$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8fb7df9-7b7d-3e40-8ac6-2ef1ed86d742.roa File: d8fb7df9-7b7d-3e40-8ac6-2ef1ed86d742.roa (raw, json) Hash identifier: N8Cc4P2CahfPmmsgM9ZMFKgbKSstVBKCS80sRPeHKJY= Subject key identifier: 31:0B:51:9D:91:FB:A5:50:CD:22:B6:BB:0C:3E:A8:BF:D3:96:9A:42 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F87A8B9590ADE7799652CD00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8fb7df9-7b7d-3e40-8ac6-2ef1ed86d742.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 20940 IP address blocks: 192.204.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8b:95:90:ad:e7:79:96:52:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=493fc975-baa8-46f2-8368-4ae15cf07897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:ed:a6:44:26:a2:01:90:2e:8b:ad:48:63: ef:c9:58:4a:67:82:6f:19:bf:6c:6b:b2:a2:b6:0a: ca:9e:76:74:bc:a6:66:34:41:3a:13:df:19:6b:8c: 6b:b8:cb:c5:ad:c7:bb:d9:1f:6e:f8:11:1d:b1:2c: 63:85:11:a3:9b:87:e8:a4:d4:23:c5:df:dd:18:e9: 0d:46:65:06:24:f0:12:d1:d4:cd:7d:4c:14:a0:01: 9c:a8:58:35:46:5e:0b:43:c1:7e:20:f5:0e:b1:4c: 5f:b0:97:ec:42:33:91:97:d2:a1:5f:45:0b:26:81: e6:84:aa:f3:93:be:6a:72:25:24:6e:ec:6b:aa:7e: c8:a4:cb:2d:40:cd:e6:69:31:0b:eb:f8:ee:0d:62: f7:09:0b:6b:5e:b1:2e:82:b6:bb:52:6f:a4:42:66: 6a:5c:25:ba:ca:b7:73:3b:13:d3:05:83:48:96:c3: cd:5d:70:99:e8:37:ad:65:53:80:df:31:8b:30:a2: bf:1a:73:44:2f:08:26:3f:9d:55:a5:df:6a:6e:31: 8e:be:fa:9e:07:a1:92:46:e4:a1:f4:4d:ea:2d:2c: 84:ee:58:88:1c:60:c6:fd:0a:1f:0a:a0:dc:df:08: 78:5f:62:3c:82:f8:2b:44:84:aa:43:84:5c:30:66: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0B:51:9D:91:FB:A5:50:CD:22:B6:BB:0C:3E:A8:BF:D3:96:9A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8fb7df9-7b7d-3e40-8ac6-2ef1ed86d742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.204.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:33:60:04:ac:a7:e7:3d:2c:11:20:e4:b9:21:68:32:66:d8: 32:52:70:07:a5:e8:01:40:5c:16:2d:47:14:68:bd:16:47:54: 1b:1c:76:96:d9:1f:6a:8d:5d:6b:ae:38:19:b2:2f:0b:71:44: 74:56:5b:aa:de:cb:bb:93:f5:a9:da:1d:5a:70:de:f4:d1:be: 7e:34:84:b1:56:99:03:8b:c9:52:34:03:ce:9c:ea:34:80:24: 96:28:4c:72:e4:0e:14:fd:de:42:a6:9d:20:04:43:ae:88:1f: a2:60:29:a8:cf:81:10:a1:7f:f8:a3:6c:fd:68:9d:e2:4e:a8: 2a:c1:f6:e2:30:53:dd:2f:28:6c:34:3f:4b:99:6b:b8:a1:d9: a3:e4:63:4b:6d:b6:51:d6:14:c8:b2:1d:0a:9d:64:98:05:da: f3:72:d4:1a:b6:78:68:77:b0:7f:b0:e1:21:f4:d2:83:9f:db: 51:e6:31:42:e2:79:10:d1:cb:da:22:31:6f:6e:13:da:6c:ec: ab:6d:97:f9:5c:9b:99:78:68:26:94:e7:6d:96:92:5d:56:e2: 13:a5:84:64:a9:64:c2:9d:27:7c:ba:98:fc:27:84:22:e2:22: e8:36:73:81:a4:ee:99:5f:b2:95:e6:97:d6:cb:14:f2:41:ac: 59:0d:ff:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eouVkK3neZZSzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NDkzZmM5NzUtYmFhOC00NmYyLTgzNjgtNGFlMTVjZjA3ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAntpkQmogGQLoutSGPvyVhKZ4JvGb9sa7Ki tgrKnnZ0vKZmNEE6E98Za4xruMvFrce72R9u+BEdsSxjhRGjm4fopNQjxd/dGOkN RmUGJPAS0dTNfUwUoAGcqFg1Rl4LQ8F+IPUOsUxfsJfsQjORl9KhX0ULJoHmhKrz k75qciUkbuxrqn7IpMstQM3maTEL6/juDWL3CQtrXrEugra7Um+kQmZqXCW6yrdz OxPTBYNIlsPNXXCZ6DetZVOA3zGLMKK/GnNELwgmP51Vpd9qbjGOvvqeB6GSRuSh 9E3qLSyE7liIHGDG/QofCqDc3wh4X2I8gvgrRISqQ4RcMGZHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDELUZ2R+6VQzSK2uww+qL/TlppCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDhmYjdkZjktN2I3ZC0z ZTQwLThhYzYtMmVmMWVkODZkNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMwFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMzYASsp+c9LBEg5LkhaDJm2DJScAel6AFAXBYtRxRovRZHVBscdpbZ H2qNXWuuOBmyLwtxRHRWW6rey7uT9anaHVpw3vTRvn40hLFWmQOLyVI0A86c6jSA JJYoTHLkDhT93kKmnSAEQ66IH6JgKajPgRChf/ijbP1oneJOqCrB9uIwU90vKGw0 P0uZa7ih2aPkY0tttlHWFMiyHQqdZJgF2vNy1Bq2eGh3sH+w4SH00oOf21HmMULi eRDRy9oiMW9uE9ps7Kttl/lcm5l4aCaU522Wkl1W4hOlhGSpZMKdJ3y6mPwnhCLi Iug2c4Gk7plfspXml9bLFPJBrFkN/34= -----END CERTIFICATE-----Generated at Sun Jun 15 18:52:05 2025 by rpki-client