$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa File: 2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa (raw, json) Hash identifier: jQXpflJsXF+n0CnAeJ5iemNxeSKkoWYmQsCXKROVMjM= Subject key identifier: 75:65:8F:D0:EC:97:27:A0:0F:14:E6:F0:59:F7:C1:C7:4B:8E:59:52 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584953C414FD34975BEE30485880 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 0 IP address blocks: 192.129.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:14:fd:34:97:5b:ee:30:48:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=75ed4ed6-18e6-4c29-ae93-4910e844fd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:a7:be:9d:60:5a:b5:14:f8:86:10:c6:28: 8d:1e:d7:65:6c:3b:1b:ac:87:a1:99:1f:09:a3:f9: 58:9c:c0:15:55:6a:ff:59:6a:f6:ce:14:04:cb:74: 9b:0a:ca:06:af:94:a6:10:48:a3:06:65:53:0a:0d: a1:e5:3c:cc:ba:d0:d3:c9:6e:f6:f8:a1:a9:e1:d1: b8:8b:1d:97:6a:bd:3c:48:66:ea:33:2b:58:d9:05: c2:a7:b4:bb:0e:54:c9:2e:7b:92:57:60:88:5c:c4: 24:64:ae:6c:1f:a9:84:c7:d0:51:6c:9c:33:58:20: 5d:60:77:54:db:8b:f3:39:0a:37:a0:f9:06:c3:86: 80:b7:ba:a7:3e:17:ce:b4:c8:5a:f3:dc:e8:ae:8c: 0b:36:f7:8b:42:cb:f2:8e:4f:d2:ef:d4:ad:82:f5: cf:98:75:db:ae:51:c3:17:e4:7b:66:c5:be:2b:d8: 22:b5:cf:19:3f:fd:b7:08:a8:27:72:92:b5:cc:85: 86:1a:aa:f9:ff:f8:36:8d:38:40:b4:a5:79:f3:93: 50:fb:79:3c:6e:d3:54:9a:c9:cf:01:57:be:24:48: af:ce:da:4c:9f:94:26:fa:55:4c:27:54:44:52:f0: 00:5f:ee:b9:61:1b:d6:07:f5:72:ef:c0:90:25:e1: a9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:65:8F:D0:EC:97:27:A0:0F:14:E6:F0:59:F7:C1:C7:4B:8E:59:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.129.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:77:fa:e7:8b:2a:fb:97:0b:af:9f:01:c2:a3:43:52:1b:67: 42:02:04:87:16:39:82:c1:fc:37:fd:59:0d:27:c5:b2:72:da: 04:56:bb:6d:0d:d0:90:02:b0:15:e1:49:31:46:26:16:e2:18: df:31:4e:9c:59:f7:bc:61:62:e2:c9:65:42:02:f9:16:ae:61: 1c:62:db:38:87:43:d2:ec:32:ce:8a:c6:b6:d0:0b:53:82:c1: 0a:94:b7:76:21:af:d1:36:1d:99:3a:80:ec:2b:66:a0:44:cb: ac:80:d1:5c:95:82:70:b1:3b:63:e2:dd:71:a6:66:4c:5f:32: 25:77:e2:46:6e:fb:2c:ec:3e:37:20:07:f8:50:84:12:72:2a: 49:10:05:aa:c0:ec:e8:de:32:55:2e:60:5a:8c:24:9c:f5:f1: 37:c9:64:50:41:8b:70:c5:7b:9d:0a:76:27:47:77:4e:8c:18: a5:d4:fe:e2:7e:31:64:01:1f:51:6d:3b:9b:98:59:cc:58:3f: 09:cc:b9:09:58:65:31:2b:d3:88:e0:85:0e:4e:e8:dc:82:ad: cb:43:c4:17:9f:ba:6e:af:ca:9a:2d:b4:50:35:f1:e7:64:4e: 78:7f:54:14:59:de:75:9f:65:f7:ac:02:e4:d8:a2:e5:90:01: 5b:91:5e:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBT9NJdb7jBIWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzVlZDRlZDYtMThlNi00YzI5LWFlOTMtNDkxMGU4NDRmZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBunvp1gWrUU+IYQxiiNHtdlbDsbrIehmR8J o/lYnMAVVWr/WWr2zhQEy3SbCsoGr5SmEEijBmVTCg2h5TzMutDTyW72+KGp4dG4 ix2Xar08SGbqMytY2QXCp7S7DlTJLnuSV2CIXMQkZK5sH6mEx9BRbJwzWCBdYHdU 24vzOQo3oPkGw4aAt7qnPhfOtMha89zorowLNveLQsvyjk/S79StgvXPmHXbrlHD F+R7ZsW+K9gitc8ZP/23CKgncpK1zIWGGqr5//g2jThAtKV585NQ+3k8btNUmsnP AVe+JEivztpMn5Qm+lVMJ1REUvAAX+65YRvWB/Vy78CQJeGp7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVlj9DslyegDxTm8Fn3wcdLjllSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMmEwZDFkZmYtMDk3NS0z MWNmLTliY2ItYjBkMDg3NDA5YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ3+ueLKvuXC6+fAcKjQ1IbZ0ICBIcWOYLB/Df9WQ0nxbJy2gRWu20N 0JACsBXhSTFGJhbiGN8xTpxZ97xhYuLJZUIC+RauYRxi2ziHQ9LsMs6KxrbQC1OC wQqUt3Yhr9E2HZk6gOwrZqBEy6yA0VyVgnCxO2Pi3XGmZkxfMiV34kZu+yzsPjcg B/hQhBJyKkkQBarA7OjeMlUuYFqMJJz18TfJZFBBi3DFe50KdidHd06MGKXU/uJ+ MWQBH1FtO5uYWcxYPwnMuQlYZTEr04jghQ5O6NyCrctDxBefum6vypottFA18edk Tnh/VBRZ3nWfZfesAuTYouWQAVuRXu4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:40:06 2025 by rpki-client