$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa File: 201d8786-0ccc-3744-920e-735e09222b86.roa (raw, json) Hash identifier: azwy+z2pGmLNK3R7NPC18dksbRNKRU69Agi969aLIYw= Subject key identifier: 64:35:04:16:8F:D1:50:CD:63:65:B7:B6:2E:9E:91:74:D3:D8:59:DF Certificate issuer: /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55 Certificate serial: 010D0C9F43285849955F225E2D1FA7EA17CA7000 Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 54665 IP address blocks: 192.34.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:22:5e:2d:1f:a7:ea:17:ca:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=f35f1065-9844-44ec-ba30-cee49766f793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:eb:e1:64:f1:f2:a0:7d:da:2a:77:c4:7e: 1a:8c:fe:96:08:20:0b:e7:d2:2f:0a:83:29:14:e1: e2:35:18:29:16:50:56:fc:81:aa:54:b9:a7:8d:2b: 70:8e:dc:2b:29:96:2b:ff:6d:b3:97:29:e5:2e:10: f2:f5:ac:56:24:4d:de:9a:3d:1e:2d:a5:08:a8:3c: ee:6c:1b:3f:83:59:eb:b1:f8:79:85:72:39:d1:d1: 53:ab:50:f9:f3:7d:6e:e7:a7:82:e6:51:c8:46:e8: 2f:df:ec:3a:67:d9:8f:04:bf:76:b7:a1:57:16:af: fe:5f:0c:e1:09:ba:b3:0b:ef:b2:cc:d3:12:b4:f5: 45:15:ff:6b:33:a9:e4:de:7e:b7:47:e5:a4:01:d8: 3e:d0:88:31:ed:08:ad:89:8e:02:fa:64:9c:2a:55: 41:86:88:fd:58:f1:1b:0e:17:d6:4f:ac:a9:61:0b: 95:24:14:57:8e:ef:42:e0:f9:c2:59:77:42:e8:4e: c1:91:ac:c8:09:ec:45:a2:95:8f:a9:18:21:25:2a: e4:d2:d9:60:97:dd:c9:2a:a4:50:31:79:a4:a1:c4: 3a:06:ce:65:ee:62:0f:60:53:96:36:e8:30:15:c2: 5d:49:f0:71:b5:d3:b6:47:dd:a4:d9:8f:3c:c1:cb: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:35:04:16:8F:D1:50:CD:63:65:B7:B6:2E:9E:91:74:D3:D8:59:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl X509v3 Authority Key Identifier: keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer sbgp-ipAddrBlock: critical IPv4: 192.34.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:74:f7:dd:75:1e:07:25:e0:f0:4d:d5:05:05:08:38:73:b7: 39:d6:1a:01:ce:3c:b5:16:ae:10:bb:93:cb:77:6b:30:54:bb: 9f:95:e3:a6:1d:18:7d:4c:23:51:22:08:f5:a3:80:1d:5d:f8: ef:f4:2c:28:ae:cf:43:55:15:a5:50:c1:f8:92:6e:8e:98:ae: 5c:b2:20:c4:71:a1:80:52:8d:3c:3a:00:f2:25:52:da:53:1d: 04:29:8a:de:b0:a4:83:6f:cd:c2:b3:fa:02:1c:81:82:39:0a: 41:c7:af:f2:4a:d1:de:1b:70:f3:f3:4e:95:7d:5c:19:78:61: 3a:ff:45:1d:c6:68:1e:55:bc:ba:2b:58:2b:47:a4:20:e5:0f: 3a:74:ce:7b:c8:90:d9:af:bd:8e:b1:5a:fe:fc:66:39:ad:1e: 29:7f:76:78:d8:13:c2:ff:1a:b3:16:b0:d8:70:c0:7f:be:09: 67:11:aa:80:c7:63:8e:f3:48:8c:c8:fb:b6:27:0c:da:87:a4: b7:3e:3b:d0:af:24:a9:3c:73:79:be:d0:96:a0:38:48:0f:02: 19:1c:22:f1:c0:ca:25:49:1a:5e:98:d7:98:dd:fb:69:89:01: 3e:30:7a:f2:15:95:00:c0:1f:b8:10:c7:d2:31:07:19:5b:0b: f6:c2:7e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyJeLR+n6hfKcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDM1YzU3NzktMGUwYi00Y2E1LTkyMTMtNmVkZGRhZDli YzU1MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjM1ZjEwNjUtOTg0NC00NGVjLWJhMzAtY2VlNDk3NjZmNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlLr4WTx8qB92ip3xH4ajP6WCCAL59IvCoMp FOHiNRgpFlBW/IGqVLmnjStwjtwrKZYr/22zlynlLhDy9axWJE3emj0eLaUIqDzu bBs/g1nrsfh5hXI50dFTq1D5831u56eC5lHIRugv3+w6Z9mPBL92t6FXFq/+Xwzh CbqzC++yzNMStPVFFf9rM6nk3n63R+WkAdg+0Igx7QitiY4C+mScKlVBhoj9WPEb DhfWT6ypYQuVJBRXju9C4PnCWXdC6E7BkazICexFopWPqRghJSrk0tlgl93JKqRQ MXmkocQ6Bs5l7mIPYFOWNugwFcJdSfBxtdO2R92k2Y88wcuAAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ1BBaP0VDNY2W3ti6ekXTT2FnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MzVj NTc3OS0wZTBiLTRjYTUtOTIxMy02ZWRkZGFkOWJjNTUvMjAxZDg3ODYtMGNjYy0z NzQ0LTkyMGUtNzM1ZTA5MjIyYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDM1YzU3NzktMGUwYi00Y2E1LTky MTMtNmVkZGRhZDliYzU1LzQzNWM1Nzc5LTBlMGItNGNhNS05MjEzLTZlZGRkYWQ5 YmM1NS5jcmwwHwYDVR0jBBgwFoAU26ZuQp5FEmEMtvQhWDW9hgEVBgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MzVjNTc3OS0wZTBiLTRjYTUtOTIxMy02ZWRk ZGFkOWJjNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF09911Hgcl4PBN1QUFCDhztznWGgHOPLUWrhC7k8t3azBUu5+V46Yd GH1MI1EiCPWjgB1d+O/0LCiuz0NVFaVQwfiSbo6YrlyyIMRxoYBSjTw6APIlUtpT HQQpit6wpINvzcKz+gIcgYI5CkHHr/JK0d4bcPPzTpV9XBl4YTr/RR3GaB5VvLor WCtHpCDlDzp0znvIkNmvvY6xWv78ZjmtHil/dnjYE8L/GrMWsNhwwH++CWcRqoDH Y47zSIzI+7YnDNqHpLc+O9CvJKk8c3m+0JagOEgPAhkcIvHAyiVJGl6Y15jd+2mJ AT4wevIVlQDAH7gQx9IxBxlbC/bCfmc= -----END CERTIFICATE-----Generated at Sun Apr 27 18:51:12 2025 by rpki-client