$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e106c261-72f9-3563-af12-41f3067a3912.roa File: e106c261-72f9-3563-af12-41f3067a3912.roa (raw, json) Hash identifier: fmfhLpeqP2oujHrR2WTvdsTYbpdwc7UFreq/tj4msv8= Subject key identifier: 3C:65:DF:46:FC:C5:E7:51:1F:86:E8:A7:4D:36:52:62:8D:76:2E:15 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F432858494CC9474FA7497366EF05C460 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e106c261-72f9-3563-af12-41f3067a3912.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 22781 IP address blocks: 192.200.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:47:4f:a7:49:73:66:ef:05:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=31e39386-3cf6-4555-bc53-b822c37a5698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d3:06:17:6a:05:a5:15:f5:6e:41:5a:cc:cd: 5a:1d:e1:bc:6f:3b:64:5a:50:57:38:25:bc:13:36: 58:01:6f:20:89:ad:f0:00:80:3b:5b:b0:9d:92:9f: f6:e0:67:12:c6:92:02:97:36:db:cc:af:e4:4b:f2: c0:28:24:8f:03:1a:0d:a0:74:04:f4:08:f8:c8:ff: a6:fb:8b:1d:01:f9:b3:42:af:a8:63:3f:4d:8e:ca: a2:e8:d1:d8:0c:a4:80:a6:2e:41:38:46:7c:70:03: b2:14:e0:6d:30:2d:0b:e8:8e:07:ba:f5:8d:34:da: 7f:73:7b:c7:30:cc:62:5c:df:80:a7:fe:76:da:a1: 69:db:5b:32:75:4b:d7:da:39:79:c3:d4:7c:31:d1: 18:1f:bc:89:17:a5:26:a7:b0:92:aa:8b:cd:8e:bd: 9e:39:1b:e5:12:f7:a8:4a:91:5e:d7:e8:bf:ff:ed: 47:99:8a:6f:68:e2:ff:2f:d0:2f:7a:f7:b0:3e:f1: 08:35:2b:45:c4:5b:db:fd:a5:5d:6f:72:9a:c4:fd: 24:b0:33:01:02:bc:ab:34:8a:d5:06:a0:65:6d:eb: 54:20:3f:92:65:b9:f4:05:c4:e2:ea:40:51:0f:af: a4:d8:fc:92:f4:51:e9:f3:1a:e6:eb:0e:46:3a:80: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:65:DF:46:FC:C5:E7:51:1F:86:E8:A7:4D:36:52:62:8D:76:2E:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e106c261-72f9-3563-af12-41f3067a3912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 192.200.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:71:36:a4:fb:b9:1b:21:72:64:8c:7e:4b:fc:e8:ed:d0:6b: 23:a5:60:8a:1d:89:c3:bf:e8:5f:c2:67:3f:03:3e:13:9c:28: 39:49:5a:85:6f:7f:38:8a:4b:22:c3:bb:24:f1:c0:fc:ac:f8: ab:c3:14:ec:61:6d:21:03:7c:f4:2f:0a:ee:c7:f2:fa:db:c8: a9:6d:24:0e:d1:22:91:e9:f7:14:5a:b2:2d:eb:76:6f:59:70: a4:4a:6e:a2:ed:2e:d9:c6:07:79:de:10:3f:04:7d:1d:bb:f7: 93:2d:42:ab:17:d7:4c:c7:27:e3:9c:03:89:1f:1e:4e:3e:c5: 7d:ef:53:b6:0b:db:21:1f:24:a6:e2:04:93:6b:70:59:51:1c: a8:bd:6e:5c:ae:31:a2:cd:5e:bf:c6:7f:d7:3c:d2:93:c5:97: 5f:5b:67:3a:ef:aa:d7:c7:6f:3c:59:89:e8:36:00:1c:7a:5e: a5:99:b6:26:8f:b1:0f:01:dd:fb:9a:26:9a:ff:2a:bd:1f:13: da:8a:6d:f6:11:99:15:94:43:a0:4d:46:17:21:34:ee:a9:c8: ff:44:6d:aa:3c:53:75:6c:07:85:fc:fc:9a:15:1e:bc:ea:ca: e2:6b:b5:e9:5a:23:07:80:eb:60:da:4a:b2:62:e1:26:9f:fb: 28:83:58:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUdPp0lzZu8FxGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MzFlMzkzODYtM2NmNi00NTU1LWJjNTMtYjgyMmMzN2E1Njk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNMGF2oFpRX1bkFazM1aHeG8bztkWlBXOCW8 EzZYAW8gia3wAIA7W7Cdkp/24GcSxpIClzbbzK/kS/LAKCSPAxoNoHQE9Aj4yP+m +4sdAfmzQq+oYz9Njsqi6NHYDKSApi5BOEZ8cAOyFOBtMC0L6I4HuvWNNNp/c3vH MMxiXN+Ap/522qFp21sydUvX2jl5w9R8MdEYH7yJF6Ump7CSqovNjr2eORvlEveo SpFe1+i//+1HmYpvaOL/L9AvevewPvEINStFxFvb/aVdb3KaxP0ksDMBAryrNIrV BqBlbetUID+SZbn0BcTi6kBRD6+k2PyS9FHp8xrm6w5GOoCujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxl30b8xedRH4bop002UmKNdi4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZTEwNmMyNjEtNzJmOS0z NTYzLWFmMTItNDFmMzA2N2EzOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwMiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtxNqT7uRshcmSMfkv86O3QayOlYIodicO/6F/CZz8DPhOcKDlJWoVv fziKSyLDuyTxwPys+KvDFOxhbSEDfPQvCu7H8vrbyKltJA7RIpHp9xRasi3rdm9Z cKRKbqLtLtnGB3neED8EfR2795MtQqsX10zHJ+OcA4kfHk4+xX3vU7YL2yEfJKbi BJNrcFlRHKi9blyuMaLNXr/Gf9c80pPFl19bZzrvqtfHbzxZieg2ABx6XqWZtiaP sQ8B3fuaJpr/Kr0fE9qKbfYRmRWUQ6BNRhchNO6pyP9Ebao8U3VsB4X8/JoVHrzq yuJrtelaIweA62DaSrJi4Saf+yiDWPg= -----END CERTIFICATE-----Generated at Sat Apr 26 20:00:48 2025 by rpki-client