$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa File: 41be1aec-1415-3921-bfea-522b7006aa5c.roa (raw, json) Hash identifier: rdxSXrwRSTwr2SCozkflpgSYviLYO0waRb7WRoZxCaE= Subject key identifier: 32:58:E8:50:F3:20:BE:20:20:7C:F8:2B:E4:0B:BB:AB:BE:B3:4D:D8 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584A11FACA1971B3795648BB4300 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa Signing time: Tue 03 Jun 2025 16:14:49 +0000 ROA not before: Tue 03 Jun 2025 16:14:49 +0000 ROA not after: Mon 01 Sep 2025 16:14:49 +0000 asID: 32806 IP address blocks: 192.187.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:fa:ca:19:71:b3:79:56:48:bb:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Jun 3 16:14:49 2025 GMT Not After : Sep 1 16:14:49 2025 GMT Subject: CN=21f54235-2d6e-41b9-8183-782475dde0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bc:d9:3f:b1:de:a6:66:61:fd:c2:21:17:39: 5d:fb:95:4d:df:56:df:72:5f:ad:a9:ff:8c:32:c1: 8f:6b:e6:5f:33:a5:e9:c6:01:83:41:f5:a8:c5:b9: 82:be:6b:f6:d0:7c:d8:b6:be:1f:37:30:6e:56:fb: 84:5e:cd:7f:be:00:c4:15:8c:a4:06:5b:73:1f:df: 8f:b9:e6:58:52:99:c7:1e:46:f1:a7:e7:81:96:00: b9:04:f6:8e:64:22:38:1f:cd:d2:56:92:ce:a2:4e: 60:4d:a5:fc:4d:63:ad:c6:ae:07:83:61:c9:65:14: e3:d6:d4:32:23:71:2f:6e:49:36:5a:0c:b9:2c:ee: 55:4b:4a:c0:36:ce:66:38:34:68:05:1d:bf:a0:f9: ca:29:0b:3c:38:8f:7a:17:1e:eb:e4:fa:7b:ed:ee: c7:38:22:ef:cb:b9:4c:11:77:ab:7d:30:ab:00:e8: f4:82:33:b4:02:da:12:d3:f3:19:68:08:ab:43:e4: 28:5e:9c:61:46:b9:fe:a8:43:32:62:fd:81:97:7c: 24:16:5b:9a:a7:e1:9d:92:d5:9d:dd:1d:c1:fe:70: 40:a4:af:45:11:21:0d:6e:35:1b:20:68:93:ef:ee: f3:5f:2c:50:95:e7:1d:bc:f6:5b:eb:f5:69:b0:85: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:58:E8:50:F3:20:BE:20:20:7C:F8:2B:E4:0B:BB:AB:BE:B3:4D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 192.187.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:72:65:1e:2c:08:d5:c1:cc:b1:14:8b:aa:3d:c6:d4:27:ee: 0c:77:6f:09:f9:0d:a1:72:db:ad:59:bd:62:cb:8f:cc:a2:8d: 27:30:c7:d6:08:fb:17:00:95:19:03:b4:ca:5a:27:fc:01:d1: f1:d0:94:12:e0:0d:4e:8e:df:36:eb:e7:e3:d9:55:b4:3e:19: 49:ea:94:92:d0:32:d0:5c:83:05:d4:b2:c0:b1:8c:7a:10:8e: df:af:1c:4f:f3:6d:7d:05:fd:b3:02:1b:6e:10:f1:36:8a:e1: 18:48:8f:c3:35:a6:90:a8:6b:34:b6:6b:33:4a:8e:a4:40:27: ea:4e:85:ab:d5:a2:1f:ef:bf:23:0f:04:84:29:da:e1:d3:23: 4e:fe:8e:67:bb:c3:71:bc:3b:f5:68:d9:bf:54:2f:0b:7c:48: 86:e7:7a:53:10:ec:c1:69:5e:e0:92:d4:da:f6:c7:16:05:df: 1c:51:9a:91:c0:10:1e:75:7d:49:99:36:bf:0b:06:d9:55:aa: 1d:18:0e:d4:d5:a7:d0:6e:7d:7e:a1:d1:94:c7:be:16:5c:67: 23:53:11:bd:36:b6:f6:97:7d:70:18:98:b6:9b:50:41:ed:ed: 58:e4:6f:0f:94:85:d3:17:51:55:c9:94:a7:af:2f:3d:fb:ee: 19:b2:23:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoR+soZcbN5Vki7QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MDYwMzE2MTQ0OVoXDTI1MDkwMTE2MTQ0OVowLzEtMCsGA1UEAxMk MjFmNTQyMzUtMmQ2ZS00MWI5LTgxODMtNzgyNDc1ZGRlMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrzZP7HepmZh/cIhFzld+5VN31bfcl+tqf+M MsGPa+ZfM6XpxgGDQfWoxbmCvmv20HzYtr4fNzBuVvuEXs1/vgDEFYykBltzH9+P ueZYUpnHHkbxp+eBlgC5BPaOZCI4H83SVpLOok5gTaX8TWOtxq4Hg2HJZRTj1tQy I3Evbkk2Wgy5LO5VS0rANs5mODRoBR2/oPnKKQs8OI96Fx7r5Pp77e7HOCLvy7lM EXerfTCrAOj0gjO0AtoS0/MZaAirQ+QoXpxhRrn+qEMyYv2Bl3wkFluap+GdktWd 3R3B/nBApK9FESENbjUbIGiT7+7zXyxQlecdvPZb6/VpsIW/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJY6FDzIL4gIHz4K+QLu6u+s03YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNDFiZTFhZWMtMTQxNS0z OTIxLWJmZWEtNTIyYjcwMDZhYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxyZR4sCNXBzLEUi6o9xtQn7gx3bwn5DaFy261ZvWLLj8yijScwx9YI +xcAlRkDtMpaJ/wB0fHQlBLgDU6O3zbr5+PZVbQ+GUnqlJLQMtBcgwXUssCxjHoQ jt+vHE/zbX0F/bMCG24Q8TaK4RhIj8M1ppCoazS2azNKjqRAJ+pOhavVoh/vvyMP BIQp2uHTI07+jme7w3G8O/Vo2b9ULwt8SIbnelMQ7MFpXuCS1Nr2xxYF3xxRmpHA EB51fUmZNr8LBtlVqh0YDtTVp9BufX6h0ZTHvhZcZyNTEb02tvaXfXAYmLabUEHt 7Vjkbw+UhdMXUVXJlKevLz377hmyI+Y= -----END CERTIFICATE-----Generated at Fri Jun 6 12:27:50 2025 by rpki-client