$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/6e62b154-aad7-308e-adbb-e41b22b5c510.roa File: 6e62b154-aad7-308e-adbb-e41b22b5c510.roa (raw, json) Hash identifier: HQhW7H/kLavmCWe2bdkC4N9M9DyWnb233s5LEkw19w0= Subject key identifier: E0:94:43:80:D3:1D:47:17:B4:27:FB:B8:CA:2F:6D:E9:72:9C:29:EE Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Certificate serial: 010D0C9F432858498CFF167C48D65EF7ABACAAC0 Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/6e62b154-aad7-308e-adbb-e41b22b5c510.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 10497 IP address blocks: 192.86.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:16:7c:48:d6:5e:f7:ab:ac:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=1455287f-61ad-41fc-818f-2d118f468da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:74:0a:c0:50:43:3c:86:7b:77:f6:db:9f: f3:b8:0c:11:33:77:ec:e1:6c:19:d4:e5:cb:da:3a: 02:3d:6b:bc:7b:fb:eb:6b:4b:bf:40:75:31:43:84: a7:63:a9:0a:c7:6b:5c:b4:af:76:94:e9:b3:0d:ae: e5:48:6c:66:78:3f:2d:1c:75:62:93:58:6a:7f:4c: 80:83:f8:08:0a:43:c3:48:06:b8:6d:76:9d:c0:22: a3:49:c4:4a:dd:de:cf:f1:c3:3b:57:7f:32:20:85: 70:de:ae:96:90:4d:b4:f7:7b:1a:1f:2d:5d:72:66: 18:04:ce:ec:c3:da:db:a8:1b:f5:4f:9e:b2:17:d5: c1:2a:0f:8e:29:2d:ae:52:27:c7:cd:97:1c:9c:19: 7a:5e:0f:2a:e6:d7:03:27:0f:06:b8:85:d9:17:93: c6:1f:23:c2:1a:bc:f9:07:e6:50:96:4d:eb:4e:0e: 01:c4:1e:e1:3b:95:5f:c3:3d:6e:6e:22:73:4e:95: 8b:66:1c:bb:9c:6d:ff:ca:62:2f:f8:c8:f5:3f:5c: 77:42:51:c6:60:c9:08:c8:37:de:b1:97:55:4f:f0: 59:67:2a:c5:1e:10:ed:33:77:af:aa:0d:91:48:8d: 7c:cd:3b:9a:ae:18:89:3a:16:b2:19:3d:73:db:a7: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:94:43:80:D3:1D:47:17:B4:27:FB:B8:CA:2F:6D:E9:72:9C:29:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/6e62b154-aad7-308e-adbb-e41b22b5c510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl X509v3 Authority Key Identifier: keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer sbgp-ipAddrBlock: critical IPv4: 192.86.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:94:80:65:c4:9c:a0:f9:5a:fd:f2:e2:e8:ce:0e:f8:a2:05: 41:50:64:67:cb:40:cb:a8:32:a6:96:fd:00:9b:5b:e2:f3:c4: 29:f7:b2:33:49:86:9a:6d:83:91:d5:51:e7:d9:31:38:56:d8: 67:0e:5f:63:18:0e:d1:d2:4c:c7:58:61:8c:55:32:4d:5c:28: 11:5a:7b:66:5b:45:6b:ee:e8:42:ed:67:f7:0f:53:15:4b:92: b6:21:2e:ca:0f:81:d4:1e:a0:fc:48:25:d3:a6:ae:5f:47:20: 45:8c:33:39:e1:02:03:7d:6c:83:61:3d:6a:52:68:ab:11:ac: 6a:cd:9e:51:ee:27:75:7a:42:ab:01:ea:7d:49:02:7e:63:b6: 46:d3:bb:5e:5f:8f:18:1b:83:15:1d:80:e2:41:50:4a:a9:88: c8:4e:f9:04:08:9f:9f:0b:77:2b:d9:07:cc:02:95:73:e2:95: fa:67:78:a5:37:b9:ca:2d:96:8a:49:52:b1:e2:d3:32:cd:4b: 93:79:b9:2e:ef:d6:30:a3:7e:3b:0f:08:33:dd:9c:50:1d:ed: 18:15:69:4b:45:d9:be:78:b1:b9:da:17:23:a5:d1:18:d0:77: e9:f8:c5:3a:d7:04:d9:54:f6:37:b3:b3:60:84:22:90:ed:8f: 14:4b:8c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xZ8SNZe96usqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk Y2RjMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MTQ1NTI4N2YtNjFhZC00MWZjLTgxOGYtMmQxMThmNDY4ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+90CsBQQzyGe3f225/zuAwRM3fs4WwZ1OXL 2joCPWu8e/vra0u/QHUxQ4SnY6kKx2tctK92lOmzDa7lSGxmeD8tHHVik1hqf0yA g/gICkPDSAa4bXadwCKjScRK3d7P8cM7V38yIIVw3q6WkE2093saHy1dcmYYBM7s w9rbqBv1T56yF9XBKg+OKS2uUifHzZccnBl6Xg8q5tcDJw8GuIXZF5PGHyPCGrz5 B+ZQlk3rTg4BxB7hO5Vfwz1ubiJzTpWLZhy7nG3/ymIv+Mj1P1x3QlHGYMkIyDfe sZdVT/BZZyrFHhDtM3evqg2RSI18zTuarhiJOhayGT1z26dgxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCUQ4DTHUcXtCf7uMovbelynCnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvNmU2MmIxNTQtYWFkNy0z MDhlLWFkYmItZTQxYjIyYjVjNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1 MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmUgGXEnKD5Wv3y4ujODviiBUFQZGfLQMuoMqaW/QCbW+LzxCn3sjNJ hpptg5HVUefZMThW2GcOX2MYDtHSTMdYYYxVMk1cKBFae2ZbRWvu6ELtZ/cPUxVL krYhLsoPgdQeoPxIJdOmrl9HIEWMMznhAgN9bINhPWpSaKsRrGrNnlHuJ3V6QqsB 6n1JAn5jtkbTu15fjxgbgxUdgOJBUEqpiMhO+QQIn58LdyvZB8wClXPilfpneKU3 ucotlopJUrHi0zLNS5N5uS7v1jCjfjsPCDPdnFAd7RgVaUtF2b54sbnaFyOl0RjQ d+n4xTrXBNlU9jezs2CEIpDtjxRLjBY= -----END CERTIFICATE-----Generated at Mon Apr 28 09:11:52 2025 by rpki-client