$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/504fd55c-8d0f-3702-bdad-706f06762616.roa File: 504fd55c-8d0f-3702-bdad-706f06762616.roa (raw, json) Hash identifier: mgy+qddjXJuP9FHa8CHQ3K4V3LCjev8vB9D3hsUU5yY= Subject key identifier: 62:95:25:B9:B0:FA:2F:E8:2B:09:3D:9E:80:9A:AD:41:10:C3:E4:00 Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F432858495ABEBA532AA12766CDA2A600 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/504fd55c-8d0f-3702-bdad-706f06762616.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 33099 IP address blocks: 192.135.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:ba:53:2a:a1:27:66:cd:a2:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=039aa6fb-bfa5-4d03-8e94-6b445100e8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:34:d8:b1:a4:23:de:69:96:d0:9a:73:79: ab:8b:82:08:34:25:e6:b2:d2:9b:5a:22:6e:37:aa: cc:03:62:cb:47:89:72:b7:b5:f6:f1:f4:40:dd:d1: 87:e0:23:2d:2b:3c:dc:56:3e:00:94:d9:77:58:83: 9f:a5:e3:fd:e7:b5:58:48:d5:d0:1c:82:33:7d:91: ef:67:c2:6b:f0:73:fd:52:28:e3:0a:22:86:12:ea: e1:0e:5f:df:f5:c9:08:2c:2d:42:a0:b9:5e:35:df: 5d:2d:1e:d7:63:e1:f3:18:fb:f6:ec:19:47:39:9b: 59:44:bb:0c:b8:e9:29:b0:da:b9:6e:73:7e:c5:aa: be:e2:68:2f:2a:78:c9:73:b1:0d:5d:f4:9f:2a:00: 8a:40:83:ce:05:13:4f:66:55:66:b0:f5:c3:48:b2: 3a:01:39:7d:96:9f:aa:14:f4:0e:8e:61:59:2c:cf: c1:04:58:e1:94:bf:9d:54:09:0f:3a:9c:e4:31:55: 29:cd:09:9d:e8:f8:4f:dc:76:37:7d:a2:ba:5c:93: dc:49:fd:cf:b8:b0:4f:3e:85:d3:4f:60:de:4c:5c: cd:09:81:98:d0:af:33:25:cb:51:66:e8:03:93:3d: 20:f2:19:b6:7b:42:e3:15:88:e4:78:2d:4e:2b:c8: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:95:25:B9:B0:FA:2F:E8:2B:09:3D:9E:80:9A:AD:41:10:C3:E4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/504fd55c-8d0f-3702-bdad-706f06762616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 192.135.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1a:82:d0:7d:55:97:c5:e5:39:94:e8:e3:8e:4b:6e:b1:77: 8e:52:ee:d1:cb:ee:a2:c6:1b:21:fb:f1:d1:53:49:18:6d:04: 3e:bf:d9:34:b5:93:1f:57:29:4b:a0:9d:ed:a5:0d:f0:70:4d: 5d:45:5e:22:1b:66:1b:6a:48:dd:3c:e4:02:40:da:65:e8:05: f2:ae:24:de:07:d0:8c:08:00:e1:c5:62:69:63:98:f3:55:a9: 3b:8f:6e:66:77:1d:19:a5:10:70:12:15:7e:0c:7d:3a:66:33: 34:e0:83:e3:f9:25:d6:46:1c:dc:a9:58:f5:ab:37:85:71:07: a3:8f:20:84:04:ea:4c:27:1f:ef:a0:17:51:ac:ae:46:05:5d: 14:41:ee:89:4a:6e:b1:1b:51:0e:7d:82:71:e2:5a:c9:e1:48: a5:da:08:fb:bd:32:9d:5f:7d:61:d8:3b:62:8a:4e:e6:84:3c: 54:7b:8e:02:d0:db:63:86:c2:48:73:cc:d7:54:0b:b6:47:01: f4:36:ee:b5:ef:03:62:2a:27:5e:00:d2:81:11:75:74:92:67: b0:88:ec:60:10:62:93:fe:44:9b:d0:93:5d:c6:57:4e:47:a8: 5a:26:b6:e6:7e:d0:29:75:3b:3a:02:ad:2d:a4:c4:fb:44:ec: a1:08:34:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrpTKqEnZs2ipgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MDM5YWE2ZmItYmZhNS00ZDAzLThlOTQtNmI0NDUxMDBlOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzA02LGkI95pltCac3mri4IINCXmstKbWiJu N6rMA2LLR4lyt7X28fRA3dGH4CMtKzzcVj4AlNl3WIOfpeP957VYSNXQHIIzfZHv Z8Jr8HP9UijjCiKGEurhDl/f9ckILC1CoLleNd9dLR7XY+HzGPv27BlHOZtZRLsM uOkpsNq5bnN+xaq+4mgvKnjJc7ENXfSfKgCKQIPOBRNPZlVmsPXDSLI6ATl9lp+q FPQOjmFZLM/BBFjhlL+dVAkPOpzkMVUpzQmd6PhP3HY3faK6XJPcSf3PuLBPPoXT T2DeTFzNCYGY0K8zJctRZugDkz0g8hm2e0LjFYjkeC1OK8grCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKVJbmw+i/oKwk9noCarUEQw+QAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvNTA0ZmQ1NWMtOGQwZi0z NzAyLWJkYWQtNzA2ZjA2NzYyNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIf7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcagtB9VZfF5TmU6OOOS26xd45S7tHL7qLGGyH78dFTSRhtBD6/2TS1 kx9XKUugne2lDfBwTV1FXiIbZhtqSN085AJA2mXoBfKuJN4H0IwIAOHFYmljmPNV qTuPbmZ3HRmlEHASFX4MfTpmMzTgg+P5JdZGHNypWPWrN4VxB6OPIIQE6kwnH++g F1GsrkYFXRRB7olKbrEbUQ59gnHiWsnhSKXaCPu9Mp1ffWHYO2KKTuaEPFR7jgLQ 22OGwkhzzNdUC7ZHAfQ27rXvA2IqJ14A0oERdXSSZ7CI7GAQYpP+RJvQk13GV05H qFomtuZ+0Cl1OzoCrS2kxPtE7KEINLY= -----END CERTIFICATE-----Generated at Tue Apr 29 19:23:29 2025 by rpki-client