$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa File: 5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa (raw, json) Hash identifier: kDJnDd0pJWP+tsmOBPZnPG0M8GLl0xaDfoc+2jc2g1I= Subject key identifier: 82:99:0E:CB:E4:D1:35:1B:5D:F9:A5:89:06:47:2D:60:A8:85:D7:26 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F43285849CE9A53FB66E66048E71BAD50 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 192.190.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:53:fb:66:e6:60:48:e7:1b:ad:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=8c17d099-d1f2-45f1-8eea-44a17006dcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:20:5c:77:10:f0:a3:31:07:6e:5c:e3:63: a0:28:73:2b:c7:88:54:c0:05:c5:d6:74:84:46:32: da:28:1f:3c:b1:6d:e2:46:c0:1c:f0:2c:54:76:fa: 10:17:b9:0f:ad:0e:9a:70:e5:bc:e7:e5:9d:72:05: fa:85:1c:f5:75:2e:c3:5e:0f:a5:ca:49:23:88:e1: 36:1a:5a:b1:e4:97:3a:af:7a:d3:98:8f:fe:ee:03: 09:97:32:c0:ad:fa:a6:f8:2c:9f:40:9d:7e:7d:aa: 65:40:79:38:dd:ea:a9:bc:1b:77:fd:a0:19:7e:5e: 10:cb:0b:73:a4:1c:8a:f9:67:f2:f0:58:f0:ac:11: 91:a0:ea:8a:92:10:76:22:6c:fa:1d:84:f5:91:f6: 4f:04:22:09:36:8b:6a:9b:a5:29:22:d7:dd:31:a2: d5:08:59:31:dd:30:88:cf:f5:6b:ed:b5:db:34:60: ee:2e:ac:ca:06:37:19:7c:10:55:07:2c:1e:81:72: 5f:a5:73:64:a7:cc:a1:d6:29:24:76:79:8e:22:21: 32:00:af:00:bd:bf:10:61:51:e0:bc:31:b9:ee:e2: 39:e4:70:71:ea:ae:2b:84:6e:6e:e5:85:0d:46:f8: e8:da:f4:df:d5:ed:d9:ba:a3:46:ac:82:2a:09:be: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:99:0E:CB:E4:D1:35:1B:5D:F9:A5:89:06:47:2D:60:A8:85:D7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ee:9b:6f:f0:ee:82:2d:e0:63:e9:02:23:c1:a5:8e:ca:fb: 3f:fa:4b:18:86:ea:ff:89:db:98:aa:5e:62:03:c9:8c:b2:40: 04:46:9c:0f:84:bf:62:25:5e:83:c5:ec:40:ee:5d:19:b0:6e: b8:f1:12:bd:98:3f:ff:de:e5:8b:5a:ef:61:6b:8a:b7:5a:8b: 38:f3:68:5b:b1:18:b0:64:28:6a:83:9a:b5:66:7d:b1:89:53: 34:5b:1c:3c:bc:59:31:a1:3a:bb:cd:8c:9d:cd:eb:4e:48:09: c2:cb:31:44:6c:5f:25:9b:b0:74:07:24:4f:03:6f:97:2b:9f: 64:62:87:52:9f:7f:e1:49:1e:04:c6:d4:c2:2b:7e:6a:74:3f: 98:fa:51:ad:65:a6:e7:26:58:f8:c0:e0:9c:ad:5c:cd:bd:31: da:18:bf:69:ec:69:34:01:c4:99:7e:bd:2f:9c:8e:f8:b6:6c: a9:ec:3b:44:2c:5f:05:80:89:45:6a:66:d0:c3:09:82:5e:86: a8:83:f4:3e:5b:eb:81:8e:c9:5d:93:ae:3e:c8:37:52:98:25: 5f:c1:7c:4e:e6:62:7d:d6:13:e4:2c:75:e6:b5:0b:53:da:49: a6:50:cf:f0:72:3f:55:f0:65:87:ea:da:86:2a:25:9f:45:81: 4c:fc:c6:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlP7ZuZgSOcbrVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OGMxN2QwOTktZDFmMi00NWYxLThlZWEtNDRhMTcwMDZkY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssUgXHcQ8KMxB25c42OgKHMrx4hUwAXF1nSE RjLaKB88sW3iRsAc8CxUdvoQF7kPrQ6acOW85+WdcgX6hRz1dS7DXg+lykkjiOE2 Glqx5Jc6r3rTmI/+7gMJlzLArfqm+CyfQJ1+faplQHk43eqpvBt3/aAZfl4Qywtz pByK+Wfy8FjwrBGRoOqKkhB2Imz6HYT1kfZPBCIJNotqm6UpItfdMaLVCFkx3TCI z/Vr7bXbNGDuLqzKBjcZfBBVBywegXJfpXNkp8yh1ikkdnmOIiEyAK8Avb8QYVHg vDG57uI55HBx6q4rhG5u5YUNRvjo2vTf1e3ZuqNGrIIqCb6x/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKZDsvk0TUbXfmliQZHLWCohdcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNWNhYjY3YjUtMTQ3YS0z ZTFhLTliMTUtYjZhNTJiM2U3NmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELum2/w7oIt4GPpAiPBpY7K+z/6SxiG6v+J25iqXmIDyYyyQARGnA+E v2IlXoPF7EDuXRmwbrjxEr2YP//e5Yta72FrirdaizjzaFuxGLBkKGqDmrVmfbGJ UzRbHDy8WTGhOrvNjJ3N605ICcLLMURsXyWbsHQHJE8Db5crn2Rih1Kff+FJHgTG 1MIrfmp0P5j6Ua1lpucmWPjA4JytXM29MdoYv2nsaTQBxJl+vS+cjvi2bKnsO0Qs XwWAiUVqZtDDCYJehqiD9D5b64GOyV2Trj7IN1KYJV/BfE7mYn3WE+Qsdea1C1Pa SaZQz/ByP1XwZYfq2oYqJZ9FgUz8xkM= -----END CERTIFICATE-----Generated at Sun Jun 15 00:28:02 2025 by rpki-client