$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa File: 4a473e58-ddc0-39ea-a012-7daaa18312b1.roa (raw, json) Hash identifier: 7RUAX6OcsizVjZlROTdN85wysEglXFuRUj4cL45R+5k= Subject key identifier: 95:20:0B:FC:76:D0:9D:58:16:4F:D1:68:42:90:B1:8B:4D:B9:67:2F Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849A61F3DAF8E87B9C20D0DB6C0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16433 IP address blocks: 192.190.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3d:af:8e:87:b9:c2:0d:0d:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=b738e525-6434-4633-af49-39a48723959e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a2:de:40:8b:e2:b4:22:87:96:55:24:d0:2f: de:42:e4:92:59:d9:45:54:4a:3e:9d:5a:62:ef:9c: 82:82:80:26:dc:45:5c:f6:00:d3:fb:54:12:27:9d: c2:80:06:a2:a4:93:44:1a:4b:4f:e4:cb:f1:e4:20: b5:40:29:ae:91:8f:cb:de:b0:65:01:fb:df:b7:4a: 41:5e:51:f9:af:9a:fa:1d:d9:90:a1:19:a4:f5:9b: 45:e7:e7:f1:d9:61:e6:0a:fe:ba:4e:d2:8e:6b:e8: c0:a6:a5:01:49:16:86:10:a9:25:4a:c2:a9:32:04: 47:b7:69:4c:3a:15:27:9a:c0:f7:68:a2:3a:90:3c: 22:37:39:6f:73:04:89:56:c6:1b:89:7d:98:fe:e9: 3d:b1:05:3b:f9:4e:5e:0a:cb:9f:2d:0d:ef:3c:48: 7c:d5:2c:9f:39:0c:e6:9b:b5:02:d2:04:bd:f6:07: 35:b3:da:20:3e:e4:cb:5e:02:fe:cb:68:94:a6:42: f9:5e:f5:2d:c7:c9:ad:2f:f6:65:cb:97:a9:16:c2: b4:e2:22:a7:6d:ce:ad:af:37:5f:fe:66:a6:42:1b: 0a:d5:6e:e3:07:78:e9:2d:c0:02:a4:34:24:4f:d8: 9f:d0:84:db:a5:63:96:17:9d:8d:96:78:45:08:5b: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:20:0B:FC:76:D0:9D:58:16:4F:D1:68:42:90:B1:8B:4D:B9:67:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 192.190.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2a:ea:b1:b3:bc:62:3e:95:5f:f3:74:4f:cf:fc:eb:46:44: 6f:9f:16:35:03:6d:0d:6b:97:95:f0:2e:d0:ff:ce:50:41:db: 1d:54:59:b8:32:a9:34:2b:1c:29:5c:9e:1b:8f:6b:c4:09:7f: cd:e1:f4:7d:65:e4:d3:79:c1:75:c4:9b:4b:f5:9b:d3:ea:b4: b4:83:98:ba:a6:b3:2a:fb:14:07:5d:96:7d:81:92:91:9a:fc: d7:79:ea:0a:43:41:a9:71:ba:76:b7:3b:f3:b3:0c:5e:86:dd: a2:38:0d:09:bc:cb:6b:3e:06:46:ec:f4:77:52:2c:39:d3:4c: a0:cb:74:f5:37:87:53:62:e1:00:5c:4b:4c:7e:a5:b3:bc:21: b8:d5:da:41:e3:65:ab:6a:78:60:2c:cb:9b:b6:ce:ec:61:e5: b8:da:b9:ab:20:b7:62:e2:ed:bd:40:f0:25:bb:76:88:cb:cf: 60:fb:6a:e3:01:a9:b9:96:8b:bc:b7:db:29:72:a1:c0:7a:2f: 5a:a4:27:1e:4e:87:79:25:8c:47:23:0c:2a:15:7f:80:48:87: e7:3c:71:e7:47:18:7d:cb:f5:b1:15:ec:30:89:eb:2f:76:ba: 1a:92:e7:c9:69:df:b0:06:7d:54:30:82:af:80:d8:0b:1a:11: 65:c7:95:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz2vjoe5wg0NtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YjczOGU1MjUtNjQzNC00NjMzLWFmNDktMzlhNDg3MjM5NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqLeQIvitCKHllUk0C/eQuSSWdlFVEo+nVpi 75yCgoAm3EVc9gDT+1QSJ53CgAaipJNEGktP5Mvx5CC1QCmukY/L3rBlAfvft0pB XlH5r5r6HdmQoRmk9ZtF5+fx2WHmCv66TtKOa+jApqUBSRaGEKklSsKpMgRHt2lM OhUnmsD3aKI6kDwiNzlvcwSJVsYbiX2Y/uk9sQU7+U5eCsufLQ3vPEh81SyfOQzm m7UC0gS99gc1s9ogPuTLXgL+y2iUpkL5XvUtx8mtL/Zly5epFsK04iKnbc6trzdf /mamQhsK1W7jB3jpLcACpDQkT9if0ITbpWOWF52NlnhFCFtERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUgC/x20J1YFk/RaEKQsYtNuWcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNGE0NzNlNTgtZGRjMC0z OWVhLWEwMTItN2RhYWExODMxMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwL7iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwq6rGzvGI+lV/zdE/P/OtGRG+fFjUDbQ1rl5XwLtD/zlBB2x1UWbgy qTQrHClcnhuPa8QJf83h9H1l5NN5wXXEm0v1m9PqtLSDmLqmsyr7FAddln2BkpGa /Nd56gpDQalxuna3O/OzDF6G3aI4DQm8y2s+Bkbs9HdSLDnTTKDLdPU3h1Ni4QBc S0x+pbO8IbjV2kHjZatqeGAsy5u2zuxh5bjauasgt2Li7b1A8CW7dojLz2D7auMB qbmWi7y32ylyocB6L1qkJx5Oh3kljEcjDCoVf4BIh+c8cedHGH3L9bEV7DCJ6y92 uhqS58lp37AGfVQwgq+A2AsaEWXHlTg= -----END CERTIFICATE-----Generated at Tue Apr 29 09:30:00 2025 by rpki-client