$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa File: ed81676c-13be-3e90-97d5-df858a13c13b.roa (raw, json) Hash identifier: TQpjA7/PMakk6s3Zh0MrWcmKVqXTYYbAUVwWJ2kUbOc= Subject key identifier: 8C:97:91:FF:79:87:FD:16:3D:B3:00:54:8F:D2:3A:41:C9:D4:57:7C Certificate issuer: /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Certificate serial: 010D0C9F43285849FE0FE86EB952C1F981A5DAE0 Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 32787 IP address blocks: 192.243.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:e8:6e:b9:52:c1:f9:81:a5:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=9664e3a8-bf63-485b-af75-52a38efb4b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:cc:7c:0d:15:d9:0a:77:63:32:53:77:2b: 21:83:27:f4:f3:11:57:96:79:08:af:cc:fd:3a:06: 8f:87:ac:4b:20:57:6f:ff:7b:99:fc:31:54:71:1c: 08:27:4f:17:a9:5d:b5:60:19:00:18:51:65:0e:1b: 0e:a8:22:68:a5:50:eb:73:ca:60:56:59:71:47:4c: 82:94:62:b6:3a:31:e5:ed:b8:73:b9:7f:4b:67:c4: d0:63:3f:85:77:7e:0e:85:8e:35:48:5c:50:aa:4a: a4:7e:09:df:10:ac:2d:c3:30:63:e2:d3:e1:84:31: ff:07:80:d7:5b:8e:97:ea:54:44:98:0c:10:0d:f7: 0f:d7:dc:f9:69:ff:a1:e5:34:e0:96:a7:b4:de:52: 35:69:4d:ef:c6:fa:bf:f6:92:26:3b:b8:5f:0e:21: 2e:4b:69:1d:16:d0:ee:a2:ab:54:de:cd:50:81:23: 30:3f:cd:34:9f:45:3f:58:c5:d2:48:86:87:99:2e: 2a:b2:a1:b5:16:d7:dd:31:a6:44:31:64:03:34:d8: 9c:65:5a:66:e9:6d:ce:e7:8b:f7:3e:02:68:68:ec: 8a:93:81:22:94:5b:a3:e2:cc:79:0b:20:39:1c:40: 2f:88:77:ea:7e:03:01:5b:b7:8a:df:92:00:f3:43: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:91:FF:79:87:FD:16:3D:B3:00:54:8F:D2:3A:41:C9:D4:57:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl X509v3 Authority Key Identifier: keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3b:f4:b9:7a:fa:68:1b:6e:7a:7f:18:3d:5d:fb:6c:e2:ab: af:23:b8:25:e0:ef:97:a0:69:ac:bb:41:02:66:10:29:21:ac: c9:e1:de:21:fd:65:6b:8c:df:b4:f9:e3:d5:10:1c:18:4f:28: d3:ad:f4:0b:2b:60:fa:33:e6:1b:b9:9e:d0:83:cd:1b:94:76: 0b:22:d3:4c:45:7c:5e:30:2b:4f:52:0b:4e:ea:88:12:39:97: e5:de:7b:6f:e8:e8:69:da:cf:d2:83:58:dd:6a:0d:be:05:da: 1d:83:a4:9e:ed:d4:02:61:77:6f:ac:c0:a1:6b:b3:67:03:d3: d7:99:57:80:7c:f7:c0:53:3d:89:1a:16:29:16:3c:26:17:99: 7c:b4:70:41:23:71:e9:44:7a:85:4d:ab:74:2a:46:60:d5:0f: bd:88:3f:95:e4:9b:37:d9:94:8f:a7:d9:26:db:89:e6:1e:4f: 94:f5:5f:3d:e0:79:2a:e3:93:36:08:53:52:98:13:aa:58:7a: 40:e6:4f:a8:e2:bb:04:04:6b:08:e7:4e:30:8c:62:53:0e:a2: 65:c9:1d:f2:f1:01:37:f9:c9:63:5e:a9:09:5f:37:75:d9:2b: d5:8c:62:f5:61:97:8c:a3:29:27:c9:b9:06:37:2d:54:59:1a: c0:5c:1b:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+huuVLB+YGl2uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5 Y2E5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk OTY2NGUzYTgtYmY2My00ODViLWFmNzUtNTJhMzhlZmI0YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYjMfA0V2Qp3YzJTdyshgyf08xFXlnkIr8z9 OgaPh6xLIFdv/3uZ/DFUcRwIJ08XqV21YBkAGFFlDhsOqCJopVDrc8pgVllxR0yC lGK2OjHl7bhzuX9LZ8TQYz+Fd34OhY41SFxQqkqkfgnfEKwtwzBj4tPhhDH/B4DX W46X6lREmAwQDfcP19z5af+h5TTglqe03lI1aU3vxvq/9pImO7hfDiEuS2kdFtDu oqtU3s1QgSMwP800n0U/WMXSSIaHmS4qsqG1FtfdMaZEMWQDNNicZVpm6W3O54v3 PgJoaOyKk4EilFuj4sx5CyA5HEAviHfqfgMBW7eK35IA80NpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyXkf95h/0WPbMAVI/SOkHJ1Fd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvZWQ4MTY3NmMtMTNiZS0z ZTkwLTk3ZDUtZGY4NThhMTNjMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1 YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo79Ll6+mgbbnp/GD1d+2ziq68juCXg75egaay7QQJmECkhrMnh3iH9 ZWuM37T549UQHBhPKNOt9AsrYPoz5hu5ntCDzRuUdgsi00xFfF4wK09SC07qiBI5 l+Xee2/o6Gnaz9KDWN1qDb4F2h2DpJ7t1AJhd2+swKFrs2cD09eZV4B898BTPYka FikWPCYXmXy0cEEjcelEeoVNq3QqRmDVD72IP5XkmzfZlI+n2SbbieYeT5T1Xz3g eSrjkzYIU1KYE6pYekDmT6jiuwQEawjnTjCMYlMOomXJHfLxATf5yWNeqQlfN3XZ K9WMYvVhl4yjKSfJuQY3LVRZGsBcG7c= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:35 2025 by rpki-client