$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/4af164e1-0993-3a33-9adc-cedf691ba81f.roa File: 4af164e1-0993-3a33-9adc-cedf691ba81f.roa (raw, json) Hash identifier: /zEKVifSNWUYtBd1xTqq8qRGRINhMAddYUo/oyYWxWM= Subject key identifier: F6:BA:C1:B7:AD:22:F7:9A:53:BF:99:E9:1E:03:1F:3E:61:4A:FE:3C Certificate issuer: /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Certificate serial: 010D0C9F4328584967B57CD6664B59B31CC0F090 Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/4af164e1-0993-3a33-9adc-cedf691ba81f.roa Signing time: Thu 03 Apr 2025 16:27:46 +0000 ROA not before: Thu 03 Apr 2025 16:27:46 +0000 ROA not after: Wed 02 Jul 2025 16:27:46 +0000 asID: 400644 IP address blocks: 192.100.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:b5:7c:d6:66:4b:59:b3:1c:c0:f0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Validity Not Before: Apr 3 16:27:46 2025 GMT Not After : Jul 2 16:27:46 2025 GMT Subject: CN=76d578ef-f7dc-41cd-918d-c805bd7ac36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f8:26:bc:83:ec:0b:ef:c7:ee:3c:8c:7c:b6: b4:7e:71:84:dc:03:bd:b8:65:46:57:45:4e:c3:98: 0b:48:66:e4:eb:1e:bb:ca:03:9c:c0:c0:ad:92:28: ed:d7:fd:a8:bc:b2:aa:ec:a0:89:f7:89:84:5b:09: 07:b1:d7:a6:74:9d:f7:4d:5e:8e:81:2a:20:05:e0: ea:79:23:0e:06:f6:96:83:68:f3:14:af:ab:79:67: 30:4e:51:9e:09:bb:54:1f:35:4d:ad:9f:e5:3f:b0: e2:ae:b9:3b:4c:4e:ca:cc:8f:f1:86:7c:0f:a5:46: 76:8f:71:5a:a3:3d:7a:2a:5f:9b:71:8f:18:c1:14: da:f3:86:ca:94:d9:8c:b1:3c:19:6a:9a:8c:e5:e5: c3:4d:89:b9:41:5e:bb:ec:32:53:7d:1b:60:1f:3d: f1:86:d7:47:34:68:e7:00:a8:52:05:04:f8:2a:3d: 35:a4:dc:74:f8:e6:36:98:da:3b:c9:24:68:c6:b2: 99:64:88:66:2d:bc:cb:de:98:f8:0c:59:d9:5c:c2: ac:ed:d4:a6:4a:49:79:da:47:34:aa:25:79:c0:6f: e3:50:1f:51:2f:e1:7d:33:99:71:75:dc:fd:ae:91: ae:d2:04:a7:4e:24:f7:6f:b4:12:9d:8c:8f:fe:86: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BA:C1:B7:AD:22:F7:9A:53:BF:99:E9:1E:03:1F:3E:61:4A:FE:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/4af164e1-0993-3a33-9adc-cedf691ba81f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl X509v3 Authority Key Identifier: keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer sbgp-ipAddrBlock: critical IPv4: 192.100.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9f:89:65:fe:38:46:d4:74:cb:a0:97:0c:b4:f4:62:ce:0b: 9f:b5:0e:34:8c:a1:63:d3:6d:dd:ef:96:96:87:f3:aa:9c:7b: a8:2f:e6:b7:ca:fd:f6:23:18:b5:8b:f6:7c:ea:2b:03:e9:55: 8f:31:47:ae:78:de:f4:ef:cf:4c:de:9f:09:5a:8c:2f:a2:bb: f0:eb:1a:60:a1:2d:9f:61:a1:e0:62:ef:05:01:74:0c:5c:6b: d3:a8:21:07:d5:bd:4c:93:28:79:7d:8f:c0:4f:a6:ed:50:ce: 3d:c2:bb:94:8c:59:5c:57:7f:c5:c6:c5:68:8e:50:53:8d:b1: 34:2f:8c:97:0c:f5:62:69:9b:1c:0b:27:cc:0d:a3:b1:f1:0f: 16:50:ee:3c:35:09:35:3e:f2:56:00:d0:c5:89:68:24:48:8b: c7:92:22:6a:02:53:2e:4c:26:bf:57:45:e4:bf:b1:53:bf:a0: c1:f5:10:96:e5:7f:0c:da:cd:56:86:b8:3a:f5:46:3e:2c:69: c1:6d:ac:80:f5:bc:e6:64:45:18:d2:64:8c:b0:02:3c:bb:8c: 78:a6:27:71:b1:08:6c:01:34:56:01:8d:65:3c:62:c4:fc:00: 01:7f:7e:be:b4:0f:96:11:ee:b6:40:09:75:dd:12:0c:f2:2c: aa:81:09:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElntXzWZktZsxzA8JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm NWNhMB4XDTI1MDQwMzE2Mjc0NloXDTI1MDcwMjE2Mjc0NlowLzEtMCsGA1UEAxMk NzZkNTc4ZWYtZjdkYy00MWNkLTkxOGQtYzgwNWJkN2FjMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfgmvIPsC+/H7jyMfLa0fnGE3AO9uGVGV0VO w5gLSGbk6x67ygOcwMCtkijt1/2ovLKq7KCJ94mEWwkHsdemdJ33TV6OgSogBeDq eSMOBvaWg2jzFK+reWcwTlGeCbtUHzVNrZ/lP7Dirrk7TE7KzI/xhnwPpUZ2j3Fa oz16Kl+bcY8YwRTa84bKlNmMsTwZapqM5eXDTYm5QV677DJTfRtgHz3xhtdHNGjn AKhSBQT4Kj01pNx0+OY2mNo7ySRoxrKZZIhmLbzL3pj4DFnZXMKs7dSmSkl52kc0 qiV5wG/jUB9RL+F9M5lxddz9rpGu0gSnTiT3b7QSnYyP/obytQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa6wbetIveaU7+Z6R4DHz5hSv48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvNGFmMTY0ZTEtMDk5My0z YTMzLTlhZGMtY2VkZjY5MWJhODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0 YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0 ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy NGYwNGY1Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGRSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSfiWX+OEbUdMuglwy09GLOC5+1DjSMoWPTbd3vlpaH86qce6gv5rfK /fYjGLWL9nzqKwPpVY8xR6543vTvz0zenwlajC+iu/DrGmChLZ9hoeBi7wUBdAxc a9OoIQfVvUyTKHl9j8BPpu1Qzj3Cu5SMWVxXf8XGxWiOUFONsTQvjJcM9WJpmxwL J8wNo7HxDxZQ7jw1CTU+8lYA0MWJaCRIi8eSImoCUy5MJr9XReS/sVO/oMH1EJbl fwzazVaGuDr1Rj4sacFtrID1vOZkRRjSZIywAjy7jHimJ3GxCGwBNFYBjWU8YsT8 AAF/fr60D5YR7rZACXXdEgzyLKqBCRk= -----END CERTIFICATE-----Generated at Mon Apr 28 00:38:41 2025 by rpki-client