$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa File: 43db4554-4f92-301e-95ab-48747f15d838.roa (raw, json) Hash identifier: WctlJ70eS6S5pnndLmntyA5lFkhffzE4RQp7KleQ2vc= Subject key identifier: 36:94:D4:AD:DC:14:23:89:E3:7E:D3:58:13:D4:7C:3E:4B:D3:5A:43 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F43285849E7BA724AF4B750F320AB8C00 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 192.184.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:72:4a:f4:b7:50:f3:20:ab:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=d2a22b35-9205-4165-925e-45ae8e3b57a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:47:42:5b:01:6f:d5:c5:7d:0d:72:54:45: 63:78:59:dd:4e:c0:b8:38:b9:71:bb:a9:9b:4c:53: 73:58:cf:ba:9e:83:65:2a:0b:7f:96:ca:b3:33:ff: 08:c6:98:0e:8d:55:d2:08:3d:87:2f:5a:4e:81:a5: fb:13:b5:a8:03:bc:14:d4:d8:88:be:0e:93:c3:1f: 49:a8:be:6d:f5:39:4d:ed:9c:e0:4b:20:5e:61:ea: 98:90:9c:23:d0:e2:54:d2:0b:e0:f5:80:81:57:67: c9:7b:bb:0b:ad:8e:5d:bc:8b:95:49:8a:bd:b0:02: d9:a1:6a:ec:da:28:02:e9:04:2d:a8:16:27:a9:cf: ff:f7:de:4a:1a:9d:58:47:88:08:1f:cd:26:27:f2: 64:bb:fb:2e:04:fd:8b:7a:36:b6:e6:00:dc:cd:3a: 21:22:87:81:9f:29:cf:c5:1f:ba:f1:6f:0a:e9:24: ba:41:c9:27:2f:4f:78:40:50:fb:72:67:60:d1:ed: c1:1b:d8:cb:bf:5d:87:dd:ce:d2:a7:a8:f2:69:76: 84:69:5e:e7:6b:13:e4:19:45:02:2d:bb:fc:fc:9b: 44:bd:b3:ad:18:80:23:b1:47:e7:83:0d:ee:8a:d5: 5c:57:b5:c4:a5:95:3a:0c:bf:8d:3b:59:7d:47:2c: 27:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:D4:AD:DC:14:23:89:E3:7E:D3:58:13:D4:7C:3E:4B:D3:5A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:99:f6:75:a6:24:af:ba:72:d0:76:3d:62:6a:40:aa:a9:6d: 69:80:19:dc:78:42:1c:7d:9a:3c:e8:25:55:44:7e:9f:42:48: 61:f7:7f:0e:af:da:dc:31:92:71:f7:2c:87:a6:14:52:d3:2c: 3e:a5:55:25:78:1b:21:73:d0:60:8c:3a:8d:78:4f:00:94:f2: 9a:68:ef:83:25:4f:8d:f3:ca:1a:b7:d4:b8:af:aa:e1:84:91: 26:5f:c9:0b:0c:1b:60:2e:46:b6:d8:88:44:03:66:a6:0b:0d: 42:06:51:e7:a5:5c:b9:9a:e7:72:18:87:33:05:33:89:7d:75: 4d:55:7e:2c:b6:ba:85:ce:90:dc:77:47:f5:fb:d7:3b:62:86: aa:7c:9f:2d:ce:21:c0:e6:5d:9c:e4:cb:17:49:a6:f2:e3:9c: cf:59:86:fc:ea:ac:da:24:2e:6b:fb:1d:7b:65:2c:63:d8:68: ca:02:49:6b:43:b3:cf:8d:89:e8:6d:ee:29:39:bf:47:fa:82: 24:44:f9:2a:29:63:83:c2:f6:5a:4d:29:6b:c2:6b:d5:f8:fb: e4:2a:85:e7:04:0a:d6:12:35:4e:95:51:5f:45:ff:cd:54:a7: 9e:52:dd:e7:8c:90:0b:a5:bd:8e:2f:11:2d:5e:29:f6:55:d0: 95:7b:4a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunJK9LdQ8yCrjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZDJhMjJiMzUtOTIwNS00MTY1LTkyNWUtNDVhZThlM2I1N2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLZHQlsBb9XFfQ1yVEVjeFndTsC4OLlxu6mb TFNzWM+6noNlKgt/lsqzM/8IxpgOjVXSCD2HL1pOgaX7E7WoA7wU1NiIvg6Twx9J qL5t9TlN7ZzgSyBeYeqYkJwj0OJU0gvg9YCBV2fJe7sLrY5dvIuVSYq9sALZoWrs 2igC6QQtqBYnqc//995KGp1YR4gIH80mJ/Jku/suBP2Leja25gDczTohIoeBnynP xR+68W8K6SS6QcknL094QFD7cmdg0e3BG9jLv12H3c7Sp6jyaXaEaV7naxPkGUUC Lbv8/JtEvbOtGIAjsUfngw3uitVcV7XEpZU6DL+NO1l9RywnfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaU1K3cFCOJ437TWBPUfD5L01pDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvNDNkYjQ1NTQtNGY5Mi0z MDFlLTk1YWItNDg3NDdmMTVkODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqZ9nWmJK+6ctB2PWJqQKqpbWmAGdx4Qhx9mjzoJVVEfp9CSGH3fw6v 2twxknH3LIemFFLTLD6lVSV4GyFz0GCMOo14TwCU8ppo74MlT43zyhq31LivquGE kSZfyQsMG2AuRrbYiEQDZqYLDUIGUeelXLma53IYhzMFM4l9dU1Vfiy2uoXOkNx3 R/X71ztihqp8ny3OIcDmXZzkyxdJpvLjnM9ZhvzqrNokLmv7HXtlLGPYaMoCSWtD s8+Nieht7ik5v0f6giRE+SopY4PC9lpNKWvCa9X4++QqhecECtYSNU6VUV9F/81U p55S3eeMkAulvY4vES1eKfZV0JV7Smg= -----END CERTIFICATE-----Generated at Sat Jun 14 06:42:34 2025 by rpki-client