$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa File: 0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa (raw, json) Hash identifier: K1GWdgWkcHeIImp7tWeVUp/bzLW1eCYqPgIZmUX9IeY= Subject key identifier: 1B:CD:42:7F:3B:FE:3D:0E:D8:0F:FE:84:52:B6:3D:A8:69:FA:3F:2A Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285849605414A0B7ACBEF5221C08C0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 184.95.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:14:a0:b7:ac:be:f5:22:1c:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=8239ee5c-d231-462f-8ae7-cade4151cecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:a5:78:96:9b:71:d9:af:ff:cf:0a:9e:b3: 73:d2:c9:f5:f9:5b:b9:d2:90:00:dd:01:00:d2:8d: 8c:37:35:be:2b:73:49:ad:0e:5c:c5:b5:62:8a:a3: a5:25:b3:6c:f6:5a:a9:69:34:74:5c:31:52:cb:0b: d0:3f:09:c2:83:e3:dd:db:1a:25:9b:dc:13:25:ef: 56:72:2e:56:11:08:f8:74:61:68:1b:fa:c7:30:09: 04:92:4f:fa:72:03:41:f3:85:f0:5b:05:d1:50:24: 55:83:ee:05:2b:1b:6f:bc:e8:08:fd:be:08:b8:77: c3:6c:c5:c8:54:37:b9:99:10:1d:ce:65:14:77:aa: 33:9c:d7:bf:c9:ca:7c:b4:ba:09:00:be:ca:58:1e: de:44:e5:0f:7a:cf:17:f7:6b:f2:4d:0b:3d:c7:bc: d2:81:1c:81:fd:fa:f4:4d:c9:05:91:15:6b:79:4a: 13:2e:d2:10:1b:c5:94:5e:08:4d:3c:09:f7:9b:90: 35:e5:e1:ce:19:fe:fa:4d:c8:4e:79:e7:21:23:51: 4b:9d:00:85:19:c6:6b:eb:44:ba:88:30:c4:4b:e2: f5:5b:ef:b4:63:e7:11:0f:83:b0:69:0c:c7:71:95: 66:85:2b:54:d0:26:21:23:3d:6e:31:ba:f4:26:37: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:42:7F:3B:FE:3D:0E:D8:0F:FE:84:52:B6:3D:A8:69:FA:3F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 184.95.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b1:56:c3:08:4a:71:02:81:bf:67:c6:dc:b7:1b:64:b4:2f: 28:f9:fa:93:bd:31:28:fc:fb:23:19:56:43:05:19:70:be:b3: c8:3e:98:f9:a9:b1:28:83:81:1e:88:33:b1:09:05:bd:cd:5d: 32:ba:ce:2a:4a:b0:03:ad:6c:41:3d:21:6b:33:8e:7e:35:63: 98:f1:10:d3:3a:aa:c8:b8:9c:18:7a:73:ec:6d:ce:4f:4a:dc: 36:9e:5d:59:fd:bf:8e:1e:c6:7e:44:bb:6c:c8:ba:dd:0e:fa: 64:9f:96:f3:70:46:49:a6:33:19:de:c0:11:29:01:08:b3:e6: d7:9b:17:e4:ae:2a:88:87:c3:ac:1c:b5:44:a7:bb:6d:5a:57: 65:e8:8d:14:09:3e:aa:4d:af:b6:f8:8b:c5:34:1f:de:0d:75: 1f:dd:a9:e6:40:31:22:76:3f:bd:29:74:a2:4d:34:03:3c:94: 22:35:88:fe:3d:97:bd:c3:f7:f1:50:a8:de:a8:93:5b:42:8b: d6:85:f5:b5:37:5a:47:1b:b2:8f:34:54:df:bf:d3:23:62:44: 50:a0:b6:db:65:06:01:d7:4a:4f:64:0b:96:0a:b5:9b:26:fc: 14:d1:b2:fd:92:cc:e3:96:d2:72:1e:b1:5d:0f:42:8f:16:ac: c8:aa:09:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBSgt6y+9SIcCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ODIzOWVlNWMtZDIzMS00NjJmLThhZTctY2FkZTQxNTFjZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXyleJabcdmv/88KnrNz0sn1+Vu50pAA3QEA 0o2MNzW+K3NJrQ5cxbViiqOlJbNs9lqpaTR0XDFSywvQPwnCg+Pd2xolm9wTJe9W ci5WEQj4dGFoG/rHMAkEkk/6cgNB84XwWwXRUCRVg+4FKxtvvOgI/b4IuHfDbMXI VDe5mRAdzmUUd6oznNe/ycp8tLoJAL7KWB7eROUPes8X92vyTQs9x7zSgRyB/fr0 TckFkRVreUoTLtIQG8WUXghNPAn3m5A15eHOGf76TchOeechI1FLnQCFGcZr60S6 iDDES+L1W++0Y+cRD4OwaQzHcZVmhStU0CYhIz1uMbr0JjfKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvNQn87/j0O2A/+hFK2Pahp+j8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMGJiZjBhNDEtMjIxMy0z YWFkLWFjMWYtMjkyY2IwOTI2YjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuF/OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuxVsMISnECgb9nxty3G2S0Lyj5+pO9MSj8+yMZVkMFGXC+s8g+mPmp sSiDgR6IM7EJBb3NXTK6zipKsAOtbEE9IWszjn41Y5jxENM6qsi4nBh6c+xtzk9K 3DaeXVn9v44exn5Eu2zIut0O+mSflvNwRkmmMxnewBEpAQiz5tebF+SuKoiHw6wc tUSnu21aV2XojRQJPqpNr7b4i8U0H94NdR/dqeZAMSJ2P70pdKJNNAM8lCI1iP49 l73D9/FQqN6ok1tCi9aF9bU3Wkcbso80VN+/0yNiRFCgtttlBgHXSk9kC5YKtZsm /BTRsv2SzOOW0nIesV0PQo8WrMiqCf8= -----END CERTIFICATE-----Generated at Fri Apr 11 22:47:56 2025 by rpki-client