$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa File: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (raw, json) Hash identifier: /NGuz2mcqgJgOtbhHya8x93yxE6bntur0smubB9J9HM= Subject key identifier: BF:14:3F:45:B0:66:44:DB:43:AE:76:C1:3F:88:BB:EC:87:6F:44:80 Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Certificate serial: 010D0C9F4328584A29556CBC7CFD2A3F74078300 Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 13692 IP address blocks: 192.133.23.0/24 maxlen: 24 199.195.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:6c:bc:7c:fd:2a:3f:74:07:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=898bdae8-a98b-4dda-bd73-37733a03f21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:28:67:11:ed:3a:81:18:6b:d9:c0:e0:48: 60:c3:08:b2:a5:06:ad:9b:50:68:f4:ca:4a:e2:f0: f5:07:28:c0:f2:e4:f2:e6:92:b1:bb:de:96:fc:7f: 92:9b:79:8c:9a:73:af:36:91:64:cb:98:67:62:f4: 54:bf:2e:c6:19:25:f8:b3:4f:1b:3a:c7:c1:9a:68: 3d:68:47:a3:d3:51:2d:ea:76:7a:19:6e:9a:56:c9: e8:b4:74:18:73:45:50:4a:58:91:bc:b0:a2:55:09: aa:4a:55:8b:9d:74:7d:3b:30:de:bb:7b:9d:ec:44: bc:03:35:28:7a:fe:ba:52:ef:2a:80:ff:cf:f3:17: 91:ef:2a:50:7a:cf:a3:af:44:04:33:9c:33:d8:4a: d8:11:ac:06:4f:82:de:99:1d:86:6b:90:61:7d:9b: c0:ef:17:83:e4:5c:de:5f:30:ee:d7:5b:da:85:9a: ea:7f:b0:4e:02:a7:f6:b9:c1:b2:18:f5:4f:b8:2c: 0f:fb:f5:d5:7c:57:e5:35:ca:10:17:a3:36:c1:a2: 85:d7:81:59:46:14:4c:9e:43:39:8c:f2:80:db:54: 47:5a:12:d7:c0:b8:c0:e0:a1:8e:dc:19:09:02:eb: 9d:ce:68:8e:fd:f8:9f:1a:3e:b6:b3:b7:b1:07:a8: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:14:3F:45:B0:66:44:DB:43:AE:76:C1:3F:88:BB:EC:87:6F:44:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl X509v3 Authority Key Identifier: keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer sbgp-ipAddrBlock: critical IPv4: 192.133.23.0/24 199.195.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5a:97:26:10:9c:ad:5b:7c:0e:ea:9d:3c:da:f4:01:85:8c: 44:96:d0:a8:b1:7b:42:c4:56:cb:cf:ff:c2:8e:4f:27:e9:f3: 77:a9:4d:aa:30:37:54:97:a1:3e:68:0f:4f:b1:00:ed:b8:14: 17:31:17:6d:c0:28:d5:ce:6b:74:96:04:5c:20:1c:c9:40:2c: 0f:47:48:52:8c:ad:8f:79:c3:9b:c6:60:62:a5:7b:3e:5b:c9: 90:e0:87:ce:32:44:cd:ca:4c:c4:5c:58:76:d6:82:c2:15:c3: f7:3c:41:f9:d7:e4:f2:20:f1:e3:90:0b:3f:ab:ef:23:1c:2e: 18:df:31:29:b9:9d:ae:f9:41:19:44:be:71:b8:b0:83:ed:1b: d5:21:46:02:96:24:e3:f3:1c:95:b2:ef:34:e0:1e:51:93:ca: ce:7b:2f:41:0c:06:f3:0c:4a:4d:4e:8a:9c:ec:ff:db:90:de: 76:d0:8c:81:36:58:86:a7:66:b1:c5:54:0d:d0:6d:8d:c1:9c: 5b:47:43:17:5c:73:16:f5:33:9b:df:ed:b5:bf:85:ec:c0:b7: d7:eb:cb:34:cc:c7:62:0b:90:01:bb:7c:1f:47:75:0b:4b:ac: dc:91:ee:14:82:f7:21:5f:fa:92:f7:ec:f9:b6:7f:56:96:e1: 74:11:19:41 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEopVWy8fP0qP3QHgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyZTIzZjUtMDMyYi00NjcwLThlMDUtYjRiMDQ3N2U0 Mzg4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk ODk4YmRhZTgtYTk4Yi00ZGRhLWJkNzMtMzc3MzNhMDNmMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQAoZxHtOoEYa9nA4EhgwwiypQatm1Bo9MpK 4vD1ByjA8uTy5pKxu96W/H+Sm3mMmnOvNpFky5hnYvRUvy7GGSX4s08bOsfBmmg9 aEej01Et6nZ6GW6aVsnotHQYc0VQSliRvLCiVQmqSlWLnXR9OzDeu3ud7ES8AzUo ev66Uu8qgP/P8xeR7ypQes+jr0QEM5wz2ErYEawGT4LemR2Ga5BhfZvA7xeD5Fze XzDu11vahZrqf7BOAqf2ucGyGPVPuCwP+/XVfFflNcoQF6M2waKF14FZRhRMnkM5 jPKA21RHWhLXwLjA4KGO3BkJAuudzmiO/fifGj62s7exB6jtoQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFL8UP0WwZkTbQ652wT+Iu+yHb0SAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJl MjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIwNDc3ZTQzODgvOGE5Y2JhZTgtYjY0OS0z NDI4LWE2NWEtZGVlNzQxYmJmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzQyZTIzZjUtMDMyYi00NjcwLThl MDUtYjRiMDQ3N2U0Mzg4L2M0MmUyM2Y1LTAzMmItNDY3MC04ZTA1LWI0YjA0Nzdl NDM4OC5jcmwwHwYDVR0jBBgwFoAULmw543EUGIMpLEYN6ew4qofqfW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJlMjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIw NDc3ZTQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIUXAwQE x8MQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJZalyYQnK1bfA7qnTza9AGFjESW0Kixe0LEVsvP/8KOTyfp 83epTaowN1SXoT5oD0+xAO24FBcxF23AKNXOa3SWBFwgHMlALA9HSFKMrY95w5vG YGKlez5byZDgh84yRM3KTMRcWHbWgsIVw/c8QfnX5PIg8eOQCz+r7yMcLhjfMSm5 na75QRlEvnG4sIPtG9UhRgKWJOPzHJWy7zTgHlGTys57L0EMBvMMSk1Oipzs/9uQ 3nbQjIE2WIanZrHFVA3QbY3BnFtHQxdccxb1M5vf7bW/hezAt9fryzTMx2ILkAG7 fB9HdQtLrNyR7hSC9yFf+pL37Pm2f1aW4XQRGUE= -----END CERTIFICATE-----Generated at Mon Jun 16 06:16:12 2025 by rpki-client