$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa File: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (raw, json) Hash identifier: qhY5LPDyNOfLV+3BMpovE4qNROgY8qjIRrnhElAKyUU= Subject key identifier: 08:DE:09:3F:AF:84:F0:89:72:11:A7:89:91:40:8A:DA:D4:B6:E1:B3 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F4328584993F9E199E695B61CFC326D80 Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 21976 IP address blocks: 192.51.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e1:99:e6:95:b6:1c:fc:32:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=a8fb8063-b2d2-4eb6-8c0b-081d9a8c540e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:54:99:81:fe:7f:0b:72:d2:90:7a:8c:8e: 3b:a6:df:05:e4:a7:db:91:d7:ca:5b:22:8d:6c:51: 40:1c:5b:a7:77:c0:15:cd:85:08:ee:b7:41:1a:04: 34:8b:38:ac:d6:8b:00:52:06:51:91:7c:62:58:42: e6:49:5c:16:80:f2:02:b0:af:c9:57:76:01:73:cb: 68:64:92:f0:d0:1d:55:84:52:50:3a:62:9f:2a:d7: 01:f2:82:39:d6:14:79:0b:9f:49:93:ca:ad:fe:52: 33:ea:8f:00:f5:64:8f:d0:3b:ea:ec:25:ca:1d:2d: 07:ef:16:3d:76:51:68:97:59:b7:af:4f:d3:a6:90: 72:73:34:53:fb:30:f3:c9:4a:77:38:fe:45:59:85: 40:75:e7:c9:de:30:40:77:1d:50:a2:60:c8:52:ac: e4:53:c2:f9:ea:72:5e:ee:34:c3:df:4e:1f:51:ed: c2:5b:e7:b9:79:d1:2d:06:6c:2f:c0:81:c0:14:3c: db:5c:2e:ea:16:ee:da:31:18:4f:dc:db:b9:61:ad: c1:50:c7:18:59:50:10:c9:76:a7:47:9d:aa:c7:80: b2:c3:67:8c:af:e8:22:e2:0b:2e:8d:be:9a:8b:07: cf:80:20:ea:54:a6:64:d7:c1:ca:75:04:fe:ee:b4: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DE:09:3F:AF:84:F0:89:72:11:A7:89:91:40:8A:DA:D4:B6:E1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: 192.51.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:35:8c:b0:52:81:a8:54:8e:06:e4:7e:b0:dc:6d:fe:3d:1b: c9:e5:e1:42:10:62:b7:16:e1:b9:d8:75:ca:57:12:9b:9c:47: 41:cf:b3:47:42:49:4c:bf:c5:ad:c4:1d:4b:92:a9:86:da:eb: 59:5f:71:79:42:21:94:e2:34:7f:c4:9c:c8:cb:fa:dd:d3:a0: 2f:1d:d6:10:6d:77:bc:14:f9:cd:8c:46:ef:1f:f7:6b:85:6a: 07:23:75:02:a3:d7:c3:f0:b1:58:8c:5b:d9:dc:72:33:7f:35: 5d:ad:97:ea:fc:01:79:ab:32:d4:d3:8b:d9:32:e7:01:41:eb: 1c:a5:5b:3a:c5:a2:d4:5f:31:ec:33:8a:a9:27:ee:e2:79:0b: 73:e0:f1:d5:cf:d1:47:ea:6f:a2:d3:e8:c8:48:f9:0c:49:84: 3b:89:c2:c0:40:77:f1:c0:02:6b:12:07:c5:0f:e5:27:dd:f3: b2:69:84:78:57:a8:f2:80:76:f5:bf:df:fb:de:c9:fe:83:59: f4:b7:db:e4:8d:d8:89:ca:2c:03:df:ff:e7:6d:e7:56:ca:0b: 6c:d9:bf:d0:ee:98:d0:a3:dd:cf:54:04:bd:e3:68:cd:bd:65: a5:6b:83:ed:9d:bc:b5:8a:71:10:3a:1a:2e:17:bd:c4:db:35: 93:43:dc:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eGZ5pW2HPwybYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YThmYjgwNjMtYjJkMi00ZWI2LThjMGItMDgxZDlhOGM1NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwThUmYH+fwty0pB6jI47pt8F5KfbkdfKWyKN bFFAHFund8AVzYUI7rdBGgQ0izis1osAUgZRkXxiWELmSVwWgPICsK/JV3YBc8to ZJLw0B1VhFJQOmKfKtcB8oI51hR5C59Jk8qt/lIz6o8A9WSP0Dvq7CXKHS0H7xY9 dlFol1m3r0/TppByczRT+zDzyUp3OP5FWYVAdefJ3jBAdx1QomDIUqzkU8L56nJe 7jTD304fUe3CW+e5edEtBmwvwIHAFDzbXC7qFu7aMRhP3Nu5Ya3BUMcYWVAQyXan R52qx4Cyw2eMr+gi4gsujb6aiwfPgCDqVKZk18HKdQT+7rQLLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjeCT+vhPCJchGniZFAitrUtuGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvOWE4ZDk2ODUtNDM5My0z ZjA0LTg5OGItMWIwNzVhNGI2YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM1jLBSgahUjgbkfrDcbf49G8nl4UIQYrcW4bnYdcpXEpucR0HPs0dC SUy/xa3EHUuSqYba61lfcXlCIZTiNH/EnMjL+t3ToC8d1hBtd7wU+c2MRu8f92uF agcjdQKj18PwsViMW9nccjN/NV2tl+r8AXmrMtTTi9ky5wFB6xylWzrFotRfMewz iqkn7uJ5C3Pg8dXP0Ufqb6LT6MhI+QxJhDuJwsBAd/HAAmsSB8UP5Sfd87JphHhX qPKAdvW/3/veyf6DWfS32+SN2InKLAPf/+dt51bKC2zZv9DumNCj3c9UBL3jaM29 ZaVrg+2dvLWKcRA6Gi4XvcTbNZND3K4= -----END CERTIFICATE-----Generated at Sun Apr 27 19:55:26 2025 by rpki-client