$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/08f46338-72f8-3a30-b73b-1bc4272e2e62.roa File: 08f46338-72f8-3a30-b73b-1bc4272e2e62.roa (raw, json) Hash identifier: /QAbPwqRXNp0YPJTbaL/RtSQ0/QLiMs0HuNvETQsY/M= Subject key identifier: F4:BD:78:0E:14:F4:4B:29:67:A9:FA:F1:BA:72:4B:D4:F7:28:88:EB Certificate issuer: /CN=32e1eff5-1423-4100-89f4-3340efd8f1ea Certificate serial: 010D0C9F43285849AEAEC24252E89379C5580600 Authority key identifier: 25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/08f46338-72f8-3a30-b73b-1bc4272e2e62.roa Signing time: Tue 29 Apr 2025 02:36:36 +0000 ROA not before: Tue 29 Apr 2025 02:36:36 +0000 ROA not after: Mon 28 Jul 2025 02:36:36 +0000 asID: 34927 IP address blocks: 192.104.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:ae:c2:42:52:e8:93:79:c5:58:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e1eff5-1423-4100-89f4-3340efd8f1ea Validity Not Before: Apr 29 02:36:36 2025 GMT Not After : Jul 28 02:36:36 2025 GMT Subject: CN=640b8812-ced0-4dd1-a76b-453ff1198f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:81:d7:3b:f1:70:8a:de:3b:91:cb:9d:e9:bc: 3e:c1:e7:a9:c6:1e:31:a0:f9:24:db:45:81:9e:9d: b1:a8:aa:1e:65:5a:fe:41:35:12:b3:72:07:ab:ef: d5:99:15:7a:19:db:69:35:90:b6:6e:c3:80:bc:a9: e7:87:4b:e3:92:30:0b:0b:ac:02:c4:77:3f:5c:7f: 40:8a:57:62:e6:e5:a6:65:57:4c:0f:2c:34:6e:78: 97:fa:ce:43:d6:8e:ed:15:cc:ce:3d:43:f4:e8:df: d0:52:12:6d:c4:ff:3f:5b:b4:b7:06:03:1b:3a:78: 86:ca:65:ee:ed:4e:7c:5a:f4:f2:a6:67:43:55:db: 4c:cc:7a:c9:74:d1:af:12:1c:a6:ed:90:db:82:6a: 25:a2:85:3a:0f:fd:f2:53:24:98:37:67:45:12:1e: 5a:76:47:eb:b7:63:e5:ae:82:cf:bf:f5:0b:6e:91: a7:14:fa:6d:05:57:51:45:ee:5f:5e:bc:e1:08:fa: 5c:da:46:9d:bd:ac:dc:e2:58:29:12:69:2b:66:b7: 1f:be:81:22:67:4f:a5:5b:c1:f8:8c:6f:f3:9a:d6: da:c4:c0:ea:54:1d:67:c3:04:22:6f:83:44:f9:57: 6b:11:c1:70:da:47:3a:f7:9b:9b:47:5a:da:0d:2b: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BD:78:0E:14:F4:4B:29:67:A9:FA:F1:BA:72:4B:D4:F7:28:88:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/08f46338-72f8-3a30-b73b-1bc4272e2e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl X509v3 Authority Key Identifier: keyid:25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer sbgp-ipAddrBlock: critical IPv4: 192.104.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d6:4e:41:06:f6:ba:03:8a:6c:66:51:2d:3e:ba:2b:28:c5: ba:7e:33:bd:d9:4b:f3:8e:1f:e4:89:3a:ff:ff:56:28:1b:0d: 8a:bc:13:42:ea:5c:38:40:f3:5a:47:80:8a:eb:bb:b0:2b:ef: aa:a8:ff:b2:5e:23:4c:c1:47:51:2f:64:4c:c1:4e:e8:3f:25: 4d:1e:50:74:f4:92:29:11:44:59:4b:8c:16:32:39:8f:54:f5: fb:04:4f:90:d1:2b:ab:5f:0e:48:1e:fe:c0:30:03:b0:cf:1e: 94:50:e7:84:1b:99:0b:64:b0:73:c1:95:50:99:6b:ba:2d:2d: 2c:97:c1:ec:91:ec:d3:3a:f3:a1:04:28:2a:ab:00:55:b5:b2: 79:10:8f:4d:d9:00:9d:f4:cb:3a:cd:c2:2f:ab:5f:f5:1f:9d: 44:99:85:55:ff:4e:98:f6:2f:88:98:22:9f:e0:59:67:09:68: 48:6c:15:5b:ea:b1:7d:6f:63:01:bd:2c:92:cb:a8:d9:79:b9: 92:d7:c7:91:e3:2e:1b:5a:f6:70:0a:75:37:a2:1b:e1:7a:2e: d3:21:a7:5b:ef:1b:94:21:41:bf:3f:77:5e:b2:0f:95:63:ff: 77:72:80:b7:84:28:07:ec:8d:b7:64:e6:45:5e:4f:bd:1f:66: 85:f5:41:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmursJCUuiTecVYBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlMWVmZjUtMTQyMy00MTAwLTg5ZjQtMzM0MGVmZDhm MWVhMB4XDTI1MDQyOTAyMzYzNloXDTI1MDcyODAyMzYzNlowLzEtMCsGA1UEAxMk NjQwYjg4MTItY2VkMC00ZGQxLWE3NmItNDUzZmYxMTk4ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIHXO/Fwit47kcud6bw+weepxh4xoPkk20WB np2xqKoeZVr+QTUSs3IHq+/VmRV6GdtpNZC2bsOAvKnnh0vjkjALC6wCxHc/XH9A ildi5uWmZVdMDyw0bniX+s5D1o7tFczOPUP06N/QUhJtxP8/W7S3BgMbOniGymXu 7U58WvTypmdDVdtMzHrJdNGvEhym7ZDbgmolooU6D/3yUySYN2dFEh5adkfrt2Pl roLPv/ULbpGnFPptBVdRRe5fXrzhCPpc2kadvazc4lgpEmkrZrcfvoEiZ0+lW8H4 jG/zmtbaxMDqVB1nwwQib4NE+VdrEcFw2kc695ubR1raDSt6EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS9eA4U9EspZ6n68bpyS9T3KIjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUx ZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQwZWZkOGYxZWEvMDhmNDYzMzgtNzJmOC0z YTMwLWI3M2ItMWJjNDI3MmUyZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJlMWVmZjUtMTQyMy00MTAwLTg5 ZjQtMzM0MGVmZDhmMWVhLzMyZTFlZmY1LTE0MjMtNDEwMC04OWY0LTMzNDBlZmQ4 ZjFlYS5jcmwwHwYDVR0jBBgwFoAUJUAu2vdRljOCQujdZADl1BGI5/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUxZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQw ZWZkOGYxZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGifMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPWTkEG9roDimxmUS0+uisoxbp+M73ZS/OOH+SJOv//VigbDYq8E0Lq XDhA81pHgIrru7Ar76qo/7JeI0zBR1EvZEzBTug/JU0eUHT0kikRRFlLjBYyOY9U 9fsET5DRK6tfDkge/sAwA7DPHpRQ54QbmQtksHPBlVCZa7otLSyXweyR7NM686EE KCqrAFW1snkQj03ZAJ30yzrNwi+rX/UfnUSZhVX/Tpj2L4iYIp/gWWcJaEhsFVvq sX1vYwG9LJLLqNl5uZLXx5HjLhta9nAKdTeiG+F6LtMhp1vvG5QhQb8/d16yD5Vj /3dygLeEKAfsjbdk5kVeT70fZoX1QaQ= -----END CERTIFICATE-----Generated at Wed Apr 30 13:40:05 2025 by rpki-client