$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/1741d83a-7753-364d-9af2-0942031435df.roa File: 1741d83a-7753-364d-9af2-0942031435df.roa (raw, json) Hash identifier: IOvgMhj9iCcKOKVahnN23vMUgUSw2MS5q7mbpdSA8zk= Subject key identifier: F4:57:85:8D:1C:49:C3:0E:27:63:42:CF:8A:EE:2E:6F:19:F4:86:33 Certificate issuer: /CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5 Certificate serial: 010D0C9F432858495C2440AF9D76459831599300 Authority key identifier: CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/1741d83a-7753-364d-9af2-0942031435df.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 400458 IP address blocks: 194.164.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:40:af:9d:76:45:98:31:59:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=c354e6e0-c869-4718-bbbd-1020b38e8543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:34:02:3e:37:2c:ac:6e:02:70:fb:56:7f:8a: 67:64:b2:96:64:dd:6e:b9:44:5a:26:2d:dd:da:2d: 72:9e:ec:ff:60:f6:6e:ad:b4:a6:37:e7:e1:7a:93: c6:1c:52:aa:7d:6d:8b:b7:49:63:de:a3:6b:35:22: 42:50:52:b0:4a:f3:8b:07:ed:71:e8:83:72:a1:ea: 35:4b:03:47:88:ea:50:3a:6d:a5:d8:c8:63:2c:f5: 97:e9:53:a4:74:0e:21:e2:1d:b9:bd:90:b9:9b:e9: 69:68:c5:f5:46:f8:6d:cf:96:a4:9c:7e:43:15:cd: 11:04:05:62:e2:de:47:f2:b6:29:38:63:40:3c:ba: f5:39:74:be:2c:96:87:01:f1:e1:db:2a:d1:d8:ec: 7b:9e:3b:29:ad:2b:98:74:03:16:86:c8:aa:e6:12: 70:29:ce:e8:51:b9:f4:77:fe:41:5b:ee:18:1a:41: da:1a:33:21:f1:cd:64:4b:5a:06:ca:dc:3d:4c:83: 44:ad:8d:14:a2:f5:28:92:f0:23:0e:1f:0e:f2:32: b9:3a:dc:ae:e7:19:6f:83:13:6f:80:e9:ef:73:58: 8b:5d:65:69:f1:bb:4e:38:30:b9:ca:8e:83:37:7a: ad:04:2f:f6:35:0c:1d:07:a7:26:25:2d:84:89:5d: 11:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:57:85:8D:1C:49:C3:0E:27:63:42:CF:8A:EE:2E:6F:19:F4:86:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/1741d83a-7753-364d-9af2-0942031435df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl X509v3 Authority Key Identifier: keyid:CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer sbgp-ipAddrBlock: critical IPv4: 194.164.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:be:a2:9a:ff:12:b1:50:63:51:0b:77:4f:64:7e:6c:50:a5: 59:11:00:1d:7e:06:70:b2:f7:45:21:8f:b0:63:80:bc:bb:84: 85:fe:91:73:98:e0:c3:cc:eb:b8:49:ba:d2:99:c5:83:96:66: f4:2f:1a:15:f1:f3:f2:bb:c5:46:04:51:ff:fd:aa:b9:ae:29: 2a:59:0a:4b:37:10:cb:03:69:ac:85:ff:3c:55:af:32:69:c5: ab:85:ca:12:31:25:ad:47:53:6c:5a:e4:2d:67:bd:d6:81:94: f3:28:99:ca:51:cc:ee:85:63:8e:92:1b:ab:cd:b6:a5:e3:90: 22:47:11:5b:cf:aa:44:fe:ba:65:43:a8:c5:17:c4:f4:bc:51: df:cd:e1:5a:24:d5:92:86:16:17:32:ad:77:9c:b1:0b:09:0c: 6c:90:12:d2:9a:e6:29:6a:ab:56:72:38:55:18:f9:61:8e:c4: 74:83:39:d4:b6:e2:1e:48:be:5c:5a:39:22:d7:f3:96:73:e7: 27:c5:be:e2:ab:f1:7e:4c:e4:2f:73:e9:cc:25:fc:db:9c:4c: 75:06:b8:77:49:bb:90:95:11:4f:44:a3:8c:e3:11:26:aa:93: 15:38:6a:64:ae:dc:3b:26:9a:c6:f6:f4:02:5d:0d:76:25:df: dd:34:8c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJECvnXZFmDFZkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjOGM2ZjMtNGEyMi00YjA5LTkwYjgtNmY3NGVlOTBi ZWI1MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YzM1NGU2ZTAtYzg2OS00NzE4LWJiYmQtMTAyMGIzOGU4NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTQCPjcsrG4CcPtWf4pnZLKWZN1uuURaJi3d 2i1ynuz/YPZurbSmN+fhepPGHFKqfW2Lt0lj3qNrNSJCUFKwSvOLB+1x6INyoeo1 SwNHiOpQOm2l2MhjLPWX6VOkdA4h4h25vZC5m+lpaMX1Rvhtz5aknH5DFc0RBAVi 4t5H8rYpOGNAPLr1OXS+LJaHAfHh2yrR2Ox7njsprSuYdAMWhsiq5hJwKc7oUbn0 d/5BW+4YGkHaGjMh8c1kS1oGytw9TINErY0UovUokvAjDh8O8jK5Otyu5xlvgxNv gOnvc1iLXWVp8btOODC5yo6DN3qtBC/2NQwdB6cmJS2EiV0R+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRXhY0cScMOJ2NCz4ruLm8Z9IYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4 YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0ZWU5MGJlYjUvMTc0MWQ4M2EtNzc1My0z NjRkLTlhZjItMDk0MjAzMTQzNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDJjOGM2ZjMtNGEyMi00YjA5LTkw YjgtNmY3NGVlOTBiZWI1LzQyYzhjNmYzLTRhMjItNGIwOS05MGI4LTZmNzRlZTkw YmViNS5jcmwwHwYDVR0jBBgwFoAUy1hstB/HLAz+J/uXLb8L6wVG+14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0 ZWU5MGJlYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKK+opr/ErFQY1ELd09kfmxQpVkRAB1+BnCy90Uhj7BjgLy7hIX+kXOY 4MPM67hJutKZxYOWZvQvGhXx8/K7xUYEUf/9qrmuKSpZCks3EMsDaayF/zxVrzJp xauFyhIxJa1HU2xa5C1nvdaBlPMomcpRzO6FY46SG6vNtqXjkCJHEVvPqkT+umVD qMUXxPS8Ud/N4Vok1ZKGFhcyrXecsQsJDGyQEtKa5ilqq1ZyOFUY+WGOxHSDOdS2 4h5IvlxaOSLX85Zz5yfFvuKr8X5M5C9z6cwl/NucTHUGuHdJu5CVEU9Eo4zjESaq kxU4amSu3Dsmmsb29AJdDXYl3900jMA= -----END CERTIFICATE-----Generated at Fri Apr 4 22:59:14 2025 by rpki-client