$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa File: a3cdaf22-fa27-38fe-955b-f9f075407d40.roa (raw, json) Hash identifier: +qM5+tzVNSPs/JgFNgxlNY4/NoDUv6+v2UVnOWi0SL4= Subject key identifier: 0E:AB:78:26:0A:34:DA:E4:F4:E3:CF:86:0D:CB:05:B4:23:38:B4:F2 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F432858498E648048E39807EC2F420580 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 270169 IP address blocks: 204.199.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:80:48:e3:98:07:ec:2f:42:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=53a4b224-7b99-400c-bccb-6ab434e7c652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:de:68:34:73:1c:99:1d:2f:11:ce:25:3e:a2: 71:7e:83:a8:09:7a:6b:9b:30:52:15:dd:81:83:ce: f8:a2:92:bb:e4:6e:7d:63:a0:40:48:52:d0:2b:d7: 45:34:09:0b:c2:df:21:79:6e:0d:34:18:20:cc:48: 9a:fa:34:43:08:1f:42:cb:25:ae:b7:76:26:e2:88: b7:55:30:0e:d6:c4:14:8d:a0:d2:22:c9:cf:65:ba: d5:c6:b4:e0:0b:35:64:c8:f6:89:fc:5d:ee:9e:22: 61:b9:8b:14:d3:92:66:ac:48:2a:6d:ff:a0:60:1b: be:2e:97:6a:9a:0f:2f:b5:43:fe:a1:0a:8a:26:56: 86:5f:9d:91:ad:f2:26:73:09:c2:21:b3:22:ad:bf: 3a:83:bc:00:6a:a0:35:65:24:6a:e0:62:c0:ff:6f: 52:9a:43:9c:80:67:72:01:64:1f:3c:a8:c2:0c:49: 63:a1:54:ce:5a:5f:b5:8c:47:08:2b:f7:76:86:62: 47:55:49:29:9c:ed:58:86:64:04:20:37:18:e2:2a: 41:c4:49:6e:d4:98:c5:bc:e2:3e:dc:e1:83:94:b5: 73:95:ee:06:70:a2:9c:aa:05:68:b7:f9:6f:61:d1: 16:e4:c0:86:a9:e6:5a:30:9c:72:23:9b:7d:bf:8a: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AB:78:26:0A:34:DA:E4:F4:E3:CF:86:0D:CB:05:B4:23:38:B4:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 204.199.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:48:82:0f:64:bd:59:f3:50:15:6b:5c:5b:2c:b3:c5:6f:5a: df:fb:1d:f6:57:3f:2a:5b:48:57:a7:2d:d6:ba:57:a4:ea:cd: 05:92:32:f0:6a:df:88:fb:34:01:17:ac:38:d9:fb:73:2c:cb: ce:5e:47:4d:ae:a6:1b:06:75:59:43:d6:3a:cd:74:68:8f:fe: ad:30:4b:b3:51:82:9b:d9:11:14:26:d6:7c:1f:c9:a7:26:3f: 1c:ac:d9:b9:59:02:9e:6a:69:24:4e:e2:4b:67:bf:ff:16:5f: 29:34:ee:4e:29:a6:7c:45:e1:65:fc:3a:4a:cb:92:f4:25:9b: 84:bd:28:43:a3:18:1b:5d:29:e9:a7:af:a5:9b:fb:40:fd:c1: c3:53:45:bf:33:eb:66:87:69:a7:8c:5e:25:27:a1:70:b8:7d: 6f:37:45:e8:43:da:5b:68:99:05:1f:64:08:fc:39:78:67:35: 03:5e:11:60:6b:2e:68:09:39:78:e7:38:05:9e:67:88:bc:79: b2:e2:c7:c6:1f:d0:c8:de:3e:30:e2:e4:13:0c:27:73:96:16: 28:c4:09:66:d3:8a:a5:52:48:16:5d:35:35:c8:fc:b6:23:fe: d2:d2:df:c1:00:d1:a9:b5:f8:11:ff:5e:2a:60:5a:44:65:21: d6:d4:52:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIBI45gH7C9CBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NTNhNGIyMjQtN2I5OS00MDBjLWJjY2ItNmFiNDM0ZTdjNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd5oNHMcmR0vEc4lPqJxfoOoCXprmzBSFd2B g874opK75G59Y6BASFLQK9dFNAkLwt8heW4NNBggzEia+jRDCB9CyyWut3Ym4oi3 VTAO1sQUjaDSIsnPZbrVxrTgCzVkyPaJ/F3uniJhuYsU05JmrEgqbf+gYBu+Lpdq mg8vtUP+oQqKJlaGX52RrfImcwnCIbMirb86g7wAaqA1ZSRq4GLA/29SmkOcgGdy AWQfPKjCDEljoVTOWl+1jEcIK/d2hmJHVUkpnO1YhmQEIDcY4ipBxElu1JjFvOI+ 3OGDlLVzle4GcKKcqgVot/lvYdEW5MCGqeZaMJxyI5t9v4o7SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6reCYKNNrk9OPPhg3LBbQjOLTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvYTNjZGFmMjItZmEyNy0z OGZlLTk1NWItZjlmMDc1NDA3ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMfDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFIgg9kvVnzUBVrXFsss8VvWt/7HfZXPypbSFenLda6V6TqzQWSMvBq 34j7NAEXrDjZ+3Msy85eR02uphsGdVlD1jrNdGiP/q0wS7NRgpvZERQm1nwfyacm Pxys2blZAp5qaSRO4ktnv/8WXyk07k4ppnxF4WX8OkrLkvQlm4S9KEOjGBtdKemn r6Wb+0D9wcNTRb8z62aHaaeMXiUnoXC4fW83RehD2ltomQUfZAj8OXhnNQNeEWBr LmgJOXjnOAWeZ4i8ebLix8Yf0MjePjDi5BMMJ3OWFijECWbTiqVSSBZdNTXI/LYj /tLS38EA0am1+BH/XipgWkRlIdbUUiM= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:45 2025 by rpki-client