$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa File: 509e4ddf-df6f-34cc-83d4-959041c0d418.roa (raw, json) Hash identifier: 7+0dJhuCnXJ80i5ThFomY+Es9ATSTRd8jiw6wpaCx58= Subject key identifier: EA:49:6F:61:71:3C:4D:4F:59:DB:02:14:42:58:66:11:A9:84:EB:52 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F432858494B63FFD3DBD3B60535654E00 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 16575 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:ff:d3:db:d3:b6:05:35:65:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=86821746-a865-41c8-92d6-4553fcc41933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:dd:b7:62:24:c2:48:eb:2f:7d:56:90:a2: 87:9d:0e:43:13:ad:43:63:fd:40:80:5f:71:14:3e: 5a:82:9b:b3:52:62:6d:ea:e1:20:cb:35:5f:4b:31: 88:01:a5:3d:8c:c3:4b:b4:87:09:62:18:4e:2e:76: e5:71:15:ed:e8:a4:09:89:0d:19:10:c7:4e:01:7c: c4:d5:9e:26:72:bb:06:43:35:5d:e6:cb:69:6a:3e: 46:9b:56:4e:ec:99:9c:a1:9e:42:7a:6e:26:1b:04: 90:32:76:a5:f0:a2:39:dd:1e:be:55:0f:4a:ee:a5: b7:8a:b4:99:0e:51:4e:ac:d9:8d:00:59:bc:7e:84: 67:d2:47:83:70:8d:a8:ab:80:bb:2a:7f:a2:e2:d2: be:ac:46:8a:99:8e:37:7e:6d:02:63:fc:01:e3:58: 35:e1:7c:bd:4f:70:99:28:b4:29:26:1d:ae:1b:c2: 55:eb:fb:5a:ab:e9:26:03:9b:8b:6f:1a:3d:77:9d: 71:99:c8:7c:b5:da:b4:89:8e:64:12:f8:59:89:3f: 1f:9c:32:1f:24:13:b9:fb:8b:fe:f7:a3:3e:02:fc: 99:43:50:5d:d9:ba:93:26:e4:65:b7:6d:a3:56:37: 0a:4a:a8:1a:08:8c:72:78:45:cf:54:03:90:81:f1: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:49:6F:61:71:3C:4D:4F:59:DB:02:14:42:58:66:11:A9:84:EB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3f:4f:8b:74:c0:57:34:8c:39:81:85:84:59:9c:69:c2:fa: c9:db:20:c9:cf:db:d2:b3:7b:d3:d7:07:a4:dc:fd:2b:63:82: e0:5f:38:47:eb:3d:e6:5a:46:22:fb:5f:dd:92:85:00:f9:c4: 9e:79:ae:e5:d6:5a:aa:29:c5:f8:d4:63:40:69:bf:b1:99:66: 5d:43:72:75:26:70:b9:ce:23:b8:5d:d3:ce:e3:2f:db:6b:8d: 59:ad:5b:72:d2:58:10:25:26:c6:d0:94:5b:ba:56:70:8f:4b: 36:8a:3d:76:39:1d:85:39:a4:10:a2:a2:2b:f6:32:97:25:5d: 79:1e:dc:14:09:70:fd:8c:e2:f6:8f:c2:7c:a7:42:c4:ba:9c: 7c:bf:52:60:b9:5e:56:63:d5:88:4b:2b:9b:27:53:1a:30:9d: be:59:83:c9:98:5d:a3:1a:95:4a:3f:42:61:4a:4d:4b:fc:f6: 5a:98:b9:d4:70:cd:ee:11:a9:9e:36:18:0a:00:e8:d5:0d:24: 89:22:5e:13:32:90:87:81:8a:c8:85:17:b3:d1:c6:0f:8e:4b: 97:cd:27:31:dd:d8:df:0a:3b:79:6f:1b:ab:a6:68:1f:50:83: ed:51:8b:e0:5a:15:34:c2:fc:3f:fe:b6:ba:ed:36:ea:a3:ca: fd:97:e2:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY//T29O2BTVlTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODY4MjE3NDYtYTg2NS00MWM4LTkyZDYtNDU1M2ZjYzQxOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Ldt2IkwkjrL31WkKKHnQ5DE61DY/1AgF9x FD5agpuzUmJt6uEgyzVfSzGIAaU9jMNLtIcJYhhOLnblcRXt6KQJiQ0ZEMdOAXzE 1Z4mcrsGQzVd5stpaj5Gm1ZO7JmcoZ5Cem4mGwSQMnal8KI53R6+VQ9K7qW3irSZ DlFOrNmNAFm8foRn0keDcI2oq4C7Kn+i4tK+rEaKmY43fm0CY/wB41g14Xy9T3CZ KLQpJh2uG8JV6/taq+kmA5uLbxo9d51xmch8tdq0iY5kEvhZiT8fnDIfJBO5+4v+ 96M+AvyZQ1Bd2bqTJuRlt22jVjcKSqgaCIxyeEXPVAOQgfFkIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpJb2FxPE1PWdsCFEJYZhGphOtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNTA5ZTRkZGYtZGY2Zi0z NGNjLTgzZDQtOTU5MDQxYzBkNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM/T4t0wFc0jDmBhYRZnGnC+snbIMnP29Kze9PXB6Tc/StjguBfOEfr PeZaRiL7X92ShQD5xJ55ruXWWqopxfjUY0Bpv7GZZl1DcnUmcLnOI7hd087jL9tr jVmtW3LSWBAlJsbQlFu6VnCPSzaKPXY5HYU5pBCioiv2MpclXXke3BQJcP2M4vaP wnynQsS6nHy/UmC5XlZj1YhLK5snUxownb5Zg8mYXaMalUo/QmFKTUv89lqYudRw ze4RqZ42GAoA6NUNJIkiXhMykIeBisiFF7PRxg+OS5fNJzHd2N8KO3lvG6umaB9Q g+1Ri+BaFTTC/D/+trrtNuqjyv2X4s0= -----END CERTIFICATE-----Generated at Mon Apr 7 15:56:27 2025 by rpki-client