$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/962a4bcd-3d77-3c51-80dc-3eab51795e1a.roa File: 962a4bcd-3d77-3c51-80dc-3eab51795e1a.roa (raw, json) Hash identifier: VTpPtBlui5qEcETofNR9by2/uydOn+FwDp/6MX/V9G4= Subject key identifier: E9:4B:D0:81:90:FC:53:35:66:0F:E9:88:AA:84:33:FB:74:AA:57:80 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F432858499DBF30DFBC8EE6FFF5150F80 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/962a4bcd-3d77-3c51-80dc-3eab51795e1a.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 0 IP address blocks: 192.188.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:30:df:bc:8e:e6:ff:f5:15:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=3ed26ead-7d06-4103-86a5-0138a01ae33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c9:8d:14:a4:4a:dd:a0:51:6d:4d:e7:e1:d1: d3:5e:bb:cf:83:f3:2f:b9:3f:e5:88:9f:8e:6e:6a: 62:24:3b:f2:f6:2e:08:10:78:f8:94:4a:66:e2:ae: 05:b2:21:0e:14:d1:4c:cc:f3:54:60:19:c2:10:db: ba:51:70:09:75:22:c0:b9:9c:6b:ef:90:c5:30:2c: bf:d6:16:fe:20:83:1e:d3:c7:2d:b9:5f:3e:67:88: 1a:e3:a6:a9:fe:b3:32:08:4c:d2:12:98:37:4a:da: 6c:dc:bf:f3:8d:7e:e3:c9:6b:76:cf:eb:9a:aa:af: 91:b3:f3:67:ac:88:f0:ec:4b:43:5c:ac:b8:0d:e4: 03:4d:83:c9:0b:dd:9b:1d:24:57:77:04:b3:3d:37: f4:43:ef:da:a2:9a:9a:4f:cf:62:1a:0d:ac:9a:0e: 7d:7e:30:ef:f3:23:cd:ef:05:30:3f:79:cc:34:f3: fe:cd:c5:ab:c4:1b:43:6d:e1:af:c5:de:5d:8e:89: cc:84:b1:19:fd:55:40:cf:ec:b8:e2:79:17:be:cc: 02:6f:c4:3e:17:8b:09:70:75:29:cd:39:f5:29:24: 4e:05:98:bd:cf:d8:fc:cc:c9:71:7d:b7:83:99:5f: f6:84:95:ee:0b:a1:8a:68:13:98:5e:c2:9e:7a:ca: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4B:D0:81:90:FC:53:35:66:0F:E9:88:AA:84:33:FB:74:AA:57:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/962a4bcd-3d77-3c51-80dc-3eab51795e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:17:d2:c3:be:ea:64:f4:c8:dd:81:78:de:f3:d2:1a:3d:07: 36:db:e9:09:d7:e7:a6:7f:9b:10:ad:46:8c:d8:54:e1:b4:8c: 95:e8:e2:a4:52:5c:0b:27:45:20:a3:7e:9b:b9:b3:34:e3:b4: 67:26:07:2f:dc:0c:4d:5f:4c:5e:70:55:40:c2:04:d2:89:2f: a0:e8:c1:52:20:2d:81:55:16:8a:48:1d:60:7a:ce:fd:82:8e: ea:eb:5c:a4:86:de:13:e6:06:c4:4f:17:0f:6b:51:c5:5f:1f: 2f:8d:0e:e4:b8:01:ca:35:4a:be:2d:e4:8d:1e:b2:19:e1:20: 16:2a:db:96:61:4c:f3:7f:3f:ae:3a:f9:c5:f1:80:77:eb:cc: 5d:a1:de:2e:a7:26:bc:ec:fd:86:ca:e1:3d:57:b7:95:e1:23: a0:98:4b:a9:f1:6d:35:df:aa:22:fd:08:51:00:ad:1b:ca:bf: 2d:5d:aa:86:4f:e0:e1:5c:5e:62:8b:34:38:d1:61:65:71:e1: f4:c9:11:0b:e6:14:a1:d8:36:a5:f4:f5:43:81:4e:65:75:be: f5:3c:d6:ef:8f:41:a5:93:ba:cd:96:e2:1e:48:a3:19:5e:5c: a1:f8:27:ec:19:e9:f8:f5:6b:b6:fb:37:ae:bb:14:42:dc:0c: e6:b9:64:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzDfvI7m//UVD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk M2VkMjZlYWQtN2QwNi00MTAzLTg2YTUtMDEzOGEwMWFlMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMmNFKRK3aBRbU3n4dHTXrvPg/MvuT/liJ+O bmpiJDvy9i4IEHj4lEpm4q4FsiEOFNFMzPNUYBnCENu6UXAJdSLAuZxr75DFMCy/ 1hb+IIMe08ctuV8+Z4ga46ap/rMyCEzSEpg3Stps3L/zjX7jyWt2z+uaqq+Rs/Nn rIjw7EtDXKy4DeQDTYPJC92bHSRXdwSzPTf0Q+/aopqaT89iGg2smg59fjDv8yPN 7wUwP3nMNPP+zcWrxBtDbeGvxd5djonMhLEZ/VVAz+y44nkXvswCb8Q+F4sJcHUp zTn1KSROBZi9z9j8zMlxfbeDmV/2hJXuC6GKaBOYXsKeesqb3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlL0IGQ/FM1Zg/piKqEM/t0qleAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvOTYyYTRiY2QtM2Q3Ny0z YzUxLTgwZGMtM2VhYjUxNzk1ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwLwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYX0sO+6mT0yN2BeN7z0ho9Bzbb6QnX56Z/mxCtRozYVOG0jJXo4qRS XAsnRSCjfpu5szTjtGcmBy/cDE1fTF5wVUDCBNKJL6DowVIgLYFVFopIHWB6zv2C jurrXKSG3hPmBsRPFw9rUcVfHy+NDuS4Aco1Sr4t5I0eshnhIBYq25ZhTPN/P646 +cXxgHfrzF2h3i6nJrzs/YbK4T1Xt5XhI6CYS6nxbTXfqiL9CFEArRvKvy1dqoZP 4OFcXmKLNDjRYWVx4fTJEQvmFKHYNqX09UOBTmV1vvU81u+PQaWTus2W4h5Ioxle XKH4J+wZ6fj1a7b7N667FELcDOa5ZAs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:26 2025 by rpki-client