$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/a36fcb60-d164-3d7d-b661-3498f9327552.roa File: a36fcb60-d164-3d7d-b661-3498f9327552.roa (raw, json) Hash identifier: REkp8b0GKOOpaPj8KjiqJDj+MG3VLe0q/hFOuTRWwF8= Subject key identifier: 82:F7:F1:0F:16:B3:01:52:CD:B2:58:A9:F0:96:32:B9:53:32:E9:18 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F432858498E64856B7BD1C5F01988F900 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/a36fcb60-d164-3d7d-b661-3498f9327552.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 3443 IP address blocks: 192.188.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:85:6b:7b:d1:c5:f0:19:88:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=1b28ffab-4793-4219-b820-12197f8992d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:29:96:de:3f:f8:b9:86:45:7b:29:f7:48: 2d:46:76:12:f5:42:4e:19:9a:b3:73:ad:af:89:92: fd:b2:3f:d9:11:16:e1:10:53:6e:b9:d5:bc:a3:dd: 06:47:c2:4d:85:b5:1e:2d:d4:af:45:b3:a9:f4:3b: 1d:ed:c9:a2:ed:42:fd:83:cb:79:8f:57:5a:9a:90: e4:97:bc:3b:78:40:a3:6d:f3:83:90:a0:cd:31:7d: 23:8d:db:ef:c7:42:3a:9c:76:0f:f7:4f:13:be:6b: 41:38:79:6a:57:48:45:ed:4f:5a:80:04:07:eb:0d: 1d:76:21:9b:d3:b8:a9:9b:e9:46:b3:bb:e8:63:d6: 70:7f:66:db:fa:1e:e2:c1:c1:50:75:c2:91:34:4c: d1:0b:b1:81:fe:df:0e:ab:1b:12:10:63:8e:b8:cb: 6d:02:ea:a2:a9:74:d9:0f:f1:f7:9a:a0:cc:16:8f: 37:d5:4e:c4:b7:64:e5:09:1d:af:07:4f:23:1d:0d: d7:d3:96:bb:ec:f4:be:88:a5:89:84:90:c3:8b:d9: 4c:37:f4:54:06:79:c0:ed:97:68:64:0a:8b:8a:f4: 4f:ae:43:0b:21:94:da:4b:fd:b8:bd:14:5e:b0:1a: 1a:c6:aa:a4:c4:4e:40:1c:cb:43:36:c1:de:40:d4: c3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F7:F1:0F:16:B3:01:52:CD:B2:58:A9:F0:96:32:B9:53:32:E9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/a36fcb60-d164-3d7d-b661-3498f9327552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:08:c3:b0:3b:69:ec:e4:e6:99:c6:38:2e:68:1d:6e:b7:76: a0:39:af:47:1a:fe:c5:35:08:a8:90:67:dd:ae:07:9e:29:0b: 05:17:90:f7:b8:33:ba:45:14:0f:a2:6e:6e:d4:0d:3c:bc:08: bb:e5:96:ec:13:bc:e7:e0:d3:19:ce:ab:58:56:25:55:18:4d: 31:ab:46:64:72:19:bf:97:dd:b8:67:11:29:b7:9d:a1:90:b7: f4:57:10:28:3b:6e:cb:c4:d7:51:5d:1e:ad:c4:44:9c:da:08: 70:82:82:e1:00:54:f6:2b:12:ac:d9:7a:51:02:00:db:f4:62: 9d:10:2d:cc:6b:a1:77:7e:ac:63:2a:a8:bd:de:5c:99:ad:9b: 9f:8b:02:be:56:bb:26:67:67:f4:64:bd:3c:b8:a7:c2:93:f0: 2b:3b:8a:d1:bf:c2:3d:43:e0:1e:bf:f9:93:00:bb:7c:c0:43: 9b:aa:1f:3d:96:84:f0:0b:da:f7:eb:dd:c1:9f:5e:b2:52:79: e7:90:1b:ea:d2:5b:d3:69:1e:be:bf:98:9d:80:45:c7:c3:32: c7:e1:c3:12:73:da:14:f3:81:08:96:1d:1e:06:bb:97:9b:db: 04:19:4f:16:20:f8:00:86:30:44:90:fc:7d:11:79:b9:70:64: 17:09:93:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIVre9HF8BmI+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MWIyOGZmYWItNDc5My00MjE5LWI4MjAtMTIxOTdmODk5MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Mplt4/+LmGRXsp90gtRnYS9UJOGZqzc62v iZL9sj/ZERbhEFNuudW8o90GR8JNhbUeLdSvRbOp9Dsd7cmi7UL9g8t5j1dampDk l7w7eECjbfODkKDNMX0jjdvvx0I6nHYP908TvmtBOHlqV0hF7U9agAQH6w0ddiGb 07ipm+lGs7voY9Zwf2bb+h7iwcFQdcKRNEzRC7GB/t8OqxsSEGOOuMttAuqiqXTZ D/H3mqDMFo831U7Et2TlCR2vB08jHQ3X05a77PS+iKWJhJDDi9lMN/RUBnnA7Zdo ZAqLivRPrkMLIZTaS/24vRResBoaxqqkxE5AHMtDNsHeQNTDVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL38Q8WswFSzbJYqfCWMrlTMukYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvYTM2ZmNiNjAtZDE2NC0z ZDdkLWI2NjEtMzQ5OGY5MzI3NTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEIw7A7aezk5pnGOC5oHW63dqA5r0ca/sU1CKiQZ92uB54pCwUXkPe4 M7pFFA+ibm7UDTy8CLvlluwTvOfg0xnOq1hWJVUYTTGrRmRyGb+X3bhnESm3naGQ t/RXECg7bsvE11FdHq3ERJzaCHCCguEAVPYrEqzZelECANv0Yp0QLcxroXd+rGMq qL3eXJmtm5+LAr5WuyZnZ/RkvTy4p8KT8Cs7itG/wj1D4B6/+ZMAu3zAQ5uqHz2W hPAL2vfr3cGfXrJSeeeQG+rSW9NpHr6/mJ2ARcfDMsfhwxJz2hTzgQiWHR4Gu5eb 2wQZTxYg+ACGMESQ/H0ReblwZBcJkzk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:07 2025 by rpki-client