$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa File: f97a8904-a92b-3e71-9209-0e718ad0a126.roa (raw, json) Hash identifier: w4Aw5EXm9lrAlt2A74cpZCXW/T0po59BBUVmrne4Bhs= Subject key identifier: A6:3D:5C:C0:2F:1D:D7:FF:40:F4:A3:48:0C:11:EB:37:5D:66:42:5F Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F432858497F09A773F1D93C7A9DDDE6C0 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 10753 IP address blocks: 192.228.18.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a7:73:f1:d9:3c:7a:9d:dd:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=d729cb61-e51c-49f8-8a6b-acc1690396ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:b2:ea:51:50:c4:d2:9a:59:b6:a6:b3:74: 8a:fa:bb:6b:bd:5d:89:a3:42:30:07:1f:78:59:86: 02:23:9d:0f:76:71:1b:89:f8:33:f5:fc:06:2d:73: d7:2a:e0:58:5a:4a:41:ad:0f:a2:9c:09:f9:df:06: 7d:72:80:09:31:bd:85:7e:ab:80:aa:1d:80:64:b9: c3:c9:49:8d:45:58:e7:cf:ad:e3:d5:d6:1e:f9:6a: 31:80:06:a6:31:83:3e:c9:55:89:a3:c1:be:f6:50: 65:71:90:11:de:c8:44:3f:a2:31:cf:f5:e9:ff:28: 10:62:54:df:ac:3c:81:05:09:4d:35:e8:07:09:09: b3:64:48:cf:d9:b3:77:35:c1:3c:78:19:63:8a:47: 5a:eb:ea:47:52:92:5e:d8:e7:44:53:49:73:bd:d8: 28:ae:17:bd:2f:f4:de:20:8f:f6:a0:fe:57:a1:1f: b6:33:84:e6:63:05:62:c4:d5:bb:8e:72:30:b0:82: 5f:c0:48:07:e5:ff:ad:92:55:b3:fd:0b:1b:65:e9: 7d:18:2e:18:1c:70:5c:94:93:ce:8f:c7:cf:93:b3: 08:73:c8:58:20:ca:69:2d:f3:41:97:c4:8c:1c:3f: 27:9c:14:c2:72:fa:96:4e:10:24:38:58:df:8f:8d: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3D:5C:C0:2F:1D:D7:FF:40:F4:A3:48:0C:11:EB:37:5D:66:42:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c7:04:45:7b:3e:f5:e2:24:c3:ac:de:99:19:5c:ce:09:44: 7a:d1:c2:fd:a2:d1:c1:21:37:d2:87:bc:18:4c:3d:aa:b9:e1: 52:6a:f8:be:d3:6d:f1:d7:ac:ab:4b:91:52:f6:82:1e:de:e6: c5:d8:0a:0e:c0:ae:83:ce:af:f6:0a:34:19:8c:c3:6b:63:92: 4d:89:7a:c1:a6:94:7a:73:84:5a:20:66:79:a8:8a:f1:5d:7b: 22:7c:fa:f5:a8:cd:4e:0c:b4:c6:4f:5c:f6:9f:4a:b7:63:3c: 7b:3c:01:ed:ef:46:7c:66:49:f4:d5:b1:a3:9a:49:94:c8:35: f3:fe:e8:1f:1f:fa:a4:83:58:e8:3c:8e:c4:42:63:88:22:dd: aa:43:ac:c8:8d:17:db:2d:63:60:f6:f1:bb:78:39:ec:c5:7d: 3b:6d:81:5f:45:f7:b4:e1:a6:de:f0:a4:6e:3a:52:5e:5e:7a: 16:d0:a5:68:32:4a:c8:77:65:4e:b0:6f:32:e2:55:f0:1a:7e: 0d:a5:32:f1:45:15:fe:80:73:f9:43:22:16:ba:84:5b:41:a2: 7b:70:a3:de:51:fe:ae:3e:f9:4b:36:f3:42:4c:42:a8:52:86: 12:b0:16:f8:6d:72:64:bf:73:09:55:65:76:d2:11:f2:8d:62: 48:e2:0d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/Cadz8dk8ep3d5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk ZDcyOWNiNjEtZTUxYy00OWY4LThhNmItYWNjMTY5MDM5NmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmey6lFQxNKaWbams3SK+rtrvV2Jo0IwBx94 WYYCI50PdnEbifgz9fwGLXPXKuBYWkpBrQ+inAn53wZ9coAJMb2FfquAqh2AZLnD yUmNRVjnz63j1dYe+WoxgAamMYM+yVWJo8G+9lBlcZAR3shEP6Ixz/Xp/ygQYlTf rDyBBQlNNegHCQmzZEjP2bN3NcE8eBljikda6+pHUpJe2OdEU0lzvdgorhe9L/Te II/2oP5XoR+2M4TmYwVixNW7jnIwsIJfwEgH5f+tklWz/QsbZel9GC4YHHBclJPO j8fPk7MIc8hYIMppLfNBl8SMHD8nnBTCcvqWThAkOFjfj40ysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY9XMAvHdf/QPSjSAwR6zddZkJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvZjk3YTg5MDQtYTkyYi0z ZTcxLTkyMDktMGU3MThhZDBhMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzHBEV7PvXiJMOs3pkZXM4JRHrRwv2i0cEhN9KHvBhMPaq54VJq+L7T bfHXrKtLkVL2gh7e5sXYCg7AroPOr/YKNBmMw2tjkk2JesGmlHpzhFogZnmoivFd eyJ8+vWozU4MtMZPXPafSrdjPHs8Ae3vRnxmSfTVsaOaSZTINfP+6B8f+qSDWOg8 jsRCY4gi3apDrMiNF9stY2D28bt4OezFfTttgV9F97Thpt7wpG46Ul5eehbQpWgy Ssh3ZU6wbzLiVfAafg2lMvFFFf6Ac/lDIha6hFtBontwo95R/q4++Us280JMQqhS hhKwFvhtcmS/cwlVZXbSEfKNYkjiDWg= -----END CERTIFICATE-----Generated at Sat Apr 26 22:24:46 2025 by rpki-client