$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa File: 3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa (raw, json) Hash identifier: wUh/nmv6/Y/n/ZATuADamIjw7Rc26jlB6yVVcfjm9gs= Subject key identifier: 51:38:8F:51:7A:07:DF:8C:35:3B:59:78:50:E5:51:F4:B5:91:B8:D2 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F43285849C4D4B4337600D065E8A05B00 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 7224 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b4:33:76:00:d0:65:e8:a0:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=bdefbc8e-785c-4b2f-998c-92f7e022e8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:05:29:59:42:0a:ae:61:3b:10:00:b9:85: ec:80:4d:0a:c4:e1:ea:bf:ca:64:55:ee:1b:dc:80: 6e:cf:cb:32:90:a5:35:a4:43:93:c3:69:31:5b:10: d6:df:f1:ee:97:b3:f0:94:c8:2e:7f:86:33:fc:fd: 8d:d8:87:ec:f5:ab:2c:b2:f8:81:54:e6:97:18:f8: d6:1c:d4:cd:2b:65:8a:29:44:d9:08:fd:47:7a:a8: 24:ab:cd:42:64:8d:3b:9d:31:0d:c0:d4:02:3a:e5: 5a:ec:53:ec:3f:e8:82:d3:e2:e3:26:c8:31:12:dd: 45:b9:f2:ee:1a:b8:5a:1a:db:34:f8:d4:29:2e:4c: 4b:5c:0c:f9:0f:7d:ed:ac:77:1d:a8:d1:a6:3f:5f: bc:38:88:1e:b4:06:e6:6c:16:2d:66:94:81:75:4c: 1a:5d:4b:41:fb:2a:79:18:0f:07:4f:d4:af:7d:42: 22:ca:e4:74:97:67:b2:0a:b0:27:c4:4c:15:ab:30: ec:13:d4:06:47:f3:62:ae:2e:b2:74:47:70:a6:25: 9d:93:b5:62:86:96:5a:1b:9b:91:57:c6:24:85:9a: e9:a6:7d:07:e9:76:7b:76:0f:ad:f3:0d:05:fd:76: 94:ae:1e:a2:82:90:3b:ed:55:3b:0f:71:d7:2d:a0: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:8F:51:7A:07:DF:8C:35:3B:59:78:50:E5:51:F4:B5:91:B8:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:23:05:ad:3e:59:18:43:b2:16:10:49:c1:ba:9a:d0:c9:63: 14:49:16:da:02:30:2d:8c:a8:31:34:eb:fb:0d:e7:57:5a:ce: 1f:cf:2c:03:f3:1d:b4:2a:a7:1e:d8:7a:8c:79:9b:6f:b1:97: b8:0e:e5:44:ea:f0:d2:6c:de:98:cd:b3:6f:1f:e8:45:8e:7f: b6:f1:b5:e4:8a:20:ed:90:88:0f:cc:8e:c6:54:9f:55:af:0d: 61:bd:38:0a:d4:99:c5:5a:27:d5:d6:c5:06:54:d9:2b:7b:8f: 45:cb:c5:7b:ff:0b:20:14:f8:10:54:5d:8a:90:8c:d0:07:7e: ae:40:f9:37:0c:c2:93:d2:22:6e:32:4d:09:30:ef:3b:50:38: 2a:ad:b1:c9:dc:11:d2:4c:18:56:12:9c:3b:d2:3e:79:e1:9b: b8:9e:d3:8b:89:77:22:48:9c:f1:33:20:af:01:56:3d:9c:f2: fe:df:42:76:ee:31:8a:1e:10:5f:38:fe:6e:5e:fd:1b:6d:ed: 61:2a:ef:4a:4f:9b:b2:46:a0:da:ba:97:e0:0e:77:4e:4d:c9: 24:a5:b3:ce:c4:e7:1f:78:e6:14:e7:9b:15:8b:ac:c2:7e:9a: a5:b9:eb:ef:45:37:2c:a1:08:13:30:71:8a:1b:ef:20:c5:9a: ac:8b:24:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LQzdgDQZeigWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YmRlZmJjOGUtNzg1Yy00YjJmLTk5OGMtOTJmN2UwMjJlOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBEFKVlCCq5hOxAAuYXsgE0KxOHqv8pkVe4b 3IBuz8sykKU1pEOTw2kxWxDW3/Hul7PwlMguf4Yz/P2N2Ifs9asssviBVOaXGPjW HNTNK2WKKUTZCP1Heqgkq81CZI07nTENwNQCOuVa7FPsP+iC0+LjJsgxEt1FufLu GrhaGts0+NQpLkxLXAz5D33trHcdqNGmP1+8OIgetAbmbBYtZpSBdUwaXUtB+yp5 GA8HT9SvfUIiyuR0l2eyCrAnxEwVqzDsE9QGR/Niri6ydEdwpiWdk7VihpZaG5uR V8YkhZrppn0H6XZ7dg+t8w0F/XaUrh6igpA77VU7D3HXLaCpxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE4j1F6B9+MNTtZeFDlUfS1kbjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2ZiMDhkYzctYmVlYS0z NDU4LTkwOGQtOWIxYThiZjZhMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgjBa0+WRhDshYQScG6mtDJYxRJFtoCMC2MqDE06/sN51dazh/PLAPz HbQqpx7Yeox5m2+xl7gO5UTq8NJs3pjNs28f6EWOf7bxteSKIO2QiA/MjsZUn1Wv DWG9OArUmcVaJ9XWxQZU2St7j0XLxXv/CyAU+BBUXYqQjNAHfq5A+TcMwpPSIm4y TQkw7ztQOCqtscncEdJMGFYSnDvSPnnhm7ie04uJdyJInPEzIK8BVj2c8v7fQnbu MYoeEF84/m5e/Rtt7WEq70pPm7JGoNq6l+AOd05NySSls87E5x945hTnmxWLrMJ+ mqW56+9FNyyhCBMwcYob7yDFmqyLJNU= -----END CERTIFICATE-----Generated at Mon Jun 16 04:26:08 2025 by rpki-client