$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa File: 422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa (raw, json) Hash identifier: fWO7PyvuvotAYH0tS55mSm320nv+9ojFzeZp1ZgNQCc= Subject key identifier: F0:42:E5:DA:E0:AA:6E:63:A8:76:BD:32:B7:12:A2:3F:C3:0E:EE:96 Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F432858490B4C1975E2B17308621AE480 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 198949 IP address blocks: 192.5.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:19:75:e2:b1:73:08:62:1a:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=936c4a09-b7b1-46ba-b18a-0e44cc30ba1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:ed:38:25:48:f1:36:b7:e0:24:21:15:1f: ec:b6:a3:9c:a9:70:53:44:c5:96:e5:30:84:8b:f2: c2:45:60:ff:a6:8e:fc:15:0f:89:6f:af:70:be:cc: 35:39:d1:a8:96:12:ec:5a:b9:c8:eb:a6:d1:40:98: 40:80:3c:00:f3:ed:75:bf:e0:a0:44:8c:85:68:84: 44:82:1f:e9:90:53:7e:4c:cc:b3:7b:e8:e3:ad:78: d9:55:11:c4:65:8a:0f:a7:60:d8:9d:6e:27:f8:6a: ae:a6:39:a6:55:64:71:6c:c0:a8:79:d9:24:b4:a1: 3a:d3:94:11:63:5c:f2:8a:6a:81:fd:b7:f0:01:62: b0:8e:18:33:44:20:36:24:86:96:55:c7:2d:c9:29: 96:31:bf:a7:39:1f:b7:51:b1:84:df:2f:4d:ff:3b: a2:a9:45:60:48:b7:bf:34:d4:5e:41:9d:bb:ff:e1: a1:d7:c5:66:db:16:aa:ac:5c:5b:00:24:26:60:c6: 66:f7:1d:7c:ad:05:23:8a:af:91:87:b7:95:4f:b6: dd:bd:d9:fc:b6:0e:89:b6:7e:0d:95:4d:00:7e:fc: 5d:6a:20:27:2d:3c:30:03:43:db:d9:69:59:23:af: 8a:b1:64:0d:f5:89:38:47:58:ea:93:83:0b:c0:05: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:42:E5:DA:E0:AA:6E:63:A8:76:BD:32:B7:12:A2:3F:C3:0E:EE:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 192.5.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c6:81:6a:c2:81:8e:52:71:6a:49:55:f5:34:05:44:0a:7a: 08:85:ac:07:c3:ee:05:a5:36:34:6e:15:9b:a0:65:bf:61:25: be:fe:50:72:af:8d:53:07:3b:41:7b:1a:9a:00:f9:6a:8d:89: 9d:1b:21:32:aa:ed:b5:33:02:24:b5:43:9f:11:36:09:b3:c7: 23:a0:72:18:79:91:14:20:13:3d:aa:98:58:e6:f1:aa:36:30: 1d:b7:9e:72:7f:fe:54:0d:8d:6e:c5:f3:0f:fe:40:90:fd:41: 10:77:7e:64:4f:90:c6:5c:f4:61:ed:f0:da:22:2a:4d:ec:44: 9c:91:04:95:6a:e8:a7:aa:32:c4:f2:15:57:36:0d:69:03:1e: 1a:32:f2:0d:c6:af:72:9d:e0:27:51:cb:a8:1d:28:9c:12:91: 67:bf:44:e4:b9:33:6a:f0:f8:23:f8:74:a6:9b:a5:b7:f2:7c: 72:3b:b2:86:c3:46:5a:14:5c:27:a2:2e:19:7f:e1:b2:7b:03: b1:86:95:45:6f:7c:10:73:eb:4f:3a:77:b7:93:d2:a3:df:91: 9e:f0:5f:4e:7a:63:12:f8:54:17:4e:c7:e1:aa:55:cb:56:c8: 9d:11:be:4d:ed:4e:e4:13:4a:57:0d:23:9c:5f:31:a7:07:55: 6b:53:69:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBl14rFzCGIa5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk OTM2YzRhMDktYjdiMS00NmJhLWIxOGEtMGU0NGNjMzBiYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPtOCVI8Ta34CQhFR/stqOcqXBTRMWW5TCE i/LCRWD/po78FQ+Jb69wvsw1OdGolhLsWrnI66bRQJhAgDwA8+11v+CgRIyFaIRE gh/pkFN+TMyze+jjrXjZVRHEZYoPp2DYnW4n+GqupjmmVWRxbMCoedkktKE605QR Y1zyimqB/bfwAWKwjhgzRCA2JIaWVcctySmWMb+nOR+3UbGE3y9N/zuiqUVgSLe/ NNReQZ27/+Gh18Vm2xaqrFxbACQmYMZm9x18rQUjiq+Rh7eVT7bdvdn8tg6Jtn4N lU0AfvxdaiAnLTwwA0Pb2WlZI6+KsWQN9Yk4R1jqk4MLwAXasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBC5drgqm5jqHa9MrcSoj/DDu6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvNDIyZmVjY2EtZTBjNy0z YjNhLWJhNzItYzlhYjA5NDk2ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILGgWrCgY5ScWpJVfU0BUQKegiFrAfD7gWlNjRuFZugZb9hJb7+UHKv jVMHO0F7GpoA+WqNiZ0bITKq7bUzAiS1Q58RNgmzxyOgchh5kRQgEz2qmFjm8ao2 MB23nnJ//lQNjW7F8w/+QJD9QRB3fmRPkMZc9GHt8NoiKk3sRJyRBJVq6KeqMsTy FVc2DWkDHhoy8g3Gr3Kd4CdRy6gdKJwSkWe/ROS5M2rw+CP4dKabpbfyfHI7sobD RloUXCeiLhl/4bJ7A7GGlUVvfBBz6086d7eT0qPfkZ7wX056YxL4VBdOx+GqVctW yJ0Rvk3tTuQTSlcNI5xfMacHVWtTaVs= -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:01 2025 by rpki-client