$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa File: 9d8b4a39-d907-3704-bc98-36248d887277.roa (raw, json) Hash identifier: QmoCWflGrzpCmelm3H5Jq91IKMt3hKI9JweL6igCDSA= Subject key identifier: F6:32:BE:5C:61:64:26:AE:37:0A:86:D7:26:A9:64:98:AE:82:DA:5A Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F432858497ED0EA916556FC630E3B2900 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa Signing time: Fri 11 Apr 2025 23:06:37 +0000 ROA not before: Fri 11 Apr 2025 23:06:37 +0000 ROA not after: Thu 10 Jul 2025 23:06:37 +0000 asID: 46970 IP address blocks: 192.189.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:d0:ea:91:65:56:fc:63:0e:3b:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Apr 11 23:06:37 2025 GMT Not After : Jul 10 23:06:37 2025 GMT Subject: CN=85ccc2cd-f193-4e67-bd45-824a4477f7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:57:da:ee:7f:f7:a6:bc:9e:0a:f7:81:f6: 87:65:a9:c1:7f:0d:25:7d:1c:c3:1c:c0:64:17:ef: 67:4b:99:26:dc:f0:f6:7e:46:c2:03:93:06:6e:5e: bb:3e:ce:74:81:bd:ec:7f:a5:60:95:d7:8a:51:d7: 9d:47:80:cb:9e:99:63:0c:d5:da:b1:ef:14:ab:ec: 57:88:d4:f7:ca:68:4e:69:97:f3:a7:07:0f:11:19: 01:19:fd:fb:36:ad:6d:82:47:82:75:23:0a:7d:be: 5f:1a:0a:f8:0e:fa:18:29:78:82:a1:d9:8d:5a:4f: 49:31:92:e0:07:00:0f:ed:ad:17:66:7e:5b:44:d3: c6:79:ca:38:77:9b:50:cf:f6:58:a2:4d:2e:0a:96: e4:05:06:c7:a7:83:3f:66:05:c7:1e:6a:1f:05:62: 29:f3:c3:fd:29:14:f6:22:16:64:b5:0b:e1:7d:06: d4:56:b2:57:13:fd:36:ae:f7:22:a3:9f:48:f7:cc: 8e:15:65:cc:f6:ec:c4:7c:13:28:6d:7e:ca:17:5c: b1:f9:47:30:82:6f:7d:48:eb:31:52:b9:b7:7a:57: e1:35:87:76:94:8a:cf:b8:15:98:20:20:af:fe:30: e2:bd:bc:77:b4:ac:da:07:c0:fc:81:c6:5a:c6:0c: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:32:BE:5C:61:64:26:AE:37:0A:86:D7:26:A9:64:98:AE:82:DA:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: 192.189.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f9:91:32:86:44:a3:90:dc:7f:4d:2e:d3:0d:45:4a:5d:dc: 2d:88:89:50:7d:50:35:2b:0e:46:b1:24:90:6b:a5:0f:1a:97: 86:87:09:d3:e4:d2:90:45:4c:cd:75:e6:36:cf:2c:e0:e4:e6: 2c:21:8a:00:95:47:b2:00:ec:1d:4c:d2:a6:96:db:ef:46:ed: 8c:2c:5a:94:2e:c4:34:07:60:0a:56:46:9a:78:7f:6a:c7:ed: 3d:2d:db:84:c3:3e:94:4d:bf:c6:fb:2c:74:a8:ec:d6:7e:ec: 9c:f3:7e:b5:b7:3f:af:ad:a3:24:2a:56:f1:12:af:09:6e:29: 24:65:be:bc:94:bb:f2:3e:40:05:ca:cc:5e:9b:ef:83:94:7d: d1:9f:cb:f1:2f:d0:0f:10:a0:d7:d3:95:c6:07:56:01:6d:a1: 3d:55:7c:fc:86:f7:c0:1f:a6:8b:28:0b:d2:85:2a:2f:66:c0: 2f:36:08:4d:76:e0:aa:50:45:55:74:65:c5:52:24:0f:28:b5: 86:c5:d9:ac:3b:2d:bf:f2:e9:ba:ca:65:12:a2:cc:66:84:a5: 00:20:08:b7:d5:b6:45:cf:4b:e1:0c:77:fc:d0:84:26:96:ec: 8a:c9:1b:ab:aa:20:7c:c8:bf:76:62:09:1f:3c:c7:0a:6c:87: 8a:37:85:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl+0OqRZVb8Yw47KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI1MDQxMTIzMDYzN1oXDTI1MDcxMDIzMDYzN1owLzEtMCsGA1UEAxMk ODVjY2MyY2QtZjE5My00ZTY3LWJkNDUtODI0YTQ0NzdmN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphpX2u5/96a8ngr3gfaHZanBfw0lfRzDHMBk F+9nS5km3PD2fkbCA5MGbl67Ps50gb3sf6VgldeKUdedR4DLnpljDNXase8Uq+xX iNT3ymhOaZfzpwcPERkBGf37Nq1tgkeCdSMKfb5fGgr4DvoYKXiCodmNWk9JMZLg BwAP7a0XZn5bRNPGeco4d5tQz/ZYok0uCpbkBQbHp4M/ZgXHHmofBWIp88P9KRT2 IhZktQvhfQbUVrJXE/02rvcio59I98yOFWXM9uzEfBMobX7KF1yx+Ucwgm99SOsx Urm3elfhNYd2lIrPuBWYICCv/jDivbx3tKzaB8D8gcZaxgz6OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYyvlxhZCauNwqG1yapZJiugtpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvOWQ4YjRhMzktZDkwNy0z NzA0LWJjOTgtMzYyNDhkODg3Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr5kTKGRKOQ3H9NLtMNRUpd3C2IiVB9UDUrDkaxJJBrpQ8al4aHCdPk 0pBFTM115jbPLODk5iwhigCVR7IA7B1M0qaW2+9G7YwsWpQuxDQHYApWRpp4f2rH 7T0t24TDPpRNv8b7LHSo7NZ+7JzzfrW3P6+toyQqVvESrwluKSRlvryUu/I+QAXK zF6b74OUfdGfy/Ev0A8QoNfTlcYHVgFtoT1VfPyG98AfposoC9KFKi9mwC82CE12 4KpQRVV0ZcVSJA8otYbF2aw7Lb/y6brKZRKizGaEpQAgCLfVtkXPS+EMd/zQhCaW 7IrJG6uqIHzIv3ZiCR88xwpsh4o3hfg= -----END CERTIFICATE-----Generated at Thu May 1 18:44:57 2025 by rpki-client