$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa File: 4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa (raw, json) Hash identifier: WF5W7fJsFRX4crmlY6ng0ccxHjeks/8nOw1FxfWmdNM= Subject key identifier: 5F:8C:93:5A:4B:DB:BB:11:A1:2D:19:24:8D:8B:05:05:3D:04:87:69 Certificate issuer: /CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1 Certificate serial: 010D0C9F4328584A20F54F63546349DB7330F180 Authority key identifier: 41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa Signing time: Mon 09 Jun 2025 01:00:50 +0000 ROA not before: Mon 09 Jun 2025 01:00:50 +0000 ROA not after: Sun 07 Sep 2025 01:00:50 +0000 asID: 33360 IP address blocks: 192.112.255.0/24 maxlen: 24 204.89.22.0/24 maxlen: 24 204.145.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:f5:4f:63:54:63:49:db:73:30:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1 Validity Not Before: Jun 9 01:00:50 2025 GMT Not After : Sep 7 01:00:50 2025 GMT Subject: CN=ea4f0936-0a87-4a22-a445-f65e96dcbe42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ec:7f:07:6f:fe:da:f3:99:e9:ab:c6:cb:f6: 7a:bc:41:3a:5c:05:04:55:0e:6d:f7:a8:b8:16:4c: 38:15:c0:e8:82:e8:e1:ae:f1:10:59:7e:4e:dc:47: be:0f:f9:60:27:95:15:58:ea:48:a4:75:ca:d6:80: 10:04:1c:61:20:d2:fb:df:30:a1:2e:d6:98:32:b4: 74:43:35:e8:77:b0:f4:f2:e7:cf:1e:4a:56:b5:b9: 9d:17:fc:dd:c6:23:fb:2a:26:61:7c:c0:5b:26:f2: 15:f7:39:34:fc:bb:6d:bb:3c:97:1d:44:0f:10:cc: 8d:a4:9f:19:56:9d:12:18:87:65:cd:fb:fc:ef:4e: ca:3f:b7:b5:46:34:bc:10:b8:31:4b:50:44:f8:cd: 71:0d:6d:da:4b:2d:65:0b:f7:06:3a:db:7b:7e:b0: f0:b7:b1:26:77:0b:97:2f:71:f0:00:5f:d1:c6:95: a2:45:07:a8:f1:f8:b9:7e:ca:23:51:f8:d4:20:64: ba:f1:ac:3d:20:85:1d:d0:70:27:5d:13:b3:4b:8a: 59:56:b7:c6:4a:1d:3e:a9:52:72:f5:27:48:18:c8: b9:70:86:66:1f:2a:40:d8:d2:d4:61:d6:5a:c5:72: 84:ed:fa:2e:7f:d7:f3:8f:bc:35:08:1b:eb:e2:87: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8C:93:5A:4B:DB:BB:11:A1:2D:19:24:8D:8B:05:05:3D:04:87:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl X509v3 Authority Key Identifier: keyid:41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer sbgp-ipAddrBlock: critical IPv4: 192.112.255.0/24 204.89.22.0/24 204.145.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:44:09:07:5d:e7:27:f7:53:c6:37:df:ca:a2:3c:5b:62:54: c1:bb:f6:8f:19:08:cf:07:b0:21:19:c3:38:3c:e4:6e:e7:fe: ba:19:b2:b9:a3:08:d1:6b:79:11:89:3c:fc:c0:ef:b4:6a:a4: d0:22:bb:6d:a4:cb:c2:87:11:d0:7f:d4:fb:ac:5b:48:6a:a6: 36:39:2f:91:3e:cf:e7:03:a9:60:e8:e6:76:1e:31:de:cf:26: f9:c3:11:6c:69:1a:97:e6:d9:2e:9e:07:c9:74:26:e0:70:7b: 45:a7:e9:d7:24:6a:bb:71:8e:df:f5:8b:39:66:0c:ce:5b:b3: 03:d8:1d:d0:f1:bd:b7:68:77:e5:36:0e:fe:67:f7:8f:41:ff: 91:e2:b3:53:fd:e9:ee:5c:a4:53:43:a0:64:12:2e:13:1c:ad: 79:58:d3:8e:7e:44:8c:89:71:74:e9:d2:6e:8e:55:01:41:e2: d4:97:c0:51:52:b7:7b:0e:e5:a9:e0:d9:64:0f:3a:e5:d1:8d: 3c:75:5e:df:78:10:46:aa:6d:dd:bd:6b:33:da:10:92:d9:72: 44:4b:48:55:57:ec:ed:bc:3f:dd:c7:4a:17:37:17:e8:86:2a: 35:ce:7e:17:6f:6e:1f:25:d1:39:ac:99:0c:e3:32:3d:ed:de: 81:10:34:21 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEog9U9jVGNJ23Mw8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0MjlkNzktYjZlMi00Njc3LWE2ZDEtZTM4YzkwNDVl YmIxMB4XDTI1MDYwOTAxMDA1MFoXDTI1MDkwNzAxMDA1MFowLzEtMCsGA1UEAxMk ZWE0ZjA5MzYtMGE4Ny00YTIyLWE0NDUtZjY1ZTk2ZGNiZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+x/B2/+2vOZ6avGy/Z6vEE6XAUEVQ5t96i4 Fkw4FcDogujhrvEQWX5O3Ee+D/lgJ5UVWOpIpHXK1oAQBBxhINL73zChLtaYMrR0 QzXod7D08ufPHkpWtbmdF/zdxiP7KiZhfMBbJvIV9zk0/LttuzyXHUQPEMyNpJ8Z Vp0SGIdlzfv8707KP7e1RjS8ELgxS1BE+M1xDW3aSy1lC/cGOtt7frDwt7EmdwuX L3HwAF/RxpWiRQeo8fi5fsojUfjUIGS68aw9IIUd0HAnXROzS4pZVrfGSh0+qVJy 9SdIGMi5cIZmHypA2NLUYdZaxXKE7fouf9fzj7w1CBvr4oehNwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFF+Mk1pL27sRoS0ZJI2LBQU9BIdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iZTQy OWQ3OS1iNmUyLTQ2NzctYTZkMS1lMzhjOTA0NWViYjEvNGVhMzc3YzEtMGRmNS0z ZWE0LTg1MDgtYmMyNzNiYTdlODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmU0MjlkNzktYjZlMi00Njc3LWE2 ZDEtZTM4YzkwNDVlYmIxL2JlNDI5ZDc5LWI2ZTItNDY3Ny1hNmQxLWUzOGM5MDQ1 ZWJiMS5jcmwwHwYDVR0jBBgwFoAUQX+GdlkkEqCMIPrEfpgv/bg/4H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iZTQyOWQ3OS1iNmUyLTQ2NzctYTZkMS1lMzhj OTA0NWViYjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwHD/AwQA zFkWAwQAzJFgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHxECQdd5yf3U8Y338qiPFtiVMG79o8ZCM8HsCEZ wzg85G7n/roZsrmjCNFreRGJPPzA77RqpNAiu22ky8KHEdB/1PusW0hqpjY5L5E+ z+cDqWDo5nYeMd7PJvnDEWxpGpfm2S6eB8l0JuBwe0Wn6dckartxjt/1izlmDM5b swPYHdDxvbdod+U2Dv5n949B/5His1P96e5cpFNDoGQSLhMcrXlY045+RIyJcXTp 0m6OVQFB4tSXwFFSt3sO5ang2WQPOuXRjTx1Xt94EEaqbd29azPaEJLZckRLSFVX 7O28P93HShc3F+iGKjXOfhdvbh8l0TmsmQzjMj3t3oEQNCE= -----END CERTIFICATE-----Generated at Mon Jun 16 12:27:24 2025 by rpki-client