$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa File: b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa (raw, json) Hash identifier: Vb7V54AA2RXnTv8LcHqqFSxz8UHG2Mj138My5P7Yy0c= Subject key identifier: C4:7E:8A:41:77:1E:5C:13:26:A0:7E:7B:8E:40:30:31:B8:69:1C:57 Certificate issuer: /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Certificate serial: 010D0C9F43285849FCAA739AEBECF9ECF4B99F80 Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 142.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:73:9a:eb:ec:f9:ec:f4:b9:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=54891f1e-59fd-40f7-b601-98b84621f4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:5e:20:ff:05:b8:88:da:4e:03:f0:3b:19: 2a:f8:52:83:55:4a:e9:e0:ff:94:18:18:1a:26:4d: 75:1f:5e:ed:a6:3c:bc:3a:96:a4:ea:52:4a:d6:a9: bd:29:cc:b3:0d:dc:53:e6:e4:98:62:06:e0:90:c0: cc:03:90:aa:c3:84:09:2f:72:80:3a:cc:94:09:4f: 91:3d:b4:4d:82:44:13:9d:26:61:f4:a5:50:dd:f8: 78:7d:30:64:95:7a:83:3a:ce:a0:01:3f:f2:ee:3e: 61:74:40:e0:5a:6a:9f:ce:33:24:aa:65:95:4b:ba: 71:33:c0:c0:b2:b6:8f:28:13:ee:9e:81:ba:48:c8: 6c:a1:07:23:a3:18:70:9d:e6:1d:ff:e9:b2:22:c2: aa:00:c0:49:42:50:7a:3f:d1:fc:1e:0c:b5:ce:1e: f3:63:b5:55:60:02:da:83:ff:81:19:d3:a4:61:7f: 59:c7:17:5d:b3:56:05:0d:e3:f4:5f:05:cf:da:00: 45:b2:65:ab:90:12:92:9c:ca:62:3f:4d:35:e6:e4: d2:2a:2d:8c:f2:c3:28:0d:af:fe:0c:47:4c:eb:96: 89:0d:29:f8:9e:87:2c:17:ef:51:37:a0:2f:db:1d: 3f:ab:ec:4e:a7:dc:90:83:5f:c0:fc:36:cc:24:09: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:8A:41:77:1E:5C:13:26:A0:7E:7B:8E:40:30:31:B8:69:1C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl X509v3 Authority Key Identifier: keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer sbgp-ipAddrBlock: critical IPv4: 142.9.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b1:5a:b0:eb:d8:40:dc:36:cd:2c:da:4e:c6:8d:18:fc:77: 3a:10:70:88:15:b9:2e:22:57:de:7c:87:33:f5:3c:d0:67:93: 80:e4:90:6b:ba:17:10:8f:17:db:8e:0c:ed:be:5d:89:ed:25: d9:a2:02:18:92:3a:41:c3:da:6a:4b:6f:fc:0f:0b:fc:53:f0: 0b:e4:5b:8f:1c:da:f7:90:06:83:10:96:d7:44:07:87:93:9e: 56:6c:bb:0f:c9:56:d2:00:be:0d:bf:b9:dd:21:da:ed:06:ee: 34:8f:e0:e1:dd:f0:c4:9c:aa:41:c5:62:9f:c8:fb:08:65:3a: 70:21:fc:29:8a:2e:d3:9a:85:db:0b:63:a5:f0:a6:b1:3d:c5: 5b:26:22:a5:03:2e:ab:c4:35:24:2c:6b:5d:08:61:93:d2:c7: 7d:f1:6d:22:56:e5:88:e0:c7:60:80:58:bd:cb:fa:9f:2d:7b: d4:38:93:1a:73:ee:10:57:8c:02:b3:8e:3c:6e:3b:74:3f:02: fa:35:f4:57:6a:41:b1:8a:fb:9d:22:ce:5b:64:24:f9:01:84: 12:37:cf:aa:40:e2:32:e2:ea:ad:47:b8:5e:ba:f9:20:cc:73: 06:28:1d:ea:ff:5b:f5:78:b3:04:e1:94:b9:38:fc:9e:e8:e5: f6:bc:46:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnOa6+z57PS5n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YzFhN2QtMWNkYi00ZTYzLWJhMzgtYWM1MGQxYTRk ZDQ2MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTQ4OTFmMWUtNTlmZC00MGY3LWI2MDEtOThiODQ2MjFmNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvteIP8FuIjaTgPwOxkq+FKDVUrp4P+UGBga Jk11H17tpjy8Opak6lJK1qm9KcyzDdxT5uSYYgbgkMDMA5Cqw4QJL3KAOsyUCU+R PbRNgkQTnSZh9KVQ3fh4fTBklXqDOs6gAT/y7j5hdEDgWmqfzjMkqmWVS7pxM8DA sraPKBPunoG6SMhsoQcjoxhwneYd/+myIsKqAMBJQlB6P9H8Hgy1zh7zY7VVYALa g/+BGdOkYX9Zxxdds1YFDeP0XwXP2gBFsmWrkBKSnMpiP0015uTSKi2M8sMoDa/+ DEdM65aJDSn4nocsF+9RN6Av2x0/q+xOp9yQg1/A/DbMJAnOIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR+ikF3HlwTJqB+e45AMDG4aRxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNzhj MWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUwZDFhNGRkNDYvYjE2OGE3ZDktZmVlNC0z ZjE3LTk4NmItNmJiN2JiZmM1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjc4YzFhN2QtMWNkYi00ZTYzLWJh MzgtYWM1MGQxYTRkZDQ2L2Y3OGMxYTdkLTFjZGItNGU2My1iYTM4LWFjNTBkMWE0 ZGQ0Ni5jcmwwHwYDVR0jBBgwFoAUDUS9q3wh+wtyI3xyVUVHp+nvQKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNzhjMWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUw ZDFhNGRkNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgn/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJixWrDr2EDcNs0s2k7GjRj8dzoQcIgVuS4iV958hzP1PNBnk4DkkGu6 FxCPF9uODO2+XYntJdmiAhiSOkHD2mpLb/wPC/xT8AvkW48c2veQBoMQltdEB4eT nlZsuw/JVtIAvg2/ud0h2u0G7jSP4OHd8MScqkHFYp/I+whlOnAh/CmKLtOahdsL Y6XwprE9xVsmIqUDLqvENSQsa10IYZPSx33xbSJW5Yjgx2CAWL3L+p8te9Q4kxpz 7hBXjAKzjjxuO3Q/Avo19FdqQbGK+50izltkJPkBhBI3z6pA4jLi6q1HuF66+SDM cwYoHer/W/V4swThlLk4/J7o5fa8RuE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:07:29 2025 by rpki-client