$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa File: ac585e90-de97-3a5e-9981-425e5a740608.roa (raw, json) Hash identifier: /KCZIlQk4X0Og6ar0/kjFfqn9NLshPjzqMb2Iq/vNMI= Subject key identifier: 19:66:C5:B1:0B:C1:E3:60:F3:0F:17:9E:C4:62:1A:56:84:19:2A:92 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584953C415277688E4E0A26161A0 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 0 IP address blocks: 192.195.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:15:27:76:88:e4:e0:a2:61:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=5dff3eb6-eba0-429a-95a8-708263456b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bd:45:5d:9a:03:f0:a9:0d:12:e5:d6:2b:df: 75:82:d2:5b:ac:8b:6e:34:61:90:31:56:53:60:d3: 64:47:22:96:ae:54:40:c7:7d:6c:c0:9b:dd:0d:7b: 30:a1:8d:56:bf:75:37:9e:cb:d4:4b:8b:ec:98:c8: 74:b7:5b:b1:b7:11:2d:9a:ae:2c:9d:4c:46:67:25: 6b:9b:5b:ad:0f:f9:ff:47:b1:40:d9:dd:78:9b:27: 8e:ce:a9:0d:9d:43:b0:74:29:85:27:26:0f:fb:e8: 11:a5:75:84:d6:11:fa:ff:40:67:f3:7f:48:47:a9: 22:76:6e:bf:95:05:f7:ba:84:99:07:6b:1f:cb:de: fc:de:38:2d:bd:e0:fc:e1:b8:16:58:09:cb:2b:51: eb:29:0f:ad:45:27:76:f3:84:37:ef:94:37:d8:16: 2a:55:45:85:92:f7:6e:af:89:70:06:05:b2:c8:94: f9:9d:7d:a5:4a:bc:47:e1:88:bc:21:a1:b4:26:b8: 57:19:73:48:3b:dd:e7:07:fe:54:1e:f2:c9:8c:96: 65:b0:41:a7:56:81:cc:94:28:d0:22:6d:d0:33:c3: 32:85:4d:44:2c:7a:a3:0f:46:ae:4b:e9:4b:89:30: f3:63:c1:57:fe:46:e9:5c:1e:cc:38:42:d5:e5:6b: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:66:C5:B1:0B:C1:E3:60:F3:0F:17:9E:C4:62:1A:56:84:19:2A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.195.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7d:cf:58:27:8a:31:22:55:92:44:6d:62:2c:ee:8f:85:96: 7b:65:a5:78:66:67:30:63:b5:06:9f:fd:95:bb:82:b3:aa:3c: 8c:a6:74:e3:0a:2e:cf:29:34:51:28:a7:c3:ee:41:65:2b:ab: 1d:87:a6:6d:a2:3f:80:c3:34:c0:94:1f:40:47:9b:74:8e:c4: 73:57:54:a4:ff:54:c4:f2:23:9d:0d:bd:39:c9:f6:3b:25:97: b3:5d:d8:8a:44:cf:85:68:17:33:94:0b:9e:27:a0:19:fd:61: 58:bf:27:d6:35:ed:36:79:43:94:d0:5c:cd:0c:79:da:83:93: cb:6f:18:be:0a:59:c3:3f:e1:07:af:99:6b:d6:9f:0c:4d:b3: 41:a6:2d:83:76:0e:ad:37:42:21:6c:24:9c:cf:61:9c:ec:18: a1:af:95:a7:a5:ad:e2:7e:a9:0a:f5:b3:e4:65:f5:fd:15:60: c3:2c:19:be:ac:bc:d1:66:55:38:f0:57:1c:30:36:40:b7:bd: a6:93:73:a3:60:f0:de:59:bb:9a:15:c5:97:1f:2f:10:28:e5: 66:bd:57:d0:68:0c:98:7c:bf:91:db:58:25:cb:0f:94:28:ca: 59:ab:8a:06:9b:e3:47:98:85:49:b2:4e:46:38:11:40:b3:dc: 93:7b:a6:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBUndojk4KJhYaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWRmZjNlYjYtZWJhMC00MjlhLTk1YTgtNzA4MjYzNDU2YjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb1FXZoD8KkNEuXWK991gtJbrItuNGGQMVZT YNNkRyKWrlRAx31swJvdDXswoY1Wv3U3nsvUS4vsmMh0t1uxtxEtmq4snUxGZyVr m1utD/n/R7FA2d14myeOzqkNnUOwdCmFJyYP++gRpXWE1hH6/0Bn839IR6kidm6/ lQX3uoSZB2sfy9783jgtveD84bgWWAnLK1HrKQ+tRSd284Q375Q32BYqVUWFkvdu r4lwBgWyyJT5nX2lSrxH4Yi8IaG0JrhXGXNIO93nB/5UHvLJjJZlsEGnVoHMlCjQ Im3QM8MyhU1ELHqjD0auS+lLiTDzY8FX/kbpXB7MOELV5WvdBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlmxbELweNg8w8XnsRiGlaEGSqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYWM1ODVlOTAtZGU5Ny0z YTVlLTk5ODEtNDI1ZTVhNzQwNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl9z1gnijEiVZJEbWIs7o+FlntlpXhmZzBjtQaf/ZW7grOqPIymdOMK Ls8pNFEop8PuQWUrqx2Hpm2iP4DDNMCUH0BHm3SOxHNXVKT/VMTyI50NvTnJ9jsl l7Nd2IpEz4VoFzOUC54noBn9YVi/J9Y17TZ5Q5TQXM0MedqDk8tvGL4KWcM/4Qev mWvWnwxNs0GmLYN2Dq03QiFsJJzPYZzsGKGvlaelreJ+qQr1s+Rl9f0VYMMsGb6s vNFmVTjwVxwwNkC3vaaTc6Ng8N5Zu5oVxZcfLxAo5Wa9V9BoDJh8v5HbWCXLD5Qo ylmrigab40eYhUmyTkY4EUCz3JN7pqY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:47 2025 by rpki-client