$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa File: 376c0303-935e-39a5-b2d1-709f592f1626.roa (raw, json) Hash identifier: bKPltovIF9Me6U4mFkebFCwYq20I96LIYLcms2fpfYQ= Subject key identifier: 43:A3:67:F5:61:90:82:80:B8:80:2D:A8:9D:09:58:D9:4A:2F:83:42 Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Certificate serial: 010D0C9F432858498EB0D9F7423972A0F65DFD60 Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa Signing time: Thu 17 Apr 2025 15:34:57 +0000 ROA not before: Thu 17 Apr 2025 15:34:57 +0000 ROA not after: Wed 16 Jul 2025 15:34:57 +0000 asID: 14618 IP address blocks: 192.200.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:b0:d9:f7:42:39:72:a0:f6:5d:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Validity Not Before: Apr 17 15:34:57 2025 GMT Not After : Jul 16 15:34:57 2025 GMT Subject: CN=54391650-c8dc-4c16-9278-3bb1c8924d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:07:28:59:14:c8:f1:f6:89:9c:8c:17:b8: d5:2f:05:e9:c5:47:a7:fe:79:39:f2:be:ee:cf:9f: ca:86:99:d5:ae:4f:27:b1:a7:4f:68:cf:b0:0d:3a: 74:32:bb:55:80:09:17:5e:df:3f:55:9d:95:8c:3b: a7:ff:e7:2f:44:a6:85:5a:d1:d2:74:60:aa:10:10: 0a:ee:fa:35:7b:18:a6:5b:f0:b6:6c:fd:3c:86:7f: e6:70:e6:7b:54:7d:ed:08:b7:cf:35:84:e5:10:a3: cf:ea:cd:38:6e:79:57:54:27:ef:bc:c0:de:cd:62: 4f:13:13:88:3e:73:c0:dc:63:9d:e9:fd:b6:b1:69: 12:cd:0c:95:41:79:ae:a1:f7:bf:51:23:8a:ac:41: 6a:17:3e:72:50:e9:61:8a:65:03:04:28:27:f6:45: 13:2b:93:cb:c2:01:40:a5:9b:c7:36:41:8a:22:58: 5c:cb:26:ee:75:39:6a:08:80:ff:8d:42:06:07:a0: 8a:78:fe:d0:b9:15:b7:b6:3c:71:0c:77:d4:d2:04: 27:a1:8b:55:ad:08:93:92:56:32:5d:fd:37:0c:d0: e5:c7:7f:3c:ca:7d:16:45:2c:32:1a:90:a7:47:70: e9:a1:f2:a9:8f:d8:b1:a7:f4:8c:1b:dd:12:6d:31: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A3:67:F5:61:90:82:80:B8:80:2D:A8:9D:09:58:D9:4A:2F:83:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl X509v3 Authority Key Identifier: keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer sbgp-ipAddrBlock: critical IPv4: 192.200.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:71:f7:e6:d9:9c:3e:6b:ef:4e:6b:96:7c:89:72:b8:ab:d4: 66:08:77:05:6a:7c:ac:92:94:88:1c:d7:91:b6:b2:c4:64:e9: 15:61:06:73:5f:e3:fc:8e:8b:57:cf:78:f4:13:2e:fa:81:9d: cf:22:52:fb:c2:0a:c3:54:5a:7d:b5:9e:a6:d1:a0:99:64:44: 14:73:4e:aa:a0:ad:b1:51:ab:cf:47:6c:b8:c9:0f:e1:4f:4b: 9e:f8:60:88:b0:15:a5:e4:8e:78:5f:05:57:6d:82:40:cd:94: 5c:9b:3f:22:38:85:74:66:62:8e:59:00:92:19:30:62:bb:df: 76:8d:26:7e:ec:02:fe:0f:ad:ec:d6:bc:f6:71:1e:a9:0d:74: 68:96:d4:49:4c:eb:93:97:2e:40:32:92:61:43:ee:59:29:e8: ef:1c:20:b3:b3:d7:ed:51:ca:81:1f:6f:9d:35:66:e7:f0:49: 23:f7:a5:22:a9:d4:81:19:dd:57:ec:5e:5b:55:ff:5a:91:45: 63:5d:37:11:74:f9:ae:e6:ad:e4:7e:bf:4d:b1:7d:50:f3:95: 2c:e9:82:87:2f:7b:63:32:80:ac:d7:f1:c6:c6:37:dc:a3:6b: b8:13:b8:d2:3e:4f:03:87:78:79:d4:bd:d2:4d:9e:b2:79:3b: 54:7f:9c:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOsNn3QjlyoPZd/WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM0NDBlZWItM2Q3YS00M2UzLWEwYTQtZmE5YTk5Mzc5 OGJlMB4XDTI1MDQxNzE1MzQ1N1oXDTI1MDcxNjE1MzQ1N1owLzEtMCsGA1UEAxMk NTQzOTE2NTAtYzhkYy00YzE2LTkyNzgtM2JiMWM4OTI0ZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29MHKFkUyPH2iZyMF7jVLwXpxUen/nk58r7u z5/KhpnVrk8nsadPaM+wDTp0MrtVgAkXXt8/VZ2VjDun/+cvRKaFWtHSdGCqEBAK 7vo1eximW/C2bP08hn/mcOZ7VH3tCLfPNYTlEKPP6s04bnlXVCfvvMDezWJPExOI PnPA3GOd6f22sWkSzQyVQXmuofe/USOKrEFqFz5yUOlhimUDBCgn9kUTK5PLwgFA pZvHNkGKIlhcyybudTlqCID/jUIGB6CKeP7QuRW3tjxxDHfU0gQnoYtVrQiTklYy Xf03DNDlx388yn0WRSwyGpCnR3DpofKpj9ixp/SMG90SbTFFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOjZ/VhkIKAuIAtqJ0JWNlKL4NCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0 MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlhOTkzNzk4YmUvMzc2YzAzMDMtOTM1ZS0z OWE1LWIyZDEtNzA5ZjU5MmYxNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzM0NDBlZWItM2Q3YS00M2UzLWEw YTQtZmE5YTk5Mzc5OGJlL2MzNDQwZWViLTNkN2EtNDNlMy1hMGE0LWZhOWE5OTM3 OThiZS5jcmwwHwYDVR0jBBgwFoAUiDcfaou/A6y4ImpcKZnxDN+IvRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlh OTkzNzk4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxx9+bZnD5r705rlnyJcrir1GYIdwVqfKySlIgc15G2ssRk6RVhBnNf 4/yOi1fPePQTLvqBnc8iUvvCCsNUWn21nqbRoJlkRBRzTqqgrbFRq89HbLjJD+FP S574YIiwFaXkjnhfBVdtgkDNlFybPyI4hXRmYo5ZAJIZMGK733aNJn7sAv4PrezW vPZxHqkNdGiW1ElM65OXLkAykmFD7lkp6O8cILOz1+1RyoEfb501ZufwSSP3pSKp 1IEZ3VfsXltV/1qRRWNdNxF0+a7mreR+v02xfVDzlSzpgocve2MygKzX8cbGN9yj a7gTuNI+TwOHeHnUvdJNnrJ5O1R/nNw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:49 2025 by rpki-client