$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/93067aad-8845-303d-90d2-e4d1ec1c2327.roa File: 93067aad-8845-303d-90d2-e4d1ec1c2327.roa (raw, json) Hash identifier: ik5yXgKO4kPWaBSs+XaHjQyP0up+KvkTYR8asDzySeE= Subject key identifier: 22:C6:A9:59:E3:6B:2B:1E:43:D6:CB:50:79:27:50:B7:20:19:F4:A6 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F432858499DBF310F705AA838058A2400 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/93067aad-8845-303d-90d2-e4d1ec1c2327.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 0 IP address blocks: 192.188.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:31:0f:70:5a:a8:38:05:8a:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=bfa28dc1-fdd2-41df-a778-112c56d26aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d4:22:66:23:df:6a:5e:a8:56:64:d6:ab:87: 39:5b:9a:43:cd:a2:ce:d6:8e:01:ef:87:b3:e3:dc: e5:b7:7b:09:4f:b3:7b:e4:d9:b7:5c:9c:5d:1f:01: 6d:ae:11:a9:7f:24:2e:7d:73:ec:5f:97:79:72:e8: bc:a7:c4:b4:7e:5a:7c:0e:56:c6:fb:2f:77:c4:20: 3f:25:6b:d8:66:47:1d:75:37:f1:ce:e6:27:2b:c9: e2:72:d0:61:1a:5b:8f:7e:47:f6:af:f4:82:c5:1d: 6e:f8:9c:32:3c:37:f5:93:29:1b:fd:2b:c4:af:ee: ea:33:d2:30:9c:42:11:d6:0c:e8:3c:89:2a:9b:f7: 84:31:7c:1f:e2:7d:2e:ae:4b:80:11:f9:f3:f3:33: 0c:e4:a3:2d:d2:bf:3e:92:de:9f:22:e2:1d:1a:f4: ee:30:e5:9f:d6:31:fb:a4:25:24:bd:3e:38:96:f5: 35:fe:fb:60:09:27:7b:e7:ee:9f:c1:bd:0e:f9:f7: 49:fe:1d:76:63:2a:43:9d:b5:4d:1b:fd:e6:6c:28: 6d:bf:d8:ee:f5:e2:aa:8e:1e:09:4c:fa:d1:19:73: 07:e6:a0:41:a5:fd:31:e7:84:11:79:58:17:8b:8c: 6d:e6:7b:9e:e4:99:c1:53:ad:6e:8a:74:a9:18:b0: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:A9:59:E3:6B:2B:1E:43:D6:CB:50:79:27:50:B7:20:19:F4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/93067aad-8845-303d-90d2-e4d1ec1c2327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:85:7e:77:7d:9e:f8:4d:32:d1:ed:ad:b0:0f:0e:a2:38:ab: af:e1:66:5b:c2:c8:88:18:11:97:fd:fb:70:bd:4a:fa:50:b2: 0a:f0:f5:8d:35:ea:8a:52:71:dd:47:64:f6:07:0c:88:dc:83: 48:16:01:31:37:bc:6c:5d:e1:28:1d:c2:72:c3:23:69:97:70: 69:61:6a:4a:b6:e0:d6:1e:41:10:02:b0:a6:ec:63:00:81:32: fc:76:0b:8d:d3:7f:24:1f:6d:7d:0e:4a:9b:cb:c2:81:a6:56: 37:c5:b2:97:3e:cb:8e:0f:95:50:1d:50:4f:6f:1f:96:03:b5: ef:f7:8e:6f:f1:b6:df:66:09:e1:af:7c:12:09:a4:68:c0:47: d7:6d:35:38:39:fa:71:c6:dc:f2:60:c8:8f:ab:a7:79:07:b3: ec:ba:1b:23:89:7d:6d:43:f9:d2:5b:f3:45:b6:2b:94:8d:49: af:4b:11:90:af:a7:78:0e:73:d1:65:34:c9:43:9c:b3:73:73: ce:0e:67:31:20:4b:eb:38:d8:f8:dc:40:0d:cb:79:1c:84:c6: 67:b1:7b:b8:ef:27:2c:2e:e3:d4:b2:b3:1e:9e:bd:72:bd:6c: 82:25:69:34:72:01:29:07:5b:aa:17:dc:77:bd:13:df:20:3a: b0:7c:58:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzEPcFqoOAWKJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YmZhMjhkYzEtZmRkMi00MWRmLWE3NzgtMTEyYzU2ZDI2YWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtQiZiPfal6oVmTWq4c5W5pDzaLO1o4B74ez 49zlt3sJT7N75Nm3XJxdHwFtrhGpfyQufXPsX5d5cui8p8S0flp8DlbG+y93xCA/ JWvYZkcddTfxzuYnK8nictBhGluPfkf2r/SCxR1u+JwyPDf1kykb/SvEr+7qM9Iw nEIR1gzoPIkqm/eEMXwf4n0urkuAEfnz8zMM5KMt0r8+kt6fIuIdGvTuMOWf1jH7 pCUkvT44lvU1/vtgCSd75+6fwb0O+fdJ/h12YypDnbVNG/3mbChtv9ju9eKqjh4J TPrRGXMH5qBBpf0x54QReVgXi4xt5nue5JnBU61uinSpGLCdcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLGqVnjayseQ9bLUHknULcgGfSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvOTMwNjdhYWQtODg0NS0z MDNkLTkwZDItZTRkMWVjMWMyMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwLwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWFfnd9nvhNMtHtrbAPDqI4q6/hZlvCyIgYEZf9+3C9SvpQsgrw9Y01 6opScd1HZPYHDIjcg0gWATE3vGxd4SgdwnLDI2mXcGlhakq24NYeQRACsKbsYwCB Mvx2C43TfyQfbX0OSpvLwoGmVjfFspc+y44PlVAdUE9vH5YDte/3jm/xtt9mCeGv fBIJpGjAR9dtNTg5+nHG3PJgyI+rp3kHs+y6GyOJfW1D+dJb80W2K5SNSa9LEZCv p3gOc9FlNMlDnLNzc84OZzEgS+s42PjcQA3LeRyExmexe7jvJywu49Sysx6evXK9 bIIlaTRyASkHW6oX3He9E98gOrB8WGI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:23 2025 by rpki-client