$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/0b497f88-1f2a-3110-86e9-27c67b4f79e1.roa File: 0b497f88-1f2a-3110-86e9-27c67b4f79e1.roa (raw, json) Hash identifier: f18BHX0GbL0MsEf3WRG2PJyECjshoeswOyKlzVn2Gw8= Subject key identifier: 80:31:FA:02:EF:34:20:24:2C:41:12:29:93:A2:E9:FD:FE:2D:E9:01 Certificate issuer: /CN=113d4a61-c82e-4d8a-92a1-56c5486a3b96 Certificate serial: 010D0C9F4328584913AC1FF0DB1B73D3DD8AD080 Authority key identifier: 4B:5E:ED:27:9F:69:99:0C:67:27:7B:BE:D0:1B:5E:46:A6:61:6E:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/0b497f88-1f2a-3110-86e9-27c67b4f79e1.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 54390 IP address blocks: 192.101.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/113d4a61-c82e-4d8a-92a1-56c5486a3b96.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/113d4a61-c82e-4d8a-92a1-56c5486a3b96.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1f:f0:db:1b:73:d3:dd:8a:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=113d4a61-c82e-4d8a-92a1-56c5486a3b96 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=5065c0c8-635a-40e6-ac20-33f30981f901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:67:b6:07:fc:c0:f7:a3:02:50:9c:a7:e9: 71:02:1f:bd:0c:a7:d7:18:3d:4f:38:f8:62:8d:0d: 73:97:19:34:08:9a:48:d4:c8:db:11:15:e9:61:b3: 70:9a:19:bd:f7:15:1f:52:37:4c:0b:9f:c8:8d:35: a5:af:d3:aa:a3:bd:2f:53:2d:c4:9b:0a:02:58:44: fc:f7:f3:6b:99:cd:1b:bb:5f:4e:fc:6a:2c:68:ce: 7c:f4:96:db:6d:fa:b7:fc:3d:27:38:94:c8:58:20: 2e:df:b9:12:b7:23:fd:4c:bc:3f:75:4a:4f:31:00: 7a:f8:bd:be:2f:d3:b5:b0:29:6a:d7:1f:fd:09:49: 08:85:00:a6:ef:4f:ba:77:fa:aa:11:48:ac:57:a2: ef:5b:74:71:5f:05:b5:9a:32:a6:d2:68:f2:b7:31: 7b:7a:31:51:f9:a9:e3:af:a6:e6:d2:17:f9:50:2c: 38:bb:ff:05:81:2a:b4:21:4e:99:53:c8:5d:a3:c7: f8:cb:36:ce:43:46:48:22:d5:94:e5:5d:43:26:76: bf:8c:c3:40:c6:cf:04:8f:8a:1d:b9:92:59:1b:de: 97:62:3a:62:ea:86:1e:19:e9:a5:e1:81:13:d3:86: 07:9f:7f:14:c7:3a:f6:3d:75:db:f9:8d:5f:b6:64: 8d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:31:FA:02:EF:34:20:24:2C:41:12:29:93:A2:E9:FD:FE:2D:E9:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/0b497f88-1f2a-3110-86e9-27c67b4f79e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96/113d4a61-c82e-4d8a-92a1-56c5486a3b96.crl X509v3 Authority Key Identifier: keyid:4B:5E:ED:27:9F:69:99:0C:67:27:7B:BE:D0:1B:5E:46:A6:61:6E:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/113d4a61-c82e-4d8a-92a1-56c5486a3b96.cer sbgp-ipAddrBlock: critical IPv4: 192.101.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:02:a3:f0:02:b0:a3:c8:db:f4:77:e2:85:60:e9:27:d2:64: 12:88:9c:77:43:c9:42:7f:76:30:7b:8c:e3:df:33:f4:56:95: f9:fb:51:83:7c:27:64:a9:ca:50:64:b7:9a:f6:59:42:34:3a: 71:20:b6:1f:31:2b:33:23:12:21:3c:35:98:48:ac:64:88:52: 67:7d:6e:9a:e1:d1:04:af:24:53:1f:d6:cd:d2:22:0b:89:93: af:02:8e:86:d4:17:f4:27:f2:09:70:4b:d0:1e:73:74:c5:56: 1b:c1:7b:1e:c1:68:95:0d:3f:c1:cb:88:38:65:d4:ea:e6:8c: 15:0b:e9:2c:bf:8e:02:4a:78:aa:6a:32:3a:b8:b4:a5:90:b7: 6b:c8:0e:d9:8e:5e:77:be:38:09:6f:27:93:58:37:15:88:5d: eb:b3:89:56:53:88:79:d5:a0:26:4b:cb:34:07:89:cf:16:f7: 50:6d:cd:fc:e4:b1:47:c5:56:64:c2:32:3b:5a:52:8c:ee:e2: 09:90:96:71:96:12:af:27:ad:9f:44:69:18:08:fc:78:0d:9a: cc:ac:df:34:c1:ae:fb:e1:2d:ff:4a:e8:c2:bc:96:88:df:9d: d7:98:53:d9:ee:c1:6a:3c:ef:94:1c:45:11:fa:45:2d:8b:fe: 90:05:07:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB/w2xtz092K0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTEzZDRhNjEtYzgyZS00ZDhhLTkyYTEtNTZjNTQ4NmEz Yjk2MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NTA2NWMwYzgtNjM1YS00MGU2LWFjMjAtMzNmMzA5ODFmOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIFntgf8wPejAlCcp+lxAh+9DKfXGD1POPhi jQ1zlxk0CJpI1MjbERXpYbNwmhm99xUfUjdMC5/IjTWlr9Oqo70vUy3EmwoCWET8 9/Nrmc0bu19O/GosaM589Jbbbfq3/D0nOJTIWCAu37kStyP9TLw/dUpPMQB6+L2+ L9O1sClq1x/9CUkIhQCm70+6d/qqEUisV6LvW3RxXwW1mjKm0mjytzF7ejFR+anj r6bm0hf5UCw4u/8FgSq0IU6ZU8hdo8f4yzbOQ0ZIItWU5V1DJna/jMNAxs8Ej4od uZJZG96XYjpi6oYeGeml4YET04YHn38Uxzr2PXXb+Y1ftmSNdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAx+gLvNCAkLEESKZOi6f3+LekBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMTNk NGE2MS1jODJlLTRkOGEtOTJhMS01NmM1NDg2YTNiOTYvMGI0OTdmODgtMWYyYS0z MTEwLTg2ZTktMjdjNjdiNGY3OWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTEzZDRhNjEtYzgyZS00ZDhhLTky YTEtNTZjNTQ4NmEzYjk2LzExM2Q0YTYxLWM4MmUtNGQ4YS05MmExLTU2YzU0ODZh M2I5Ni5jcmwwHwYDVR0jBBgwFoAUS17tJ59pmQxnJ3u+0BteRqZhbsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMTNkNGE2MS1jODJlLTRkOGEtOTJhMS01NmM1 NDg2YTNiOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoCo/ACsKPI2/R34oVg6SfSZBKInHdDyUJ/djB7jOPfM/RWlfn7UYN8 J2SpylBkt5r2WUI0OnEgth8xKzMjEiE8NZhIrGSIUmd9bprh0QSvJFMf1s3SIguJ k68CjobUF/Qn8glwS9Aec3TFVhvBex7BaJUNP8HLiDhl1OrmjBUL6Sy/jgJKeKpq Mjq4tKWQt2vIDtmOXne+OAlvJ5NYNxWIXeuziVZTiHnVoCZLyzQHic8W91Btzfzk sUfFVmTCMjtaUozu4gmQlnGWEq8nrZ9EaRgI/HgNmsys3zTBrvvhLf9K6MK8lojf ndeYU9nuwWo875QcRRH6RS2L/pAFB2Q= -----END CERTIFICATE-----Generated at Tue Apr 29 05:35:56 2025 by rpki-client