$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa File: 441ba8c3-51b4-353d-b914-e586c621a0f9.roa (raw, json) Hash identifier: lxkWjbQm3Hnag2Qq5nJ+UXYPsKD0efLMsayzL2bbyYc= Subject key identifier: B9:98:B2:74:BD:47:72:42:6A:9B:90:BD:08:0F:79:F7:E1:4C:89:67 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F43285849CE9A4C05ADCD252012B3C780 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 30148 IP address blocks: 192.161.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:4c:05:ad:cd:25:20:12:b3:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=44906b24-d5d3-4e63-ad55-4aa66690fab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:5d:a3:eb:8d:aa:8a:a7:14:92:d3:f0:9a: 40:ab:7b:f1:83:41:b3:b5:d2:42:86:b0:a5:f2:6a: 28:ec:c8:aa:87:d5:68:f3:93:99:4a:01:dc:cc:b7: 1e:d2:67:8a:66:c3:b9:21:e6:e8:be:f9:fc:8f:1a: a5:0a:69:51:09:c4:2a:03:b5:a3:89:6f:a0:c6:35: 68:da:46:55:fb:10:0d:ac:85:b8:86:1f:80:f3:da: 7e:f4:66:a1:37:ee:20:c8:7d:88:d6:4f:4f:9c:bb: 66:c2:75:e0:aa:5e:76:95:01:9f:1d:b5:a8:ef:67: 36:41:54:3a:02:95:ba:84:41:4c:97:27:9d:8d:a2: fd:cb:7f:e1:5b:9e:6d:61:a8:11:ab:80:30:2f:1e: d4:73:43:22:87:92:a8:c5:0a:1c:59:98:e2:6f:1e: 99:7c:ac:74:83:c7:dc:56:c2:bf:f7:e6:40:cd:d4: 2a:58:be:f0:57:0c:5b:20:9d:a9:7e:79:48:94:7c: 4a:12:96:d1:f0:86:6e:a8:50:b2:19:5c:b0:f6:2f: 10:fd:23:ef:10:ef:81:a0:f9:68:00:32:d1:46:f6: 4d:aa:1b:6e:77:78:57:ef:01:78:25:86:36:72:d7: c7:0e:5d:7f:a7:f8:ac:d7:20:ab:46:b5:45:08:b6: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:98:B2:74:BD:47:72:42:6A:9B:90:BD:08:0F:79:F7:E1:4C:89:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 192.161.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c3:2b:24:56:ae:46:b1:26:9b:6e:bd:1a:e9:c0:81:d0:50: d8:64:02:c1:37:e0:2a:4a:03:4b:ef:38:e1:4e:36:a7:ae:54: fb:f2:01:24:31:84:c5:60:0c:f6:0f:92:36:0f:85:5f:64:3b: a0:1a:ed:cf:ec:03:d4:aa:50:50:73:95:5a:eb:af:1a:44:f3: 47:1b:9d:83:d0:e9:19:cb:e8:1e:7c:e0:b3:e3:ce:08:70:8b: d0:b9:f4:84:82:a4:ab:ac:90:83:e5:32:d3:01:1f:d9:c8:7e: 1b:f1:c1:68:4a:fd:73:aa:40:36:7e:28:ee:e6:11:41:6c:57: 9b:96:1e:9e:d5:db:37:eb:ee:9d:f9:f1:c4:1b:a6:18:4f:53: 05:03:03:34:48:30:c2:8b:db:28:14:a4:b7:75:34:7c:61:da: f1:2c:69:7c:02:73:00:a4:44:f7:fb:20:30:cf:43:9f:24:55: eb:0a:78:33:3f:d6:60:2c:f6:28:db:14:31:5e:f2:9e:3a:3d: 18:a3:5b:b1:88:fc:81:83:bb:5c:7d:0a:67:ef:94:7c:87:ed: 75:eb:8d:60:00:e7:19:4f:3c:90:22:26:de:c0:c6:5a:76:97: 36:38:09:d1:ee:ce:3d:b9:9c:df:2a:bd:86:48:80:59:f8:df: b4:ba:39:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkwFrc0lIBKzx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NDQ5MDZiMjQtZDVkMy00ZTYzLWFkNTUtNGFhNjY2OTBmYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoBdo+uNqoqnFJLT8JpAq3vxg0GztdJChrCl 8moo7Miqh9Vo85OZSgHczLce0meKZsO5Iebovvn8jxqlCmlRCcQqA7WjiW+gxjVo 2kZV+xANrIW4hh+A89p+9GahN+4gyH2I1k9PnLtmwnXgql52lQGfHbWo72c2QVQ6 ApW6hEFMlyedjaL9y3/hW55tYagRq4AwLx7Uc0Mih5KoxQocWZjibx6ZfKx0g8fc VsK/9+ZAzdQqWL7wVwxbIJ2pfnlIlHxKEpbR8IZuqFCyGVyw9i8Q/SPvEO+BoPlo ADLRRvZNqhtud3hX7wF4JYY2ctfHDl1/p/is1yCrRrVFCLbXcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmYsnS9R3JCapuQvQgPeffhTIlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvNDQxYmE4YzMtNTFiNC0z NTNkLWI5MTQtZTU4NmM2MjFhMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLDKyRWrkaxJptuvRrpwIHQUNhkAsE34CpKA0vvOOFONqeuVPvyASQx hMVgDPYPkjYPhV9kO6Aa7c/sA9SqUFBzlVrrrxpE80cbnYPQ6RnL6B584LPjzghw i9C59ISCpKuskIPlMtMBH9nIfhvxwWhK/XOqQDZ+KO7mEUFsV5uWHp7V2zfr7p35 8cQbphhPUwUDAzRIMMKL2ygUpLd1NHxh2vEsaXwCcwCkRPf7IDDPQ58kVesKeDM/ 1mAs9ijbFDFe8p46PRijW7GI/IGDu1x9CmfvlHyH7XXrjWAA5xlPPJAiJt7Axlp2 lzY4CdHuzj25nN8qvYZIgFn437S6OXM= -----END CERTIFICATE-----Generated at Sun Jun 15 04:59:37 2025 by rpki-client