:39:c2:bc:a7:af:61:42:98:d0:6a:c0:6b:39:23: 68:d3:49:c3:d3:bd:c5:24:00:7a:bf:da:72:1c:51: 97:75:2a:76:67:5f:3d:83:a3:97:c8:c5:e7:1a:9c: 98:d4:34:0e:6b:16:43:82:37:76:11:74:ca:aa:bc: c9:db:0f:eb:16:58:ad:6c:f9:89:0f:b4:0f:10:83: ff:5e:a5:73:b0:7d:62:a6:47:12:7d:e7:b9:18:53: 4b:6d:6e:4a:e5:cc:0c:9f:5d:3c:34:f5:f3:dd:01: a5:76:53:bf:40:fe:be:fe:80:d5:94:d3:2e:06:f5: e9:a4:33:57:ec:c3:4a:96:13:d9:1a:d7:72:a9:56: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:0A:D5:2E:E3:2D:1D:BF:38:BB:2F:31:66:8B:2C:D4:8A:70:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 192.171.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:aa:33:93:e0:54:8a:13:11:56:db:6b:3d:54:a4:8f:2e:16: 04:8e:f8:60:6d:d6:83:82:1b:09:8e:04:78:ef:c8:33:08:61: c5:4f:e5:6f:f4:d6:a1:56:4c:d9:34:09:6e:2e:39:42:7b:09: 3e:cd:be:2a:1f:92:70:94:26:cf:1c:34:be:04:d8:d2:cc:3d: d0:7d:23:97:d3:69:6c:ba:22:aa:17:1c:86:22:8e:74:7c:47: c5:21:b5:1a:fd:53:eb:76:29:c5:7a:6f:f2:f9:c1:97:fe:0c: 46:8d:fe:e9:d4:7e:a6:39:01:ef:1f:cd:10:07:6c:b9:2f:aa: 04:dd:0f:6e:64:53:ce:15:a1:5d:44:d3:20:12:15:d8:8a:c2: ed:c0:d8:4a:a7:6c:6c:47:23:61:a7:00:5c:c9:f1:99:95:30: 22:a8:25:36:d3:df:e5:e9:9e:3f:72:29:96:f1:04:35:bd:5e: 72:39:22:87:54:a4:1a:4f:0e:7b:24:e4:29:d6:01:f0:ba:ea: 69:cf:87:c3:fc:6a:65:27:f2:fb:a3:4f:5e:67:13:5d:95:b1: 07:f2:20:eb:99:96:0b:80:18:e6:e0:f4:99:0e:44:83:a6:a9: 4b:3c:73:8a:54:b3:d0:cb:cc:dc:eb:c9:e5:76:e0:35:2a:75: 9d:da:3b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qggT9ZQ4xC8XnvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MzRkNDUzOWItZGUzOC00OTBhLTkyMGEtNjlhNDBhZTIwNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZtl8q7T0B2D5KnYSXXaLiN45iqGOXhUFMyU y1VOqGvLVEf21zK7lrQFlGnlGcPn4VtMLTS3JRC881fg8H4FvI98r6y9Z7kGNL1J RTl5FV1odXziDeXT77ZcFaTTHlO8M9Hk7F1d/iaRQXoA38tJfxpxvmU5P5z5OcK8 p69hQpjQasBrOSNo00nD073FJAB6v9pyHFGXdSp2Z189g6OXyMXnGpyY1DQOaxZD gjd2EXTKqrzJ2w/rFlitbPmJD7QPEIP/XqVzsH1ipkcSfee5GFNLbW5K5cwMn108 NPXz3QGldlO/QP6+/oDVlNMuBvXppDNX7MNKlhPZGtdyqVblHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFWCtUu4y0dvzi7LzFmiyzUinC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvZjlhNDRmMGUtMzVjYS0z YTdiLWI4NDgtYjAzMDcwN2MzODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwKsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeqM5PgVIoTEVbbaz1UpI8uFgSO+GBt1oOCGwmOBHjvyDMIYcVP5W/0 1qFWTNk0CW4uOUJ7CT7NviofknCUJs8cNL4E2NLMPdB9I5fTaWy6IqoXHIYijnR8 R8UhtRr9U+t2KcV6b/L5wZf+DEaN/unUfqY5Ae8fzRAHbLkvqgTdD25kU84VoV1E 0yASFdiKwu3A2EqnbGxHI2GnAFzJ8ZmVMCKoJTbT3+Xpnj9yKZbxBDW9XnI5IodU pBpPDnsk5CnWAfC66mnPh8P8amUn8vujT15nE12VsQfyIOuZlguAGObg9JkORIOm qUs8c4pUs9DLzNzryeV24DUqdZ3aO9o= -----END CERTIFICATE-----Generated at Mon May 5 12:30:46 2025 by rpki-client