$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa File: 65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa (raw, json) Hash identifier: IfKnU2fN8O93GuxZCxbaSp+1QXcYpcxilfsPlQFIzeM= Subject key identifier: B7:C2:5D:EC:FB:FF:AB:FC:CF:82:52:67:D1:12:5C:CD:89:B0:EF:27 Certificate issuer: /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Certificate serial: 010D0C9F43285849FE0FE8565E607AD712056900 Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 55034 IP address blocks: 192.243.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:e8:56:5e:60:7a:d7:12:05:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=d4636fe3-b172-4010-9a9f-2414e0a86f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:61:a4:e6:f6:c3:2e:c4:cd:51:6e:b3:1e:6c: d8:93:25:e9:5b:13:91:52:bb:4b:1e:60:dd:ea:df: b4:2d:c7:aa:7e:7f:07:d2:d6:48:4b:af:6f:d7:93: 4c:57:f8:81:f9:8a:6d:b9:64:a8:e9:06:c3:1d:cc: e3:fb:9f:f8:91:cc:b8:b8:f6:b2:d2:23:94:80:2c: fe:a0:eb:e0:de:ae:92:98:f7:4c:03:b2:63:a5:38: 20:20:13:fb:79:70:3c:db:e3:d2:55:31:64:46:3a: d8:84:29:78:7d:b7:ee:c0:95:ea:ce:ba:2c:01:36: b5:52:f0:4b:67:18:b3:4c:ec:24:12:68:24:2d:c4: 10:be:9d:e5:62:09:72:d6:27:a2:e1:8c:cc:4f:41: 7c:b0:22:fc:14:7e:7b:19:1f:a4:3d:1d:50:5d:e6: 6b:b0:4b:66:84:85:bc:aa:ed:4d:aa:e5:6a:90:45: ed:7f:76:9b:44:84:8a:98:e5:87:eb:52:1f:da:1b: 7c:08:2b:76:18:ea:e7:af:d9:d2:5c:f2:32:38:f7: b3:a5:9e:c4:56:4b:7d:3b:7f:b6:91:ce:7a:6d:12: 66:61:91:8c:0c:b9:78:98:3e:88:4c:5d:3e:0d:5b: 24:50:6b:63:e5:76:c4:43:b3:14:91:40:a1:37:1e: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C2:5D:EC:FB:FF:AB:FC:CF:82:52:67:D1:12:5C:CD:89:B0:EF:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl X509v3 Authority Key Identifier: keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:95:ca:e3:6e:09:00:7c:8f:62:b0:dd:d6:ad:04:4f:82:cb: df:16:b4:49:0e:a2:58:c7:0b:74:4c:ce:d3:58:25:c3:23:a2: d1:10:55:cc:6b:0a:30:9d:c4:40:b8:8e:a9:dd:44:38:27:9d: 41:c3:9c:41:0e:41:5d:f9:99:74:f7:e8:27:d3:79:07:91:a6: df:87:8b:91:09:87:4b:24:a7:f8:da:6e:10:a2:95:a0:90:62: 81:13:70:60:b6:b2:8e:de:8f:b5:06:60:50:ec:9f:ad:af:66: af:0a:8a:94:b6:ef:77:71:36:12:e9:84:6a:00:55:6a:1d:0f: d5:de:0d:d8:03:21:33:35:c3:a0:87:86:2e:27:4e:ee:fd:b4: 76:c6:d6:f1:52:19:94:39:81:e5:b2:5b:df:14:14:35:94:ab: 57:84:d4:d6:3d:40:6d:34:7c:ec:b6:4d:d0:06:fd:cc:1a:09: ea:5f:e2:c3:bc:7e:8b:5e:08:3f:eb:be:c8:38:65:f4:43:a0: 43:a2:d8:23:ac:e5:94:69:c9:9e:6a:cc:81:e7:fd:11:0a:89: 93:ae:3f:73:36:20:ee:81:c9:f6:fa:02:bd:85:09:90:a7:c0: 33:ca:ed:16:2f:fd:4a:cf:99:31:7d:a1:37:28:f2:c6:c5:1d: a5:c4:84:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+hWXmB61xIFaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5 Y2E5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZDQ2MzZmZTMtYjE3Mi00MDEwLTlhOWYtMjQxNGUwYTg2ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Gk5vbDLsTNUW6zHmzYkyXpWxORUrtLHmDd 6t+0Lceqfn8H0tZIS69v15NMV/iB+YptuWSo6QbDHczj+5/4kcy4uPay0iOUgCz+ oOvg3q6SmPdMA7JjpTggIBP7eXA82+PSVTFkRjrYhCl4fbfuwJXqzrosATa1UvBL ZxizTOwkEmgkLcQQvp3lYgly1iei4YzMT0F8sCL8FH57GR+kPR1QXeZrsEtmhIW8 qu1NquVqkEXtf3abRISKmOWH61If2ht8CCt2GOrnr9nSXPIyOPezpZ7EVkt9O3+2 kc56bRJmYZGMDLl4mD6ITF0+DVskUGtj5XbEQ7MUkUChNx6X0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfCXez7/6v8z4JSZ9ESXM2JsO8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvNjVjMWFlYTEtYzAyYi0z ZDcyLWI4NGYtNmU3MjYwNjhlNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1 YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuVyuNuCQB8j2Kw3datBE+Cy98WtEkOoljHC3RMztNYJcMjotEQVcxr CjCdxEC4jqndRDgnnUHDnEEOQV35mXT36CfTeQeRpt+Hi5EJh0skp/jabhCilaCQ YoETcGC2so7ej7UGYFDsn62vZq8KipS273dxNhLphGoAVWodD9XeDdgDITM1w6CH hi4nTu79tHbG1vFSGZQ5geWyW98UFDWUq1eE1NY9QG00fOy2TdAG/cwaCepf4sO8 foteCD/rvsg4ZfRDoEOi2COs5ZRpyZ5qzIHn/REKiZOuP3M2IO6Byfb6Ar2FCZCn wDPK7RYv/UrPmTF9oTco8sbFHaXEhLI= -----END CERTIFICATE-----Generated at Sat Jun 7 15:29:26 2025 by rpki-client