$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa File: 1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa (raw, json) Hash identifier: 8LPI6f5CtU6/luzM4RGybaTWpBdZobpZasWx+jv5YhU= Subject key identifier: 0C:B6:A4:56:D1:6C:7E:21:70:26:FA:B3:CE:C9:AF:1E:C6:51:CB:28 Certificate issuer: /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3 Certificate serial: 010D0C9F4328584940394CC8CC603AC568E2F400 Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 61317 IP address blocks: 192.48.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4c:c8:cc:60:3a:c5:68:e2:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=3dc93468-5843-496e-8b77-3e245d14308b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:e3:e0:06:90:1f:db:57:3a:df:5e:4f:17: 21:a9:e5:b2:71:a3:11:c8:8b:55:c9:37:e2:a5:5e: b9:1c:9b:9b:08:a0:a8:21:44:7f:6e:d2:5b:dd:d2: 38:fd:99:43:df:31:9c:d1:18:da:51:a9:de:3f:b2: ba:41:0b:28:34:b6:5d:7a:b7:1d:8d:c0:62:19:1f: cf:c2:d8:bf:10:33:d7:61:d1:d2:3f:95:9a:3b:34: b5:70:1f:7d:ac:18:df:6a:6a:13:63:f4:5d:d0:6c: d3:9a:9d:63:89:2c:7c:ca:5f:4b:40:35:40:7e:76: a7:6e:f3:2f:52:42:10:ce:31:9b:6c:1d:62:15:7f: 30:b8:ad:df:18:49:87:a6:05:28:68:d0:61:35:66: cb:38:f6:1b:f9:cd:da:0a:c8:3f:25:f5:99:a7:46: 36:e9:27:0b:7a:b4:20:7c:eb:fa:58:17:be:14:5f: 22:ae:30:8e:ad:06:c2:dc:fb:b0:5e:d7:33:d8:6f: 51:03:21:f3:29:b6:92:dc:47:1e:ee:1f:b7:be:99: 19:d8:b6:d6:79:41:89:d1:25:fd:59:5b:26:c1:75: 93:9c:c1:47:fa:09:e2:b5:16:62:77:d3:e3:52:5b: 36:34:81:93:07:2c:d5:66:8e:aa:87:38:85:9f:8a: 84:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B6:A4:56:D1:6C:7E:21:70:26:FA:B3:CE:C9:AF:1E:C6:51:CB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl X509v3 Authority Key Identifier: keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer sbgp-ipAddrBlock: critical IPv4: 192.48.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7f:20:d1:31:1e:b4:ee:3b:b8:ad:be:73:f8:49:45:75:28: d7:40:28:60:9f:2e:17:25:34:f4:48:c4:3c:10:e7:ed:99:5d: de:af:7c:03:56:94:06:70:37:dc:13:bf:41:bd:81:7b:1e:55: 21:eb:04:9e:ed:07:ad:e2:2c:65:90:0c:23:91:58:e2:dd:6e: b4:98:56:51:a2:5f:b9:b3:e4:df:e4:de:7f:8b:00:8a:6f:e1: 88:ea:a0:0c:49:dd:d5:59:4d:7f:aa:bd:aa:cc:c6:3e:28:48: 6b:6d:69:46:c0:e3:d6:14:1e:c5:d2:b9:e8:1c:1a:39:72:3a: 2c:63:4a:12:68:32:84:f3:43:80:c9:15:6e:15:f6:2a:bb:f6: 56:69:ad:e5:60:cb:b8:29:88:3b:6e:69:6f:31:4b:51:dc:a4: 4f:9e:22:92:dd:48:ae:a2:3f:9c:b9:29:83:af:71:c4:a9:ea: ed:ad:1d:bc:18:3f:0d:f9:b5:c6:b6:af:37:93:de:46:e4:ec: b3:96:27:14:76:03:03:c9:da:1c:37:99:18:d7:c3:d6:c5:c1: ba:28:79:d7:16:e5:5b:ba:79:30:ca:0b:8f:45:94:c6:ed:bf: 8a:8b:1b:e8:27:dd:c2:4a:23:48:50:3c:d7:c4:32:3e:9b:35: c5:4b:b1:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUzIzGA6xWji9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2 ZWIzMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk M2RjOTM0NjgtNTg0My00OTZlLThiNzctM2UyNDVkMTQzMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/fj4AaQH9tXOt9eTxchqeWycaMRyItVyTfi pV65HJubCKCoIUR/btJb3dI4/ZlD3zGc0RjaUaneP7K6QQsoNLZdercdjcBiGR/P wti/EDPXYdHSP5WaOzS1cB99rBjfamoTY/Rd0GzTmp1jiSx8yl9LQDVAfnanbvMv UkIQzjGbbB1iFX8wuK3fGEmHpgUoaNBhNWbLOPYb+c3aCsg/JfWZp0Y26ScLerQg fOv6WBe+FF8irjCOrQbC3PuwXtcz2G9RAyHzKbaS3Ece7h+3vpkZ2LbWeUGJ0SX9 WVsmwXWTnMFH+gnitRZid9PjUls2NIGTByzVZo6qhziFn4qE9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAy2pFbRbH4hcCb6s87Jrx7GUcsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5 NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvMWU1YTRhZGEtZGI1Yi0z MWE0LTg0OTItNzIwZDVlNWM5MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTMwOTQ5OGUtOGJlZS00ZGIzLWI0 ZWYtNWZkNmYzNTc2ZWIzLzkzMDk0OThlLThiZWUtNGRiMy1iNGVmLTVmZDZmMzU3 NmViMy5jcmwwHwYDVR0jBBgwFoAUF6EsL9Pj6jvnn/04Ze/5NaXYYakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2 ZjM1NzZlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp/INExHrTuO7itvnP4SUV1KNdAKGCfLhclNPRIxDwQ5+2ZXd6vfANW lAZwN9wTv0G9gXseVSHrBJ7tB63iLGWQDCORWOLdbrSYVlGiX7mz5N/k3n+LAIpv 4YjqoAxJ3dVZTX+qvarMxj4oSGttaUbA49YUHsXSuegcGjlyOixjShJoMoTzQ4DJ FW4V9iq79lZpreVgy7gpiDtuaW8xS1HcpE+eIpLdSK6iP5y5KYOvccSp6u2tHbwY Pw35tca2rzeT3kbk7LOWJxR2AwPJ2hw3mRjXw9bFwbooedcW5Vu6eTDKC49FlMbt v4qLG+gn3cJKI0hQPNfEMj6bNcVLsTU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:10 2025 by rpki-client