$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa File: 48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa (raw, json) Hash identifier: tAkOVAuLouLhUdYlbnnVJTcPZARJpIpVQzr4a1G4vqc= Subject key identifier: AA:CA:2C:84:9A:55:66:F6:67:2D:00:9A:FF:22:15:D4:73:68:16:8C Certificate issuer: /CN=9251b7c9-cc55-4637-b464-be2f1813b4c2 Certificate serial: 010D0C9F432858491ED6E82C299F0FDC68E25D80 Authority key identifier: 00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 8075 IP address blocks: 195.85.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e8:2c:29:9f:0f:dc:68:e2:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9251b7c9-cc55-4637-b464-be2f1813b4c2 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=30e1e51a-d79d-4f6b-a6b7-29f4ac295260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c3:2e:e3:93:a2:51:ef:da:33:6c:24:ca:45: 88:ab:6a:6e:22:6f:ef:cf:a8:5a:8c:4a:4b:21:c9: e6:b8:a2:e4:18:c0:4a:36:06:cc:25:a5:b4:17:7b: 34:2f:fb:77:14:31:79:3e:82:51:a7:cb:f7:7f:42: b5:24:0a:39:59:55:f5:0a:6f:8d:87:67:33:2b:46: 9c:76:19:f4:bf:fa:06:31:a8:65:42:f7:5b:eb:ae: 42:9d:c0:cf:0a:cc:ae:78:f9:38:72:ee:2f:9e:c9: 2a:0f:71:ec:81:56:d9:8b:d6:e6:44:59:31:32:49: 04:96:d0:96:4c:37:4a:31:e8:6d:3f:c1:aa:f4:da: 96:5b:63:c1:e2:bb:01:a3:96:40:e9:20:27:70:81: 3b:58:84:22:1c:d1:3c:c3:42:4f:92:12:c0:cd:08: ea:ab:4c:1b:88:2b:17:12:92:69:fa:a5:cf:bf:46: 59:f7:be:85:a4:61:78:fd:9d:27:f6:00:7e:17:e8: d7:cf:cb:10:56:d0:c7:23:e0:9b:ce:e3:c8:14:4c: 14:dc:eb:44:86:7c:bb:53:93:29:68:32:89:da:d0: 0a:03:e9:7e:13:4a:2d:26:58:bc:0e:2d:5a:37:c0: 00:1e:21:2e:17:c1:2a:fb:4b:e4:f2:63:f9:2c:d5: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CA:2C:84:9A:55:66:F6:67:2D:00:9A:FF:22:15:D4:73:68:16:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl X509v3 Authority Key Identifier: keyid:00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer sbgp-ipAddrBlock: critical IPv4: 195.85.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:80:65:8b:52:f5:fc:3e:85:0e:ba:7f:9c:f5:9c:30:08:92: f0:76:b5:c0:21:ea:37:e0:79:6a:58:33:d3:44:8f:21:2a:90: 83:81:7a:c3:9f:25:c5:a5:e4:5b:72:b9:2d:e4:3d:2f:94:96: 9b:54:28:f0:0c:29:0e:50:ed:05:cb:e5:47:7f:50:e7:8e:4a: ac:29:f3:37:15:9f:06:c5:68:3d:89:03:16:eb:30:8c:76:64: 73:e0:17:70:9d:17:a6:f3:1d:ec:44:5d:30:50:48:15:dc:5d: 79:56:b8:e5:4a:96:0d:60:3b:71:3f:44:76:99:54:b3:08:3b: 81:fa:1e:17:14:06:76:c0:b9:e3:b5:b0:bd:d3:66:fe:b9:f6: aa:39:58:02:b0:9a:c1:2a:ae:44:07:c7:ca:a0:11:d2:d6:f1: 42:3b:25:5b:f7:ac:c8:32:52:dd:2c:46:00:8f:2f:81:61:a3: 10:95:ec:a1:9c:4e:0d:dc:83:83:0d:a9:c6:4e:a0:d2:10:a1: f8:77:3c:73:0a:30:9f:78:77:7a:ca:62:63:57:9e:dc:7c:d8: 93:ef:84:51:ce:a7:68:66:ca:1d:59:7d:0d:da:23:98:f0:44: 0b:01:70:e8:c9:b9:6a:e9:d1:b6:27:14:54:c9:d4:94:2c:82: 78:b6:bc:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ugsKZ8P3GjiXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI1MWI3YzktY2M1NS00NjM3LWI0NjQtYmUyZjE4MTNi NGMyMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MzBlMWU1MWEtZDc5ZC00ZjZiLWE2YjctMjlmNGFjMjk1MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMMu45OiUe/aM2wkykWIq2puIm/vz6hajEpL IcnmuKLkGMBKNgbMJaW0F3s0L/t3FDF5PoJRp8v3f0K1JAo5WVX1Cm+Nh2czK0ac dhn0v/oGMahlQvdb665CncDPCsyuePk4cu4vnskqD3HsgVbZi9bmRFkxMkkEltCW TDdKMehtP8Gq9NqWW2PB4rsBo5ZA6SAncIE7WIQiHNE8w0JPkhLAzQjqq0wbiCsX EpJp+qXPv0ZZ976FpGF4/Z0n9gB+F+jXz8sQVtDHI+CbzuPIFEwU3OtEhny7U5Mp aDKJ2tAKA+l+E0otJli8Di1aN8AAHiEuF8Eq+0vk8mP5LNUmdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrKLISaVWb2Zy0Amv8iFdRzaBaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MjUx YjdjOS1jYzU1LTQ2MzctYjQ2NC1iZTJmMTgxM2I0YzIvNDhmMGYxMzAtNTkxMC0z ZWMzLWE4M2EtZjFlYzljNTdiMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTI1MWI3YzktY2M1NS00NjM3LWI0 NjQtYmUyZjE4MTNiNGMyLzkyNTFiN2M5LWNjNTUtNDYzNy1iNDY0LWJlMmYxODEz YjRjMi5jcmwwHwYDVR0jBBgwFoAUACM3wv9QJgAv/XRYZAvPT5D4MkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MjUxYjdjOS1jYzU1LTQ2MzctYjQ2NC1iZTJm MTgxM2I0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+AZYtS9fw+hQ66f5z1nDAIkvB2tcAh6jfgeWpYM9NEjyEqkIOBesOf JcWl5FtyuS3kPS+UlptUKPAMKQ5Q7QXL5Ud/UOeOSqwp8zcVnwbFaD2JAxbrMIx2 ZHPgF3CdF6bzHexEXTBQSBXcXXlWuOVKlg1gO3E/RHaZVLMIO4H6HhcUBnbAueO1 sL3TZv659qo5WAKwmsEqrkQHx8qgEdLW8UI7JVv3rMgyUt0sRgCPL4FhoxCV7KGc Tg3cg4MNqcZOoNIQofh3PHMKMJ94d3rKYmNXntx82JPvhFHOp2hmyh1ZfQ3aI5jw RAsBcOjJuWrp0bYnFFTJ1JQsgni2vAw= -----END CERTIFICATE-----Generated at Sun Apr 27 19:05:14 2025 by rpki-client