$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa File: 8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa (raw, json) Hash identifier: XqXqbivdGyZY5o34gv1MvT2GYaDgl6ubAhOce53StCA= Subject key identifier: BE:9B:44:8F:B0:77:DA:45:09:39:EE:71:D0:55:CF:FB:08:6B:1F:79 Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Certificate serial: 010D0C9F432858498CFF166DA0C9295DF72D4694 Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 10497 IP address blocks: 192.86.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:16:6d:a0:c9:29:5d:f7:2d:46:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=a93fab47-d1da-45cf-b818-7cbb3e66278c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8d:a1:9a:45:e7:d4:b2:b5:c3:b2:ca:ee:62: fc:48:11:8c:0f:b7:2f:69:39:c0:18:d8:5e:bc:7e: 21:aa:90:f3:07:dc:21:9c:1f:48:70:2c:a3:08:02: d1:c0:6a:30:ae:16:9c:c0:fd:41:74:86:18:d3:8c: fa:04:be:16:00:cd:5c:a8:01:bf:ec:2a:ee:46:ff: 4d:52:3d:c8:ee:a4:6c:32:dd:e6:a5:d3:1b:ba:54: e4:f3:ee:d9:6a:02:c5:7d:5c:83:3e:0b:51:1f:6c: 53:3a:c5:34:ae:11:01:89:9d:1a:6b:87:27:48:7c: be:93:14:67:e1:b2:2d:df:40:93:cd:91:dd:53:28: 06:a4:90:b9:45:f5:83:00:e3:63:aa:85:d4:a4:16: 1e:d2:80:b8:c4:05:98:ae:29:b5:50:d2:e7:f4:72: 50:50:fb:b7:81:2b:32:63:f1:95:d4:14:24:5a:2c: 56:09:21:6e:c9:4a:14:6c:b0:ec:4e:80:58:60:f3: 6c:53:41:4b:f1:35:79:d4:12:82:e3:39:1d:52:9f: 87:84:d6:c4:b7:d9:18:66:40:cc:d2:c0:99:8f:0e: d1:79:2c:b0:f9:78:f2:ff:60:58:12:2b:bf:f9:8a: 36:74:4d:72:29:66:f2:02:b0:fe:c0:1b:21:a9:e3: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9B:44:8F:B0:77:DA:45:09:39:EE:71:D0:55:CF:FB:08:6B:1F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl X509v3 Authority Key Identifier: keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer sbgp-ipAddrBlock: critical IPv4: 192.86.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:27:be:4a:cd:5f:3b:76:ac:9c:94:e6:9c:d7:83:d8:c9:04: 0e:a3:d5:0e:a5:95:7a:88:f2:39:46:ff:e4:26:a0:7d:c9:2d: ba:b5:ad:cd:18:fb:86:af:fc:a1:7d:61:ec:7b:20:86:e4:03: 74:6d:d2:75:2b:8b:89:e6:e3:28:52:17:40:97:24:98:a1:0e: 94:c3:2a:d0:fa:ea:c6:44:a7:25:af:0d:9e:6a:14:b7:87:c7: 3d:2a:14:7e:4e:b8:c0:59:0d:7c:9f:e6:c3:c5:c2:2f:69:da: a6:96:f3:f8:c6:07:2a:4c:57:e9:38:06:65:6d:b3:f7:3b:e4: a2:75:54:41:97:ee:8b:d1:e6:73:7c:80:c4:40:82:91:c5:70: 58:04:73:ce:6d:7e:0d:ed:77:60:31:e6:55:1e:7c:bb:68:37: 0d:ce:e0:44:f3:ba:c1:16:e6:e0:e9:cd:7a:4d:be:57:f2:6e: 3c:bc:a4:3f:dd:10:fc:ab:17:b1:81:5d:bf:4f:fe:e1:64:a3: 57:7b:41:85:e2:4c:f4:ca:57:97:25:6e:fb:1f:d9:41:62:1d: a4:39:8c:6d:16:85:8e:12:55:58:95:ee:ed:7c:e7:f1:0f:f0: 85:e2:69:3c:6a:32:83:3e:9c:ae:86:b0:eb:5b:38:67:93:a0: 33:6f:75:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xZtoMkpXfctRpQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk Y2RjMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YTkzZmFiNDctZDFkYS00NWNmLWI4MTgtN2NiYjNlNjYyNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Y2hmkXn1LK1w7LK7mL8SBGMD7cvaTnAGNhe vH4hqpDzB9whnB9IcCyjCALRwGowrhacwP1BdIYY04z6BL4WAM1cqAG/7CruRv9N Uj3I7qRsMt3mpdMbulTk8+7ZagLFfVyDPgtRH2xTOsU0rhEBiZ0aa4cnSHy+kxRn 4bIt30CTzZHdUygGpJC5RfWDAONjqoXUpBYe0oC4xAWYrim1UNLn9HJQUPu3gSsy Y/GV1BQkWixWCSFuyUoUbLDsToBYYPNsU0FL8TV51BKC4zkdUp+HhNbEt9kYZkDM 0sCZjw7ReSyw+Xjy/2BYEiu/+Yo2dE1yKWbyArD+wBshqeP9QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6bRI+wd9pFCTnucdBVz/sIax95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvOGIzMDg4MTktYWJlNi0z ZDE3LWIzZTMtN2NiZTJjMDdiNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1 MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFZlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwnvkrNXzt2rJyU5pzXg9jJBA6j1Q6llXqI8jlG/+QmoH3JLbq1rc0Y +4av/KF9Yex7IIbkA3Rt0nUri4nm4yhSF0CXJJihDpTDKtD66sZEpyWvDZ5qFLeH xz0qFH5OuMBZDXyf5sPFwi9p2qaW8/jGBypMV+k4BmVts/c75KJ1VEGX7ovR5nN8 gMRAgpHFcFgEc85tfg3td2Ax5lUefLtoNw3O4ETzusEW5uDpzXpNvlfybjy8pD/d EPyrF7GBXb9P/uFko1d7QYXiTPTKV5clbvsf2UFiHaQ5jG0WhY4SVViV7u185/EP 8IXiaTxqMoM+nK6GsOtbOGeToDNvdag= -----END CERTIFICATE-----Generated at Mon Apr 28 09:05:52 2025 by rpki-client