$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa File: f304bfed-6aa3-3d7a-a7df-324800baf33c.roa (raw, json) Hash identifier: 0D/kVSuaOs1drTYaRyvWHvXk0WFQSKIo3uLmFTSRmV0= Subject key identifier: 26:4D:FA:7C:6F:F3:41:2C:9D:F7:10:A5:43:FC:AB:57:9D:6D:29:50 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F432858494B63FFFA57FC407CEACAF800 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 198949 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:ff:fa:57:fc:40:7c:ea:ca:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=d50a8e15-ce45-43ec-9df7-652ae87c2957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:62:d5:fe:c3:08:0f:d3:5f:6b:61:14:de: ce:eb:87:6b:07:3e:67:7f:28:49:5e:dd:ab:d2:f1: 41:03:e4:03:59:88:08:f2:82:7e:f2:f9:a3:29:e3: 6c:fe:1a:e2:75:82:c7:71:2f:88:cb:95:c5:08:f6: c3:08:7e:a6:11:b3:ae:9c:87:7e:c9:c7:95:0e:b8: 3b:9a:ed:b8:99:bd:b8:e2:84:f7:30:4c:ab:b8:a6: 40:ec:40:5b:20:37:e4:66:c0:bf:11:df:07:9e:32: e3:07:8b:52:73:a4:43:d0:72:09:c1:83:f5:af:6c: f3:d2:71:b4:9a:4a:6f:74:84:fa:20:13:b3:b6:82: 7f:fc:c3:84:e8:f6:f2:32:fe:f8:cc:c6:26:3d:2f: d7:b7:18:ce:64:4d:c1:01:20:82:e4:87:97:3b:cc: 9c:0a:f7:23:6b:3c:71:67:a7:9f:64:a7:b4:77:06: ea:cb:ba:b8:1f:d6:be:c7:cf:12:cb:01:2f:e1:15: 48:ce:d2:2e:21:13:15:dd:42:28:c4:04:8e:bc:5c: 56:7e:05:4d:bd:1b:66:f0:ad:a2:cf:38:e2:67:57: b1:c8:dc:7c:aa:f4:1e:a9:55:9b:7d:f3:32:78:36: ab:31:6c:4b:41:22:6a:37:4b:b7:d0:48:d9:74:99: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4D:FA:7C:6F:F3:41:2C:9D:F7:10:A5:43:FC:AB:57:9D:6D:29:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d8:22:74:91:53:37:11:45:25:a7:3d:03:9c:9f:ee:01:45: ee:ba:d6:20:db:6d:2a:ac:04:6b:48:82:23:09:e1:7a:0c:11: 72:39:73:f9:6d:ea:e6:b3:88:5f:58:c7:fc:e6:94:d7:0c:af: 53:da:6f:30:c1:7c:a8:8c:73:25:0c:29:fb:79:98:43:3b:64: 37:d3:fc:c1:06:7e:53:d0:96:64:dd:cb:43:72:d3:bb:46:75: 42:72:04:a7:43:96:fe:d2:1b:aa:25:99:b1:28:d3:d1:2d:2e: 36:65:fc:a4:bb:95:5d:17:0d:37:d0:31:47:57:fd:24:76:a1: a9:da:62:76:90:b8:a0:62:d2:8f:b7:91:33:ee:b0:6e:3f:9c: f6:64:f6:1c:8d:a4:2c:67:fc:80:84:c3:9e:8c:be:fe:4d:06: 78:5a:2e:10:1d:bc:db:4b:a6:45:1a:41:68:88:f3:ec:58:2c: b0:3f:c9:bb:aa:7d:45:86:d2:fb:15:41:85:c9:b2:cc:8a:36: 25:a7:ae:1e:f0:b0:5f:45:13:77:ca:14:8f:2b:c3:f7:fb:85: a9:ce:46:7c:22:bc:4d:f9:59:90:c9:bd:ee:62:02:2c:ae:1b: e8:49:22:9f:3d:b1:a6:0b:4b:25:60:0f:21:2c:e7:0e:da:43: 27:da:f2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY//6V/xAfOrK+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDUwYThlMTUtY2U0NS00M2VjLTlkZjctNjUyYWU4N2MyOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Fi1f7DCA/TX2thFN7O64drBz5nfyhJXt2r 0vFBA+QDWYgI8oJ+8vmjKeNs/hridYLHcS+Iy5XFCPbDCH6mEbOunId+yceVDrg7 mu24mb244oT3MEyruKZA7EBbIDfkZsC/Ed8HnjLjB4tSc6RD0HIJwYP1r2zz0nG0 mkpvdIT6IBOztoJ//MOE6PbyMv74zMYmPS/XtxjOZE3BASCC5IeXO8ycCvcjazxx Z6efZKe0dwbqy7q4H9a+x88SywEv4RVIztIuIRMV3UIoxASOvFxWfgVNvRtm8K2i zzjiZ1exyNx8qvQeqVWbffMyeDarMWxLQSJqN0u30EjZdJlEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZN+nxv80EsnfcQpUP8q1edbSlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvZjMwNGJmZWQtNmFhMy0z ZDdhLWE3ZGYtMzI0ODAwYmFmMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbYInSRUzcRRSWnPQOcn+4BRe661iDbbSqsBGtIgiMJ4XoMEXI5c/lt 6uaziF9Yx/zmlNcMr1PabzDBfKiMcyUMKft5mEM7ZDfT/MEGflPQlmTdy0Ny07tG dUJyBKdDlv7SG6olmbEo09EtLjZl/KS7lV0XDTfQMUdX/SR2oanaYnaQuKBi0o+3 kTPusG4/nPZk9hyNpCxn/ICEw56Mvv5NBnhaLhAdvNtLpkUaQWiI8+xYLLA/ybuq fUWG0vsVQYXJssyKNiWnrh7wsF9FE3fKFI8rw/f7hanORnwivE35WZDJve5iAiyu G+hJIp89saYLSyVgDyEs5w7aQyfa8qA= -----END CERTIFICATE-----Generated at Tue Apr 29 14:36:34 2025 by rpki-client