$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa File: cd00af14-086a-320d-acc3-d521035dec44.roa (raw, json) Hash identifier: o+pETKLqZkDVaiydRsj8lHYRy1UqjB2n+qgf5xJZig0= Subject key identifier: C5:67:56:B1:AE:4F:FC:F8:38:AF:0E:2B:9F:38:1C:AD:D0:A7:37:FF Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285848E5E1C02EE3244BB0DAC6DBA0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa Signing time: Sun 16 Feb 2025 04:21:52 +0000 ROA not before: Sun 16 Feb 2025 04:21:52 +0000 ROA not after: Sat 17 May 2025 03:21:52 +0000 asID: 36352 IP address blocks: 192.119.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:e1:c0:2e:e3:24:4b:b0:da:c6:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Feb 16 04:21:52 2025 GMT Not After : May 17 03:21:52 2025 GMT Subject: CN=3733a75e-f06e-4b85-a8cb-5efcc328b7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:53:f6:6e:52:5d:8d:a0:30:7a:e7:61:25: 90:5f:b6:e8:06:db:64:c4:d9:f6:f3:61:5a:80:fb: f7:42:dd:bb:66:c5:07:8f:57:f2:56:b2:e0:b7:59: f0:37:3c:b4:65:3f:65:7f:2f:6e:a8:e5:b6:aa:78: b9:c3:32:c7:29:93:cd:d0:2a:34:6e:3e:9e:40:b8: 89:f6:0b:36:ed:dd:0b:11:98:d2:ed:57:47:d6:97: 46:c6:ad:d6:ab:d7:c4:e0:96:54:71:56:78:2d:6a: e3:a0:11:01:b6:e7:02:68:f3:a5:bf:7d:f6:b9:71: d3:21:79:b9:99:e3:40:d7:de:68:12:41:15:68:f8: b8:23:4d:7a:aa:8b:a2:d8:dc:c7:a6:4b:41:1d:c3: 72:00:06:84:9a:55:a0:b7:0f:53:4b:0f:2f:1f:67: df:6a:f0:ba:1d:4d:fa:43:e1:e1:de:fa:1d:12:76: 60:f0:ae:92:bb:54:b4:5b:fe:f0:20:27:b7:d3:ae: 8b:ff:eb:0f:7f:bf:db:a1:03:47:c1:9c:41:e2:15: e0:a3:0a:d0:76:14:3d:32:7d:31:93:8f:61:7b:a7: f6:94:49:ea:6e:2b:a9:23:0c:8b:52:dc:81:c4:07: be:7b:f5:60:6d:15:e3:4a:16:82:d3:77:50:16:f4: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:67:56:B1:AE:4F:FC:F8:38:AF:0E:2B:9F:38:1C:AD:D0:A7:37:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:fe:eb:28:fb:3f:b8:e5:6c:3d:45:21:7f:d8:e5:6e:73:3b: db:86:a3:a4:dc:84:c3:64:b5:b0:02:c5:66:37:19:fa:18:c8: 1d:23:07:e9:c2:ef:71:1e:cd:25:76:eb:9b:60:f6:eb:6e:9f: 66:db:c9:b9:8d:72:b7:51:52:a1:b8:db:b0:7b:7d:63:75:a3: 08:b2:71:60:22:1b:b9:f2:45:b9:29:fa:36:fd:f9:b3:62:13: 8f:53:8b:83:7d:d1:42:97:5e:99:3c:f8:ed:0c:7e:7e:d5:dc: 77:54:30:51:ba:e7:11:dd:d2:b0:41:7a:e8:f3:a7:06:cf:66: 94:e0:5f:ed:54:ae:4a:46:21:8a:34:6e:1d:ab:fa:30:44:81: 4f:4b:50:aa:7d:33:3c:68:d4:bf:a8:bd:79:1a:4a:17:dd:1d: bd:57:b8:f6:b6:1e:e8:cc:16:45:fa:3c:65:b4:d9:2b:23:f7: c2:8f:55:ad:ec:7e:5c:e9:19:81:22:e5:3d:55:79:54:09:93: 9c:54:88:d5:90:3c:40:b0:60:02:83:1b:47:52:cc:0b:7b:57: 6f:75:43:1c:8c:0e:49:99:b7:fb:6c:91:64:4a:b3:60:fb:2f: 76:97:fd:c9:47:c9:4b:e6:ce:6f:dc:45:9e:df:ce:46:12:95: be:9a:78:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjl4cAu4yRLsNrG26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDIxNjA0MjE1MloXDTI1MDUxNzAzMjE1MlowLzEtMCsGA1UEAxMk MzczM2E3NWUtZjA2ZS00Yjg1LWE4Y2ItNWVmY2MzMjhiN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs9T9m5SXY2gMHrnYSWQX7boBttkxNn282Fa gPv3Qt27ZsUHj1fyVrLgt1nwNzy0ZT9lfy9uqOW2qni5wzLHKZPN0Co0bj6eQLiJ 9gs27d0LEZjS7VdH1pdGxq3Wq9fE4JZUcVZ4LWrjoBEBtucCaPOlv332uXHTIXm5 meNA195oEkEVaPi4I016qoui2NzHpktBHcNyAAaEmlWgtw9TSw8vH2ffavC6HU36 Q+Hh3vodEnZg8K6Su1S0W/7wICe3066L/+sPf7/boQNHwZxB4hXgowrQdhQ9Mn0x k49he6f2lEnqbiupIwyLUtyBxAe+e/VgbRXjShaC03dQFvRqUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVnVrGuT/z4OK8OK584HK3Qpzf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvY2QwMGFmMTQtMDg2YS0z MjBkLWFjYzMtZDUyMTAzNWRlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKb+6yj7P7jlbD1FIX/Y5W5zO9uGo6TchMNktbACxWY3GfoYyB0jB+nC 73EezSV265tg9utun2bbybmNcrdRUqG427B7fWN1owiycWAiG7nyRbkp+jb9+bNi E49Ti4N90UKXXpk8+O0Mfn7V3HdUMFG65xHd0rBBeujzpwbPZpTgX+1UrkpGIYo0 bh2r+jBEgU9LUKp9Mzxo1L+ovXkaShfdHb1XuPa2HujMFkX6PGW02Ssj98KPVa3s flzpGYEi5T1VeVQJk5xUiNWQPECwYAKDG0dSzAt7V291QxyMDkmZt/tskWRKs2D7 L3aX/clHyUvmzm/cRZ7fzkYSlb6aeKY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:48 2025 by rpki-client