$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa File: 8443b0db-29e2-35db-b8e1-34359b0b5e82.roa (raw, json) Hash identifier: ryjyvCXxNdCy0xlX26aV9HBlG+N2UVCXvsvxo/u9Puc= Subject key identifier: A2:03:2E:23:67:6E:88:5A:63:DE:BE:A0:54:47:9C:B4:7D:94:EC:37 Certificate issuer: /CN=a38ff47f-825f-4455-b429-60f899d42ec6 Certificate serial: 010D0C9F43285849E2253770276035D5612BC500 Authority key identifier: 5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 399840 IP address blocks: 192.43.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:37:70:27:60:35:d5:61:2b:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38ff47f-825f-4455-b429-60f899d42ec6 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=c2464353-ddf9-4584-9f6c-f13651dda59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:02:52:98:7e:1a:95:4f:21:2b:07:e6:05: 47:ae:e3:e9:f9:88:80:fb:f8:00:3e:2a:bb:1a:8f: 71:0a:ac:a3:f9:c2:0e:65:bd:61:e3:4a:d5:dd:fc: d4:3d:8a:21:d5:89:c1:26:08:e7:74:07:43:03:b9: 6c:37:7d:a5:a8:4d:75:e5:6c:ec:c5:57:d4:f2:57: 17:15:af:4a:d7:ee:5f:86:f8:b1:bf:4d:f1:f3:44: c9:f4:9c:b9:87:c6:fc:b4:57:f3:93:33:12:d5:14: 12:96:10:70:bf:3d:e8:69:31:db:b4:2c:e0:73:49: f2:e5:e4:94:96:45:8d:7a:b4:38:f2:3a:92:a6:6a: 60:07:7c:0f:d3:e7:23:70:50:13:8a:a8:0d:6a:87: 41:6e:e7:c6:7b:d0:4e:b0:7d:77:10:46:39:83:ae: 7a:9e:7e:68:2c:b8:96:71:c2:ff:78:47:78:07:aa: e5:0b:bf:6c:89:38:2e:39:b7:59:1b:fb:0c:bb:e9: f8:1b:0a:7f:42:9b:a4:5c:58:07:f4:7d:ea:13:71: 50:04:0c:e0:7d:c2:cd:69:44:bb:e2:14:ec:92:33: 12:a7:85:1e:76:f3:1e:29:ab:61:f2:ae:f5:4b:ad: 64:a6:69:81:5c:c7:7f:b3:08:d1:f8:f5:a1:ff:dd: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:03:2E:23:67:6E:88:5A:63:DE:BE:A0:54:47:9C:B4:7D:94:EC:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.crl X509v3 Authority Key Identifier: keyid:5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer sbgp-ipAddrBlock: critical IPv4: 192.43.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0b:86:40:59:86:86:b7:88:be:c4:34:5e:a7:9b:5d:88:e8: 18:a6:5a:ba:2a:60:aa:29:c3:01:ab:e4:1a:ee:92:bc:ec:83: 6b:b4:4e:63:20:5a:a0:aa:08:28:fb:b0:0e:ec:01:64:6d:1f: bf:35:c4:1b:6b:23:5a:6c:05:6d:46:e8:02:a7:a5:70:7d:2c: 90:50:1d:17:d5:ba:c1:b1:6e:5f:9f:f0:57:e0:86:c9:d6:00: ee:f6:ce:8d:d4:cb:54:0a:a6:3f:51:1c:2a:5e:e1:a5:85:71: 3d:65:45:b8:0b:47:18:cb:a4:b3:8e:80:ca:83:7b:17:47:4a: c0:d5:5f:60:38:4a:f4:27:4a:2d:a4:be:2c:32:21:75:58:27: c8:4d:14:25:59:a4:43:48:31:df:1f:3b:3e:cd:14:7b:36:40: d7:af:31:90:45:bc:13:0c:3f:86:e9:43:32:f4:a4:77:b1:1d: 57:8c:70:9e:08:bb:44:b1:34:65:3e:55:ea:48:71:3d:0e:20: 7e:f2:f8:5e:92:48:7c:64:24:be:cc:cf:90:bc:fc:09:20:f4: 02:02:8d:96:63:a4:06:b4:c0:d1:b9:cb:e7:99:82:ce:25:68: b2:3c:6e:7c:32:96:1f:de:24:d2:37:a1:c1:38:3e:fb:f2:14: 59:5b:9b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTdwJ2A11WErxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM4ZmY0N2YtODI1Zi00NDU1LWI0MjktNjBmODk5ZDQy ZWM2MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YzI0NjQzNTMtZGRmOS00NTg0LTlmNmMtZjEzNjUxZGRhNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr70CUph+GpVPISsH5gVHruPp+YiA+/gAPiq7 Go9xCqyj+cIOZb1h40rV3fzUPYoh1YnBJgjndAdDA7lsN32lqE115WzsxVfU8lcX Fa9K1+5fhvixv03x80TJ9Jy5h8b8tFfzkzMS1RQSlhBwvz3oaTHbtCzgc0ny5eSU lkWNerQ48jqSpmpgB3wP0+cjcFATiqgNaodBbufGe9BOsH13EEY5g656nn5oLLiW ccL/eEd4B6rlC79siTguObdZG/sMu+n4Gwp/QpukXFgH9H3qE3FQBAzgfcLNaUS7 4hTskjMSp4UedvMeKath8q71S61kpmmBXMd/swjR+PWh/93a9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIDLiNnbohaY96+oFRHnLR9lOw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMzhm ZjQ3Zi04MjVmLTQ0NTUtYjQyOS02MGY4OTlkNDJlYzYvODQ0M2IwZGItMjllMi0z NWRiLWI4ZTEtMzQzNTliMGI1ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTM4ZmY0N2YtODI1Zi00NDU1LWI0 MjktNjBmODk5ZDQyZWM2L2EzOGZmNDdmLTgyNWYtNDQ1NS1iNDI5LTYwZjg5OWQ0 MmVjNi5jcmwwHwYDVR0jBBgwFoAUWzyP2EiFClYUqC5lRFnJvaAUW2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMzhmZjQ3Zi04MjVmLTQ0NTUtYjQyOS02MGY4 OTlkNDJlYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFULhkBZhoa3iL7ENF6nm12I6BimWroqYKopwwGr5Brukrzsg2u0TmMg WqCqCCj7sA7sAWRtH781xBtrI1psBW1G6AKnpXB9LJBQHRfVusGxbl+f8FfghsnW AO72zo3Uy1QKpj9RHCpe4aWFcT1lRbgLRxjLpLOOgMqDexdHSsDVX2A4SvQnSi2k viwyIXVYJ8hNFCVZpENIMd8fOz7NFHs2QNevMZBFvBMMP4bpQzL0pHexHVeMcJ4I u0SxNGU+VepIcT0OIH7y+F6SSHxkJL7Mz5C8/Akg9AICjZZjpAa0wNG5y+eZgs4l aLI8bnwylh/eJNI3ocE4PvvyFFlbm/k= -----END CERTIFICATE-----Generated at Mon Jun 16 11:05:37 2025 by rpki-client