$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa File: f304bfed-6aa3-3d7a-a7df-324800baf33c.roa (raw, json) Hash identifier: wR8b7alBI6yWiBOXLv0peOBOEhRT1xC/FwA/bL73W9g= Subject key identifier: A2:04:B9:58:AB:8C:90:A9:B5:54:8B:56:D5:38:09:5C:35:02:80:30 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584A2ABADFA0DADE346276DDA180 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 198949 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:df:a0:da:de:34:62:76:dd:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=a4646eef-8487-44a6-80c8-81a3c8ba588d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2d:df:d7:e6:ac:63:c7:5b:90:4f:4f:20:f2: 12:28:49:67:7d:aa:85:4c:f2:a6:35:42:e5:67:da: 3f:b3:4a:82:c8:21:75:ee:18:fd:b9:c1:9c:c3:43: 0f:99:a8:cd:ba:aa:56:59:22:84:f9:97:ab:8b:37: c5:a4:82:ba:a6:65:3e:a8:1b:20:23:1f:bf:37:01: 35:b6:12:59:f4:71:1e:68:16:68:a5:c6:c8:71:89: ad:92:0f:f5:92:8f:22:a1:bb:ae:78:70:0d:9c:fe: a7:a1:ea:44:31:93:53:0d:a2:d0:f8:64:cc:ee:8b: 86:e8:f0:cc:41:3d:ca:b1:5b:7f:f0:59:2f:6f:82: ce:d7:ad:ff:e3:5e:86:50:e4:54:91:04:b1:d5:44: 4a:46:0c:c4:52:3b:5f:2e:14:43:48:c5:10:65:9c: bd:d2:ee:c2:32:b6:74:ad:6c:3c:77:94:20:8d:84: 5d:4a:9f:50:e3:d5:d2:92:0b:fd:47:cf:f6:68:d1: 07:00:b6:e6:02:76:d0:29:dc:1d:38:44:03:42:71: dd:1e:8b:e7:b2:fa:d0:12:e7:dd:53:57:dd:5b:72: 97:9d:3c:b9:17:a0:28:9f:e8:4c:3b:4a:14:01:81: 1b:c0:bb:ce:39:ea:3e:89:61:f6:96:3e:66:74:95: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:B9:58:AB:8C:90:A9:B5:54:8B:56:D5:38:09:5C:35:02:80:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2e:3a:79:5a:e7:13:66:b8:af:20:e4:bb:47:51:c5:61:82: e4:45:14:d6:89:dd:fd:60:7f:59:64:e9:ec:0a:a2:85:7c:be: 48:e6:ac:61:c6:de:b0:80:a3:7d:5a:0a:1d:09:a4:03:0c:28: d1:7d:20:08:6a:f6:bd:52:10:82:84:a4:3d:18:87:ed:c4:bb: ba:5f:4f:6d:d5:f0:12:90:47:9c:3f:36:53:06:53:f9:5b:bc: 1b:66:ba:ab:20:f7:06:2c:5a:93:8f:b3:dc:45:6a:c3:e7:c2: 52:63:3c:99:79:e0:4a:e9:c7:58:77:a0:d8:ee:bb:dc:0e:8f: 26:69:aa:aa:10:ba:1a:67:b8:fd:85:80:0b:06:11:db:ae:da: 73:e9:2f:02:cb:ff:91:ef:81:69:65:2c:13:82:c9:24:86:88: c8:f5:8d:e3:00:30:93:02:aa:c6:1a:82:d8:54:78:4d:71:9b: 64:ee:b1:c6:4d:e6:69:5b:7f:59:77:14:7a:52:09:32:f5:1f: 94:14:20:18:dd:97:73:08:23:93:88:74:89:08:18:c3:4a:5e: 31:12:b7:25:95:6c:d5:73:95:65:a0:ca:2e:ae:9b:d7:2b:1c: d4:80:34:62:f0:3b:02:82:1f:a6:9e:8e:7b:cb:b6:93:b6:52: d2:15:ac:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqut+g2t40YnbdoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk YTQ2NDZlZWYtODQ4Ny00NGE2LTgwYzgtODFhM2M4YmE1ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC3f1+asY8dbkE9PIPISKElnfaqFTPKmNULl Z9o/s0qCyCF17hj9ucGcw0MPmajNuqpWWSKE+ZerizfFpIK6pmU+qBsgIx+/NwE1 thJZ9HEeaBZopcbIcYmtkg/1ko8iobuueHANnP6noepEMZNTDaLQ+GTM7ouG6PDM QT3KsVt/8Fkvb4LO163/416GUORUkQSx1URKRgzEUjtfLhRDSMUQZZy90u7CMrZ0 rWw8d5QgjYRdSp9Q49XSkgv9R8/2aNEHALbmAnbQKdwdOEQDQnHdHovnsvrQEufd U1fdW3KXnTy5F6Aon+hMO0oUAYEbwLvOOeo+iWH2lj5mdJWp+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIEuVirjJCptVSLVtU4CVw1AoAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvZjMwNGJmZWQtNmFhMy0z ZDdhLWE3ZGYtMzI0ODAwYmFmMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwuOnla5xNmuK8g5LtHUcVhguRFFNaJ3f1gf1lk6ewKooV8vkjmrGHG 3rCAo31aCh0JpAMMKNF9IAhq9r1SEIKEpD0Yh+3Eu7pfT23V8BKQR5w/NlMGU/lb vBtmuqsg9wYsWpOPs9xFasPnwlJjPJl54Erpx1h3oNjuu9wOjyZpqqoQuhpnuP2F gAsGEduu2nPpLwLL/5HvgWllLBOCySSGiMj1jeMAMJMCqsYagthUeE1xm2TuscZN 5mlbf1l3FHpSCTL1H5QUIBjdl3MII5OIdIkIGMNKXjEStyWVbNVzlWWgyi6um9cr HNSANGLwOwKCH6aejnvLtpO2UtIVrNM= -----END CERTIFICATE-----Generated at Mon Jun 16 14:50:09 2025 by rpki-client