$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa File: 195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa (raw, json) Hash identifier: WR5bOR9lR9LFlRLQ9+mjoad0U09PTrjafK0T4wweFjI= Subject key identifier: FE:80:AC:D4:59:18:80:29:A8:4B:64:F7:69:64:A9:05:1C:45:45:74 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F432858494303F640DAB19EA6BB700F80 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 401398 IP address blocks: 134.195.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:f6:40:da:b1:9e:a6:bb:70:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=10734163-60ab-46bc-8a57-56d8693a3d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:0c:03:a4:07:0f:ea:91:6d:06:90:a5:5a: c2:95:d2:43:b3:bc:32:17:fb:81:48:f9:10:5a:75: ce:40:c3:28:98:bc:75:7c:5b:21:82:aa:77:ad:e5: a1:6e:1f:47:73:e9:3a:8d:ac:cd:ba:cf:b2:62:b4: 21:a4:29:0a:0f:de:ab:d6:39:b4:03:7c:6f:bb:9b: ed:45:c4:e9:64:60:36:08:3b:5f:6b:0a:9a:f0:52: e1:14:32:de:ed:f9:97:93:28:60:a1:f2:fe:eb:a4: 5f:d6:7f:bb:23:67:38:18:3b:f3:71:c8:23:40:87: a5:29:fd:8a:68:68:b6:ca:97:bc:6f:e8:bd:4d:8f: 29:8a:61:ee:5d:8d:0d:a9:b4:62:0c:8f:4d:82:c7: 04:51:3b:8c:0c:7b:18:71:49:32:5e:8a:29:74:c0: 40:ac:af:f4:90:18:ed:be:3d:67:69:b6:80:70:3a: 74:ca:96:e4:d2:33:e8:57:53:26:d4:f4:b4:d8:64: f7:f7:fe:c4:dc:33:36:3f:1a:3f:5b:92:3f:58:f1: 9d:c2:2b:61:42:de:c6:6c:60:a6:7c:21:07:1a:dc: 4d:dc:f2:5e:df:3e:23:ef:0a:d4:ec:15:6c:fe:c5: 36:09:be:dc:9d:26:84:9c:82:9e:eb:77:47:ac:16: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:80:AC:D4:59:18:80:29:A8:4B:64:F7:69:64:A9:05:1C:45:45:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 134.195.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f2:0f:4c:1c:d8:b8:5c:e4:a3:15:4d:54:89:13:47:2d:87: f2:8d:41:97:4b:c4:8a:12:e5:29:8a:97:ca:db:84:88:03:38: bd:ec:ad:08:a6:65:05:2f:58:66:dd:41:cd:c3:1f:bc:36:f1: 7e:60:d8:33:d4:32:dd:5c:b5:e9:db:ee:e5:72:70:06:db:3d: 63:4c:7b:54:50:0e:d2:36:30:da:b6:2b:a2:24:a3:a9:75:c4: 13:22:2f:8d:7f:ed:de:e0:68:58:bb:2a:b0:44:52:20:60:2a: 4c:00:94:48:b7:39:8d:1b:64:92:f3:1d:11:b7:ab:77:47:43: 8d:a6:2f:d3:0b:67:7c:cb:ca:00:40:d5:8c:e4:e5:72:cc:5c: 14:a5:3a:d6:a5:a1:36:82:5f:93:8f:b1:70:ab:a5:f4:0e:c5: c5:15:11:e6:0d:3b:d1:69:77:34:b5:8f:59:15:52:67:6c:12: 90:e8:9a:58:be:a5:f5:29:48:8d:ce:25:56:29:8e:84:13:e2: 4f:cf:4a:54:d3:a0:ab:78:44:e7:85:8c:bc:6f:29:b9:62:f0: d0:c2:2c:84:b4:66:d8:79:f8:51:15:73:34:f9:2c:b9:15:2f: 73:1d:00:c6:3c:b1:d8:ce:93:d6:7a:ae:e1:8c:2a:1b:a4:79: b2:50:cd:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA/ZA2rGeprtwD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk MTA3MzQxNjMtNjBhYi00NmJjLThhNTctNTZkODY5M2EzZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVQMA6QHD+qRbQaQpVrCldJDs7wyF/uBSPkQ WnXOQMMomLx1fFshgqp3reWhbh9Hc+k6jazNus+yYrQhpCkKD96r1jm0A3xvu5vt RcTpZGA2CDtfawqa8FLhFDLe7fmXkyhgofL+66Rf1n+7I2c4GDvzccgjQIelKf2K aGi2ype8b+i9TY8pimHuXY0NqbRiDI9NgscEUTuMDHsYcUkyXoopdMBArK/0kBjt vj1nabaAcDp0ypbk0jPoV1Mm1PS02GT39/7E3DM2Pxo/W5I/WPGdwithQt7GbGCm fCEHGtxN3PJe3z4j7wrU7BVs/sU2Cb7cnSaEnIKe63dHrBYChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6ArNRZGIApqEtk92lkqQUcRUV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMTk1Yzg2MGQtOGJlMC0z NmNiLWIwOTMtZGMwZTBiYTBhNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADryD0wc2Lhc5KMVTVSJE0cth/KNQZdLxIoS5SmKl8rbhIgDOL3srQim ZQUvWGbdQc3DH7w28X5g2DPUMt1ctenb7uVycAbbPWNMe1RQDtI2MNq2K6Iko6l1 xBMiL41/7d7gaFi7KrBEUiBgKkwAlEi3OY0bZJLzHRG3q3dHQ42mL9MLZ3zLygBA 1Yzk5XLMXBSlOtaloTaCX5OPsXCrpfQOxcUVEeYNO9FpdzS1j1kVUmdsEpDomli+ pfUpSI3OJVYpjoQT4k/PSlTToKt4ROeFjLxvKbli8NDCLIS0Zth5+FEVczT5LLkV L3MdAMY8sdjOk9Z6ruGMKhukebJQzd0= -----END CERTIFICATE-----Generated at Thu Apr 17 20:04:22 2025 by rpki-client