$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/198245a4-9b6f-3550-b92a-d7f97f0861b5.roa File: 198245a4-9b6f-3550-b92a-d7f97f0861b5.roa (raw, json) Hash identifier: zXuuB/YkVkLDUWa6vctWxbNvoyiKVNIoA9nj3uy7cdM= Subject key identifier: A7:7A:C8:1B:9E:D8:1D:B1:73:94:64:D0:FE:75:9B:2B:CF:51:DB:38 Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34 Certificate serial: 010D0C9F43285849B39A41A260B5DA303BBBA0A0 Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/198245a4-9b6f-3550-b92a-d7f97f0861b5.roa Signing time: Wed 30 Apr 2025 20:54:20 +0000 ROA not before: Wed 30 Apr 2025 20:54:20 +0000 ROA not after: Tue 29 Jul 2025 20:54:20 +0000 asID: 0 IP address blocks: 192.219.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:9a:41:a2:60:b5:da:30:3b:bb:a0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34 Validity Not Before: Apr 30 20:54:20 2025 GMT Not After : Jul 29 20:54:20 2025 GMT Subject: CN=326820d9-689c-4b64-9222-3dfc88060398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b4:a9:ca:89:2f:87:ca:7c:1e:47:c8:5a:3c: 9b:28:0d:f9:22:89:d3:44:9c:a4:2a:2b:ea:a2:ca: f1:e4:02:90:44:5d:da:dc:3d:02:d2:68:9c:64:13: c9:6b:5b:42:0e:33:9d:06:4d:a9:d4:e1:d6:ad:5b: 1a:ea:2a:06:29:b2:dc:fc:58:19:4d:81:e6:9c:38: 78:77:7a:08:ae:47:ef:ea:91:de:44:b7:e6:3b:9d: f7:cb:76:39:73:28:5f:8a:2d:55:7a:cc:40:cb:dd: 34:49:a2:99:1e:e1:4b:98:e3:04:52:a0:d0:2e:b7: 35:58:f0:8d:91:10:f6:62:28:76:15:02:df:5b:8d: 78:9a:cb:0b:d6:cb:76:ee:e0:57:3b:cd:6e:2e:a4: d0:5f:fe:d9:a6:71:39:ec:5e:2e:25:0b:c7:81:21: d4:c9:33:bc:ed:32:b2:24:68:7f:85:5a:b2:03:2f: 2c:c3:26:2f:8d:0c:e6:5e:47:32:13:93:4b:0d:c8: 93:24:9e:22:f4:66:bb:e2:af:07:b9:23:d6:7d:35: 8e:78:95:36:12:19:8f:6b:c5:cb:07:17:5b:6d:c8: 01:90:78:21:f3:1a:b0:c0:d6:0e:2b:76:31:13:d3: e2:7b:9d:8b:11:7d:52:1c:3a:3e:ee:f0:a2:10:6c: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7A:C8:1B:9E:D8:1D:B1:73:94:64:D0:FE:75:9B:2B:CF:51:DB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/198245a4-9b6f-3550-b92a-d7f97f0861b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl X509v3 Authority Key Identifier: keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer sbgp-ipAddrBlock: critical IPv4: 192.219.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:64:cf:cb:9c:81:b1:4b:57:ad:ba:6d:9f:d2:1b:56:97:89: 39:c0:5a:6f:6d:9d:4b:ee:c1:7c:11:d7:1e:42:ed:84:3b:be: 66:8b:6a:3b:fe:b4:7e:04:b8:04:e7:67:96:fe:02:52:9b:96: f7:4c:ec:37:74:34:71:20:fb:cd:8b:af:9b:d0:27:18:b7:f5: b7:f7:da:8a:eb:79:b9:10:40:10:e4:7e:37:dc:f1:1f:55:64: 77:7d:90:b2:f8:5d:79:8e:06:a9:36:54:b0:6d:fc:5e:25:a4: 25:58:ce:bc:65:3a:99:db:27:11:e8:7a:41:8e:92:e7:7a:81: 99:47:05:6e:69:5c:af:5d:d8:31:0f:31:01:7e:ff:89:d8:5a: 30:01:a5:51:8b:05:75:c6:15:ac:5b:bd:f2:6c:3c:78:b9:ab: 44:f3:3c:34:77:ad:42:f6:ed:a2:27:14:bc:21:2b:8f:d8:f2: dc:e2:a1:e7:ca:cf:b0:fb:3e:be:cb:b4:9e:0a:d6:54:5b:15: a0:ea:05:44:dc:75:e1:2e:4f:5f:b8:6f:9c:b7:b7:38:36:87: 25:0a:c1:46:3c:9b:c3:14:da:cb:86:d3:a7:c2:90:e9:c9:6f: 6b:ef:91:30:70:e8:9e:36:58:4f:dd:f7:bf:8e:b5:e7:b3:66: 26:0d:cb:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmzmkGiYLXaMDu7oKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ODMxOGEtNzA1OS00MmJlLTliNjAtMjM0YWVkYmE1 ZTM0MB4XDTI1MDQzMDIwNTQyMFoXDTI1MDcyOTIwNTQyMFowLzEtMCsGA1UEAxMk MzI2ODIwZDktNjg5Yy00YjY0LTkyMjItM2RmYzg4MDYwMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rSpyokvh8p8HkfIWjybKA35IonTRJykKivq osrx5AKQRF3a3D0C0micZBPJa1tCDjOdBk2p1OHWrVsa6ioGKbLc/FgZTYHmnDh4 d3oIrkfv6pHeRLfmO533y3Y5cyhfii1VesxAy900SaKZHuFLmOMEUqDQLrc1WPCN kRD2Yih2FQLfW414mssL1st27uBXO81uLqTQX/7ZpnE57F4uJQvHgSHUyTO87TKy JGh/hVqyAy8swyYvjQzmXkcyE5NLDciTJJ4i9Ga74q8HuSPWfTWOeJU2EhmPa8XL BxdbbcgBkHgh8xqwwNYOK3YxE9Pie52LEX1SHDo+7vCiEGyHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd6yBue2B2xc5Rk0P51myvPUds4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4 MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRhZWRiYTVlMzQvMTk4MjQ1YTQtOWI2Zi0z NTUwLWI5MmEtZDdmOTdmMDg2MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5ODMxOGEtNzA1OS00MmJlLTli NjAtMjM0YWVkYmE1ZTM0L2Q0OTgzMThhLTcwNTktNDJiZS05YjYwLTIzNGFlZGJh NWUzNC5jcmwwHwYDVR0jBBgwFoAUG1izrEgJ1ISdOmbgXwic0hDBEWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRh ZWRiYTVlMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9kz8ucgbFLV626bZ/SG1aXiTnAWm9tnUvuwXwR1x5C7YQ7vmaLajv+ tH4EuATnZ5b+AlKblvdM7Dd0NHEg+82Lr5vQJxi39bf32orrebkQQBDkfjfc8R9V ZHd9kLL4XXmOBqk2VLBt/F4lpCVYzrxlOpnbJxHoekGOkud6gZlHBW5pXK9d2DEP MQF+/4nYWjABpVGLBXXGFaxbvfJsPHi5q0TzPDR3rUL27aInFLwhK4/Y8tzioefK z7D7Pr7LtJ4K1lRbFaDqBUTcdeEuT1+4b5y3tzg2hyUKwUY8m8MU2suG06fCkOnJ b2vvkTBw6J42WE/d97+OteezZiYNy1Y= -----END CERTIFICATE-----Generated at Fri May 2 08:08:03 2025 by rpki-client