$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa File: 65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa (raw, json) Hash identifier: tAdUvFGoq3FXng0LpEC6+SW6diJgS408NVuQAluyM8E= Subject key identifier: F5:A0:36:A0:8B:BE:A5:73:6B:40:AD:D1:CD:30:37:56:D5:E4:3D:05 Certificate issuer: /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Certificate serial: 010D0C9F432858491ED6D93A0B4746A011564300 Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 55034 IP address blocks: 192.243.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d9:3a:0b:47:46:a0:11:56:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=44a015be-2199-405d-bc5c-ae0646cdfe42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e0:24:ed:e5:23:d0:09:d4:d8:85:c7:3e:4b: 06:e3:36:b4:76:58:1a:6c:35:63:24:9e:31:aa:f0: 4e:7a:2c:5f:30:2b:28:61:5c:6e:99:d4:f1:a0:c3: 35:cf:2d:7c:d9:63:f8:00:4c:58:fd:51:54:df:06: fa:59:30:34:94:88:2c:2f:6b:a5:98:04:19:da:f7: 15:7e:32:54:4d:a4:6a:62:9c:3d:4d:e9:44:c0:35: 87:1c:c5:36:8e:ca:96:b1:a0:00:23:4d:b7:68:77: 8c:3b:86:1a:de:36:e0:0b:20:ba:47:fb:f4:b1:bc: 89:c7:2e:b8:e2:3a:03:12:66:e9:d4:42:4e:e8:71: 63:68:c2:20:74:8e:79:a2:fc:0e:46:f0:0b:4e:6a: a9:5d:9e:a0:94:ec:db:84:b6:5f:44:35:63:06:af: 72:b7:a4:3f:dc:7c:1f:f7:38:f1:8e:69:33:96:c5: 22:00:f3:a3:4d:ed:f0:68:e1:bb:42:0d:5e:80:83: 70:74:22:93:14:02:be:98:f8:9f:2c:69:06:91:c8: 63:c7:6b:d1:8e:ae:77:6f:20:e5:e1:47:04:5b:16: 14:6e:63:17:b3:f3:0a:3d:ce:41:0b:63:c1:30:8a: b6:d6:a8:da:99:95:61:ad:53:0c:07:a9:b8:76:52: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:36:A0:8B:BE:A5:73:6B:40:AD:D1:CD:30:37:56:D5:E4:3D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl X509v3 Authority Key Identifier: keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:8f:c9:85:12:56:f7:4c:47:d3:62:23:63:b6:86:15:ac:cc: ca:60:7b:75:dd:d0:9c:6f:e3:95:79:dd:6f:4b:db:d7:89:5a: 5d:f7:d5:7b:e6:1d:de:fa:b0:b9:83:af:9b:b8:07:33:9b:44: d1:81:7f:cd:ce:30:73:35:6e:cf:dd:0b:19:65:f5:e1:39:32: e1:f1:8d:8b:e5:cc:ab:cc:dd:82:3a:0d:e2:8c:c2:29:19:db: ea:d9:3f:77:93:32:b4:22:87:e7:be:e8:61:eb:1b:48:4a:e3: 28:d1:e1:f7:28:dd:fe:99:b1:af:05:65:79:6e:ae:a9:42:29: fc:cd:40:6b:ff:32:58:db:9a:e7:8e:3b:83:1a:aa:35:79:ed: 71:c5:a9:ca:ba:69:5a:f3:49:c0:92:e4:51:9c:b0:22:a2:d1: e3:7e:93:a8:1f:97:e8:3a:b0:bd:57:b9:60:22:ef:72:1f:74: e3:b4:c8:1e:d6:56:f9:fb:9d:83:a8:e4:82:e8:6d:c1:40:00: db:d3:e2:f2:13:71:4a:36:c7:a6:b7:17:a3:ea:b6:af:5a:c1: b3:38:1a:29:81:5c:5f:a5:8d:87:ac:7e:bf:88:02:96:0a:94: e6:3e:f9:3c:ba:40:08:c5:99:0f:03:70:22:a6:10:45:3f:18: 76:4d:c2:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tk6C0dGoBFWQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5 Y2E5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NDRhMDE1YmUtMjE5OS00MDVkLWJjNWMtYWUwNjQ2Y2RmZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+Ak7eUj0AnU2IXHPksG4za0dlgabDVjJJ4x qvBOeixfMCsoYVxumdTxoMM1zy182WP4AExY/VFU3wb6WTA0lIgsL2ulmAQZ2vcV fjJUTaRqYpw9TelEwDWHHMU2jsqWsaAAI023aHeMO4Ya3jbgCyC6R/v0sbyJxy64 4joDEmbp1EJO6HFjaMIgdI55ovwORvALTmqpXZ6glOzbhLZfRDVjBq9yt6Q/3Hwf 9zjxjmkzlsUiAPOjTe3waOG7Qg1egINwdCKTFAK+mPifLGkGkchjx2vRjq53byDl 4UcEWxYUbmMXs/MKPc5BC2PBMIq21qjamZVhrVMMB6m4dlL8BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWgNqCLvqVza0Ct0c0wN1bV5D0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvNjVjMWFlYTEtYzAyYi0z ZDcyLWI4NGYtNmU3MjYwNjhlNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1 YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOPyYUSVvdMR9NiI2O2hhWszMpge3Xd0Jxv45V53W9L29eJWl331Xvm Hd76sLmDr5u4BzObRNGBf83OMHM1bs/dCxll9eE5MuHxjYvlzKvM3YI6DeKMwikZ 2+rZP3eTMrQih+e+6GHrG0hK4yjR4fco3f6Zsa8FZXlurqlCKfzNQGv/MljbmueO O4MaqjV57XHFqcq6aVrzScCS5FGcsCKi0eN+k6gfl+g6sL1XuWAi73IfdOO0yB7W Vvn7nYOo5ILobcFAANvT4vITcUo2x6a3F6Pqtq9awbM4GimBXF+ljYesfr+IApYK lOY++Ty6QAjFmQ8DcCKmEEU/GHZNwnY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:33 2025 by rpki-client