$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa File: d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa (raw, json) Hash identifier: J17nwTVeoVuhvq7NW2NZgBsQxYRrTn5JyyGL0bJTc9Q= Subject key identifier: B7:A3:9D:33:91:56:DE:B5:48:6E:49:9B:CB:02:44:5D:11:3F:A2:37 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285849806F17FE11C0DB1D90668500 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:17:fe:11:c0:db:1d:90:66:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=1f941e41-af6f-49ec-9a22-4f6a8434762b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:1c:b3:dc:c6:95:10:5c:87:6e:ad:9c:dc: 40:77:75:3f:02:40:1f:78:ca:5b:bd:be:42:98:6f: 47:3b:af:d1:0f:f1:9c:1f:50:37:93:f4:6f:86:95: 02:55:64:2f:3d:67:4d:92:d2:d7:90:04:47:31:9b: 72:dc:13:1e:c8:bc:3b:e2:d2:6d:09:fc:13:1b:9b: 30:cf:67:0d:99:99:3f:d4:8d:86:32:2c:3c:35:e3: b3:b9:cf:47:7c:29:37:ba:91:ac:91:26:8e:a3:c7: 65:18:6c:22:40:32:4b:15:0d:cc:e3:2a:09:1d:fe: f6:fc:f1:a8:3a:3c:d0:42:9f:96:71:49:0f:cb:67: b4:36:ef:f9:4f:3e:2a:78:f5:71:3e:fd:76:d3:3b: 1e:c3:f5:1e:42:bd:dd:60:0a:28:54:f6:63:5a:25: 34:a6:89:e2:6d:04:8c:b5:c0:90:a1:f4:e6:ef:b6: 8a:60:aa:01:53:db:ac:57:a5:27:7b:4a:56:5e:a1: f4:e9:ea:f3:ec:0a:c7:a6:4a:b6:5d:f3:73:29:d8: 51:25:73:8f:f7:63:ed:da:40:66:1d:6e:8c:0d:71: f2:b7:46:c8:ac:b7:cc:e9:58:96:95:64:8d:d9:05: 15:ad:34:ab:40:2a:7a:64:d5:0c:9d:d4:b8:16:f0: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A3:9D:33:91:56:DE:B5:48:6E:49:9B:CB:02:44:5D:11:3F:A2:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f0:61:d9:ca:97:0e:3a:f9:4b:4e:dc:96:f2:dc:80:28:6c: a7:e8:94:4a:b9:80:86:cf:ab:99:d6:22:cd:04:ef:a8:71:ee: 13:16:70:27:2a:82:f2:e5:71:c3:c9:ce:25:2b:b0:1e:90:cd: 87:e7:98:e2:a9:a0:fc:26:cd:67:d5:9e:b5:45:2e:77:f8:44: a7:8d:e7:f3:45:6b:54:f9:75:9e:24:96:84:4d:93:9f:65:04: 9a:de:cd:86:f3:80:46:d6:f7:d5:76:94:82:97:ed:1c:1c:8a: a3:e0:d2:3c:bc:45:91:c2:13:e9:70:99:10:fe:e3:9e:83:f0: dc:64:31:ab:ed:45:8a:26:ba:df:d4:7e:a2:7b:f9:ec:ae:ac: de:ff:38:06:53:78:1f:8a:e9:b4:56:a6:c3:71:97:fe:8f:f4: 24:eb:6a:5b:02:c0:45:57:fa:b5:4f:cc:08:13:7f:b7:85:70: 3a:e1:d2:1c:38:43:53:bf:8a:8e:c6:7e:f8:a1:0c:47:19:e0: 28:62:b5:93:e4:69:b3:16:2b:2b:02:ff:c3:be:20:34:5d:86: 2b:ef:b5:46:ac:40:c2:98:21:8d:99:8d:27:11:cf:d7:44:de: ea:1e:ac:f4:57:4b:51:dd:fe:04:2a:09:72:2c:dc:82:b7:b0: 4e:da:f7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxf+EcDbHZBmhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MWY5NDFlNDEtYWY2Zi00OWVjLTlhMjItNGY2YTg0MzQ3NjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Qcs9zGlRBch26tnNxAd3U/AkAfeMpbvb5C mG9HO6/RD/GcH1A3k/RvhpUCVWQvPWdNktLXkARHMZty3BMeyLw74tJtCfwTG5sw z2cNmZk/1I2GMiw8NeOzuc9HfCk3upGskSaOo8dlGGwiQDJLFQ3M4yoJHf72/PGo OjzQQp+WcUkPy2e0Nu/5Tz4qePVxPv120zsew/UeQr3dYAooVPZjWiU0ponibQSM tcCQofTm77aKYKoBU9usV6Une0pWXqH06erz7ArHpkq2XfNzKdhRJXOP92Pt2kBm HW6MDXHyt0bIrLfM6ViWlWSN2QUVrTSrQCp6ZNUMndS4FvAvbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLejnTORVt61SG5Jm8sCRF0RP6I3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvZDJhYTIwMmQtY2E5Mi0z M2IyLTlmZTAtMTgwNmQwZjMxZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3wYdnKlw46+UtO3Jby3IAobKfolEq5gIbPq5nWIs0E76hx7hMWcCcq gvLlccPJziUrsB6QzYfnmOKpoPwmzWfVnrVFLnf4RKeN5/NFa1T5dZ4kloRNk59l BJrezYbzgEbW99V2lIKX7RwciqPg0jy8RZHCE+lwmRD+456D8NxkMavtRYomut/U fqJ7+eyurN7/OAZTeB+K6bRWpsNxl/6P9CTralsCwEVX+rVPzAgTf7eFcDrh0hw4 Q1O/io7GfvihDEcZ4ChitZPkabMWKysC/8O+IDRdhivvtUasQMKYIY2ZjScRz9dE 3uoerPRXS1Hd/gQqCXIs3IK3sE7a98o= -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:58 2025 by rpki-client