$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa File: d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa (raw, json) Hash identifier: U5327a9wyE5wN26hnQTZaH0qiuyglztoS8y3c//r/n4= Subject key identifier: D8:2A:B8:70:A8:C7:FA:F2:B0:67:17:87:A5:0A:DC:B3:8C:28:E3:B2 Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F432858493C092445C71640D92ED89B00 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 192.64.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:24:45:c7:16:40:d9:2e:d8:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=4d9fbdbe-a515-4c27-af57-5bd7213c4e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:32:f7:5a:10:1e:ae:d5:8a:f6:2b:c2:56: 5f:2e:78:03:ac:3e:55:f5:2c:2c:ec:45:53:14:e4: 73:4a:ee:de:8f:8b:5a:27:c1:36:55:40:b8:32:f5: ea:d6:88:7b:7c:ff:08:ec:1b:33:dc:00:c0:f5:1c: a1:51:99:2e:23:fd:53:87:eb:22:38:aa:f8:dd:a2: c2:76:c5:c1:5c:e9:14:1e:5d:99:e9:84:76:58:5f: 53:1d:4c:f1:bb:26:6d:6c:ce:51:d7:07:7f:40:13: d6:94:b7:74:0b:08:fa:19:5c:bf:b9:29:14:cb:b3: b1:8c:a5:2e:e8:c3:df:20:61:36:eb:21:e5:96:6e: 25:05:98:1b:20:bc:52:86:6b:54:71:39:8c:29:2f: 07:09:ed:69:bf:06:a9:d9:aa:ce:8b:e7:dd:10:e5: b4:7b:2e:cc:87:3c:dc:62:b0:88:41:d1:1b:0d:58: 26:08:08:2b:91:46:8f:b4:75:63:ed:c9:63:28:2b: 41:7d:b9:fa:80:a6:82:01:a5:b7:f7:73:b7:87:e4: d6:e9:30:53:5e:ec:5e:40:d0:a5:32:e1:c2:43:f2: f2:76:95:c6:11:28:66:fc:37:4a:a7:15:8c:5a:30: 62:eb:df:18:a1:d8:62:c1:07:58:8a:00:bc:be:22: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2A:B8:70:A8:C7:FA:F2:B0:67:17:87:A5:0A:DC:B3:8C:28:E3:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv4: 192.64.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0e:c0:94:41:0d:85:33:e4:46:4d:52:3c:dd:38:e1:58:b4: 1e:72:6e:4b:91:d9:eb:e4:8d:62:98:e0:86:88:89:85:f5:86: 3f:5d:90:77:4e:c9:a2:fc:79:03:cb:bf:5f:7e:05:a2:b5:83: 40:77:50:73:0a:bf:75:b5:66:cf:4a:29:0f:94:c7:00:07:94: ef:c5:0b:f8:1f:df:9c:c4:a7:25:f9:27:11:72:0c:cc:3e:bf: f1:fd:49:0f:0c:c7:4f:2b:af:53:43:89:71:ca:09:8e:2e:a6: 2d:11:80:6f:aa:3c:27:85:d1:3d:da:74:ce:07:ff:5c:4a:43: be:98:4d:c1:4b:9d:18:52:c5:9b:54:8a:55:df:9a:2d:fc:b1: ef:e1:65:5f:b3:42:6a:21:71:d4:9f:00:2a:31:6c:ef:e8:54: 70:3c:76:0b:25:99:89:02:6a:d3:ee:83:30:61:05:5c:ed:62: be:07:12:86:a4:0a:45:9c:90:dc:90:14:5b:5c:42:34:83:39: 37:11:35:b9:0e:43:56:1d:4d:c9:c1:65:db:37:e6:47:0c:70: c3:73:72:20:77:26:1b:d0:74:e3:d2:d7:41:df:d9:46:fd:a6: 57:a2:0c:46:4f:a4:60:e7:4a:ca:a8:2f:f8:ee:f7:94:7b:01: 9b:b2:65:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSRFxxZA2S7YmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NGQ5ZmJkYmUtYTUxNS00YzI3LWFmNTctNWJkNzIxM2M0ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt90y91oQHq7VivYrwlZfLngDrD5V9Sws7EVT FORzSu7ej4taJ8E2VUC4MvXq1oh7fP8I7Bsz3ADA9RyhUZkuI/1Th+siOKr43aLC dsXBXOkUHl2Z6YR2WF9THUzxuyZtbM5R1wd/QBPWlLd0Cwj6GVy/uSkUy7OxjKUu 6MPfIGE26yHllm4lBZgbILxShmtUcTmMKS8HCe1pvwap2arOi+fdEOW0ey7Mhzzc YrCIQdEbDVgmCAgrkUaPtHVj7cljKCtBfbn6gKaCAaW393O3h+TW6TBTXuxeQNCl MuHCQ/LydpXGEShm/DdKpxWMWjBi698YodhiwQdYigC8viIhSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgquHCox/rysGcXh6UK3LOMKOOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvZDU5YjhjMTItYTFlNC0z OGJiLTg1N2QtZWE3OGVkM2EzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMOwJRBDYUz5EZNUjzdOOFYtB5ybkuR2evkjWKY4IaIiYX1hj9dkHdO yaL8eQPLv19+BaK1g0B3UHMKv3W1Zs9KKQ+UxwAHlO/FC/gf35zEpyX5JxFyDMw+ v/H9SQ8Mx08rr1NDiXHKCY4upi0RgG+qPCeF0T3adM4H/1xKQ76YTcFLnRhSxZtU ilXfmi38se/hZV+zQmohcdSfACoxbO/oVHA8dgslmYkCatPugzBhBVztYr4HEoak CkWckNyQFFtcQjSDOTcRNbkOQ1YdTcnBZds35kcMcMNzciB3JhvQdOPS10Hf2Ub9 pleiDEZPpGDnSsqoL/ju95R7AZuyZYE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:40:08 2025 by rpki-client