$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa File: a903e824-1b66-364f-8ea4-9393ef2de488.roa (raw, json) Hash identifier: nU7zkn00RylR8o3sv8A5+e+59E6pzEu+YCz9Bjpy3Eg= Subject key identifier: 5A:EA:7B:58:4A:92:07:53:FB:A8:9F:A1:10:AD:86:B8:3B:A5:BD:A3 Certificate issuer: /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Certificate serial: 010D0C9F432858494303EC7ED1C6D107C5CBDAC0 Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 198949 IP address blocks: 192.245.221.0/24 maxlen: 24 192.245.222.0/23 maxlen: 24 192.245.224.0/24 maxlen: 24 199.33.130.0/23 maxlen: 24 199.33.132.0/23 maxlen: 24 199.33.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:ec:7e:d1:c6:d1:07:c5:cb:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=17ab019a-44dc-45c6-ae03-93cbe248037a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:be:b1:dc:dc:9d:02:40:9a:2d:89:4d:83: 86:06:f4:98:90:3b:c4:af:83:53:07:98:ef:91:82: 4d:9b:e4:f0:b5:16:b5:61:4d:82:e8:b1:69:be:bf: b6:51:ca:0b:de:8e:09:60:e5:b0:77:3f:a0:8e:06: 4d:f0:9a:20:73:c7:61:72:aa:6b:4b:82:93:46:5a: da:64:c8:f9:4c:7e:89:22:06:95:ac:35:97:0a:4d: d9:ef:43:47:07:e6:24:48:94:e1:c3:d2:f9:19:4d: a7:a9:3d:83:c6:82:ca:97:54:10:17:f0:8b:a5:ef: d3:16:e5:9b:96:c7:03:fd:25:51:72:0d:18:f4:5e: 36:7a:7c:e2:de:8d:4f:fd:a4:9e:6e:3d:25:25:37: 97:58:50:c2:4a:1e:e1:34:ab:8d:cb:1f:cc:cb:65: 65:93:c4:47:2f:0f:d6:c8:cd:ff:01:56:5d:2d:ce: ba:93:ca:71:4a:d8:13:4c:fb:a5:0e:03:f4:02:3e: 15:f4:37:f4:43:17:85:61:69:8c:81:51:60:ac:ae: c5:f9:24:ce:ef:96:ec:47:08:e6:a6:8b:b1:96:df: 16:b5:99:59:7b:79:c8:ba:53:8e:f7:33:f2:af:1e: e2:a3:a6:9c:4c:4b:48:93:95:e8:43:90:6e:66:f0: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EA:7B:58:4A:92:07:53:FB:A8:9F:A1:10:AD:86:B8:3B:A5:BD:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl X509v3 Authority Key Identifier: keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer sbgp-ipAddrBlock: critical IPv4: 192.245.221.0-192.245.224.255 199.33.130.0-199.33.134.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e4:54:8d:aa:21:76:e6:7d:97:77:14:ef:86:2e:8f:1c:18: 47:94:96:17:42:c7:11:5f:72:79:d6:8c:eb:62:f8:69:a6:97: 21:56:7c:6f:6d:3c:c5:d6:71:5c:4b:cf:49:b6:c3:5c:8a:0c: bf:c8:af:9e:e0:d9:ef:42:db:a1:e2:9e:36:4d:d0:3f:24:12: 11:a8:a1:f6:85:4c:ff:1c:0e:ce:84:5a:f0:c1:8b:48:45:4c: 83:27:e0:35:04:55:21:62:73:69:a7:ef:e5:27:81:4e:bd:d3: 5e:97:6a:31:c4:d4:9e:eb:f9:bd:b3:ff:75:b7:b4:26:c9:40: 63:a8:61:04:f0:0f:81:ae:c2:0e:3e:cd:23:c6:ab:dd:17:52: 7d:35:3f:8a:11:4b:1e:7e:e6:d5:3f:cf:53:fa:83:13:76:63: 2e:bf:1c:3e:ad:cb:a2:43:d0:19:c1:98:43:3c:fd:cc:a5:cd: b6:36:6c:50:e5:26:93:8f:8c:a8:52:ea:fe:25:8f:78:61:19: 23:31:d7:d9:0c:ed:c4:39:58:19:4b:fa:f4:80:2c:4f:57:1a: 7e:50:dd:f2:1e:40:8f:4a:5a:cc:35:cd:58:e8:d6:ab:9b:95: 96:e4:c0:f6:f8:68:dd:45:8a:7f:14:65:c4:c4:86:09:5c:18: c1:4c:32:1b -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWElDA+x+0cbRB8XL2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q1NGU1YmItMzBjZC00NjBhLWEzYWUtNGFiODNjMmY2 MmEyMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk MTdhYjAxOWEtNDRkYy00NWM2LWFlMDMtOTNjYmUyNDgwMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGG+sdzcnQJAmi2JTYOGBvSYkDvEr4NTB5jv kYJNm+TwtRa1YU2C6LFpvr+2UcoL3o4JYOWwdz+gjgZN8Jogc8dhcqprS4KTRlra ZMj5TH6JIgaVrDWXCk3Z70NHB+YkSJThw9L5GU2nqT2DxoLKl1QQF/CLpe/TFuWb lscD/SVRcg0Y9F42enzi3o1P/aSebj0lJTeXWFDCSh7hNKuNyx/My2Vlk8RHLw/W yM3/AVZdLc66k8pxStgTTPulDgP0Aj4V9Df0QxeFYWmMgVFgrK7F+STO75bsRwjm pouxlt8WtZlZe3nIulOO9zPyrx7io6acTEtIk5XoQ5BuZvACEwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFFrqe1hKkgdT+6ifoRCthrg7pb2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0 ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4M2MyZjYyYTIvYTkwM2U4MjQtMWI2Ni0z NjRmLThlYTQtOTM5M2VmMmRlNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2Q1NGU1YmItMzBjZC00NjBhLWEz YWUtNGFiODNjMmY2MmEyL2NkNTRlNWJiLTMwY2QtNDYwYS1hM2FlLTRhYjgzYzJm NjJhMi5jcmwwHwYDVR0jBBgwFoAUDLC//MqdO5Z3qxRusYBcCS+cp0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4 M2MyZjYyYTIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADA9d0D BADA9eAwDAMEAcchggMEAMchhjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAF5FSNqiF25n2XdxTvhi6PHBhH lJYXQscRX3J51ozrYvhpppchVnxvbTzF1nFcS89JtsNcigy/yK+e4NnvQtuh4p42 TdA/JBIRqKH2hUz/HA7OhFrwwYtIRUyDJ+A1BFUhYnNpp+/lJ4FOvdNel2oxxNSe 6/m9s/91t7QmyUBjqGEE8A+BrsIOPs0jxqvdF1J9NT+KEUsefubVP89T+oMTdmMu vxw+rcuiQ9AZwZhDPP3Mpc22NmxQ5SaTj4yoUur+JY94YRkjMdfZDO3EOVgZS/r0 gCxPVxp+UN3yHkCPSlrMNc1Y6Narm5WW5MD2+GjdRYp/FGXExIYJXBjBTDIb -----END CERTIFICATE-----Generated at Tue Apr 29 13:18:07 2025 by rpki-client