$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa File: 4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa (raw, json) Hash identifier: hID5I7zTJDkBCp5VBfRJF6bkMJFgVYkn+0roNLs7H6E= Subject key identifier: E8:07:F5:F7:4C:44:EC:41:E5:AD:8C:1E:4F:AD:68:67:E7:60:55:51 Certificate issuer: /CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Certificate serial: 010D0C9F43285849D85F93B0408E00AD12DE9490 Authority key identifier: DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 199.188.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:93:b0:40:8e:00:ad:12:de:94:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=553bde94-ae74-44c8-920c-900b71752316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:81:37:ec:77:ce:c2:f1:22:54:87:12:b1: b7:69:aa:75:4d:ed:80:b1:b0:b7:bb:ca:e8:4c:9c: d8:ea:74:55:35:7d:af:ea:59:d4:d6:5a:d6:26:56: 47:6d:76:dc:e9:7c:78:13:6a:01:c1:b1:f8:3e:b3: 36:7d:72:b5:67:1b:c8:6e:00:ff:9c:fa:9b:15:07: f9:14:b7:2c:7a:51:4f:1c:ac:c3:45:c5:9b:e8:c0: e5:7b:89:b0:55:1b:da:92:3d:f8:e0:18:34:52:82: 67:ea:f6:c4:0b:2a:31:91:6d:c6:79:70:1d:4e:31: 97:65:a0:cf:6b:6a:6d:69:d7:60:d7:39:00:ca:71: 90:6e:b6:08:e8:5a:3b:21:9b:3e:3f:c9:5c:fc:d9: d1:0b:d0:97:0d:3d:57:55:a5:18:3e:59:4b:00:41: f8:9f:25:bd:f5:be:7f:bb:a5:ef:ca:71:fd:e9:29: 3b:5a:3c:f7:28:e3:42:89:79:24:e8:8c:6c:0c:6d: 79:3c:83:61:42:31:eb:34:68:7a:ab:3d:04:f0:de: df:72:f3:16:8b:fe:c3:93:22:73:d4:b1:a2:c2:29: ba:fa:0a:ad:b5:1b:06:ec:28:3d:35:d1:4a:2d:42: 83:4d:39:dd:f4:58:0c:8f:a3:7f:3d:d2:65:48:60: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:07:F5:F7:4C:44:EC:41:E5:AD:8C:1E:4F:AD:68:67:E7:60:55:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl X509v3 Authority Key Identifier: keyid:DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer sbgp-ipAddrBlock: critical IPv4: 199.188.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:eb:99:51:f1:03:9c:02:b8:a4:dc:6c:70:38:20:8f:7b:c2: b8:32:c0:71:0f:6f:82:fb:f7:46:8e:53:ed:94:cb:d6:73:55: e8:ed:46:97:6f:f6:3f:c5:64:05:47:78:89:2b:45:3b:5e:6c: db:58:01:24:7d:09:6e:01:9d:b5:47:5a:d3:32:8e:ae:06:ed: 03:bc:10:94:e6:c6:86:20:83:40:08:4e:06:a7:a5:78:a3:f0: bb:d7:9d:5b:96:77:5d:0c:de:29:66:b9:eb:42:92:45:d2:e3: bb:41:6f:de:4e:71:33:4c:69:c2:1d:1d:19:73:7d:8a:38:7c: 7a:e5:ab:7b:82:81:e9:7f:ad:b6:bd:8f:7b:d7:5e:7d:f0:e4: 5c:b4:2b:ea:e5:cf:9a:b9:a5:bd:26:82:90:ff:12:2b:b9:5f: 50:5f:0e:07:89:0b:a0:0f:7b:a2:c1:80:16:6e:15:f6:73:f5: ab:8e:a3:c9:de:b5:c5:57:cd:32:a2:3b:87:da:77:c5:5a:c7: 4e:24:e0:d5:3e:d0:85:5d:8a:60:74:05:c8:53:f2:e5:a7:9b: 1d:c6:e3:37:24:73:37:73:16:af:6d:51:5d:30:b5:51:4f:5b: 80:20:e2:ee:c6:db:f2:0d:8b:6e:3f:7e:95:93:7d:37:25:1e: 89:2e:a0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5OwQI4ArRLelJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkMGVkOGYtZmRmNC00YjI3LThkNGUtZWI0NGYyMWY3 ODcxMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTUzYmRlOTQtYWU3NC00NGM4LTkyMGMtOTAwYjcxNzUyMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkGBN+x3zsLxIlSHErG3aap1Te2AsbC3u8ro TJzY6nRVNX2v6lnU1lrWJlZHbXbc6Xx4E2oBwbH4PrM2fXK1ZxvIbgD/nPqbFQf5 FLcselFPHKzDRcWb6MDle4mwVRvakj344Bg0UoJn6vbECyoxkW3GeXAdTjGXZaDP a2ptaddg1zkAynGQbrYI6Fo7IZs+P8lc/NnRC9CXDT1XVaUYPllLAEH4nyW99b5/ u6XvynH96Sk7Wjz3KONCiXkk6IxsDG15PINhQjHrNGh6qz0E8N7fcvMWi/7DkyJz 1LGiwim6+gqttRsG7Cg9NdFKLUKDTTnd9FgMj6N/PdJlSGBrJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgH9fdMROxB5a2MHk+taGfnYFVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWQw ZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0ZjIxZjc4NzEvNDE5MWE4NDAtYzNkNi0z ZWE5LWFkZDMtY2QyZmY3YzlhNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkMGVkOGYtZmRmNC00YjI3LThk NGUtZWI0NGYyMWY3ODcxL2I1ZDBlZDhmLWZkZjQtNGIyNy04ZDRlLWViNDRmMjFm Nzg3MS5jcmwwHwYDVR0jBBgwFoAU3GoVKg+iMFSCmPRmY0OX7mPE+28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWQwZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0 ZjIxZjc4NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7ydMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArrmVHxA5wCuKTcbHA4II97wrgywHEPb4L790aOU+2Uy9ZzVejtRpdv 9j/FZAVHeIkrRTtebNtYASR9CW4BnbVHWtMyjq4G7QO8EJTmxoYgg0AITganpXij 8LvXnVuWd10M3ilmuetCkkXS47tBb95OcTNMacIdHRlzfYo4fHrlq3uCgel/rba9 j3vXXn3w5Fy0K+rlz5q5pb0mgpD/Eiu5X1BfDgeJC6APe6LBgBZuFfZz9auOo8ne tcVXzTKiO4fad8Vax04k4NU+0IVdimB0BchT8uWnmx3G4zckczdzFq9tUV0wtVFP W4Ag4u7G2/INi24/fpWTfTclHokuoKM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:47 2025 by rpki-client