$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa File: de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa (raw, json) Hash identifier: Ns9qDOJ9AweuPsa2etNANf30rT6BbY1K7+JkOf15QJ0= Subject key identifier: 07:D5:42:3E:9F:E4:DE:45:D0:AA:91:F2:A1:2C:64:D6:96:BB:A1:DA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E16BC4634AC9E212733F0BC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396356 IP address blocks: 192.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:c4:63:4a:c9:e2:12:73:3f:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=3224833d-bca5-4935-bd13-1eec6551471f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:98:be:09:64:eb:9a:f3:48:00:e3:95:b6:b7: 05:3a:5d:66:13:5b:23:5c:a7:86:80:63:1e:d2:6e: 87:f4:a3:c0:69:be:8d:d1:e1:cc:db:b6:28:ae:bf: e1:4b:96:c1:87:f7:1f:ca:fe:e5:6a:76:fd:ed:fd: 4d:c3:33:c0:2f:3f:b0:e5:7f:c0:42:d4:13:f5:46: f2:2f:f4:73:37:0c:df:51:51:54:f1:d8:fd:4b:94: c0:d7:78:91:51:a1:f1:28:74:70:97:89:fc:c0:6e: b4:08:14:e9:c8:3f:21:1b:9d:07:72:96:66:b5:fd: 46:f3:92:3b:82:2a:fa:7f:2c:6e:e7:95:bc:10:d9: 6f:b0:2c:40:36:7e:3b:d6:fb:01:d2:0e:f2:7a:7e: f6:b0:ee:e1:3e:93:a5:9c:33:66:3f:57:42:2d:da: 78:b0:b3:44:61:00:60:73:0d:3e:02:8b:bf:46:8a: e9:84:64:87:84:6c:1a:82:9c:fd:bc:9e:b5:35:36: ec:dc:de:c5:51:db:77:25:e3:5c:a0:02:75:56:6f: 81:d6:3b:d9:d4:51:65:cd:cc:c0:f6:f4:ca:74:2f: dc:1f:5f:08:e9:5b:a8:83:79:22:18:98:cb:49:6c: eb:61:39:7a:fd:60:50:d1:1f:41:4d:86:07:ef:30: 8f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D5:42:3E:9F:E4:DE:45:D0:AA:91:F2:A1:2C:64:D6:96:BB:A1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0e:af:6f:6c:3e:5f:3a:d8:b2:58:54:95:c1:3d:e3:70:4b: 97:f4:58:80:70:45:a8:0a:24:c7:c2:f5:d4:b2:f9:33:a5:06: d1:01:46:44:d1:20:b5:97:08:01:f4:1a:a2:21:eb:7e:fe:57: 9f:98:59:55:5d:f0:1b:af:55:62:a6:db:6b:7f:85:39:74:b6: ce:00:50:9f:d4:07:6b:d0:d8:b1:1a:06:59:d9:49:c5:87:7c: 2a:df:0b:c3:1d:f1:9a:23:9c:83:df:ef:8e:75:9e:35:05:a7: 19:6a:fd:a7:58:2a:15:21:39:f3:64:82:ae:e0:28:73:dc:5f: c8:74:85:45:58:d2:15:0f:de:8a:8b:fc:78:ab:74:dc:b5:9f: e2:cc:08:e2:3a:f2:f5:b8:70:d2:06:e5:37:17:cc:39:e1:79: ee:cc:4d:16:91:4a:d0:29:16:83:2f:f6:90:4d:46:83:99:bf: 31:38:9c:75:0c:60:e5:2c:2b:d5:6b:86:d7:3d:04:0b:ad:89: c4:b7:27:ea:76:d1:3b:43:23:17:f2:de:1f:19:d8:a3:9e:aa: 05:a4:11:e5:48:5d:99:90:2c:0f:86:b6:e1:5e:b9:f7:dc:68: a7:4e:0a:b6:1c:5a:5d:3e:57:24:d5:57:fc:2b:14:eb:58:27: fb:ba:97:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha8RjSsniEnM/C8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MzIyNDgzM2QtYmNhNS00OTM1LWJkMTMtMWVlYzY1NTE0NzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpi+CWTrmvNIAOOVtrcFOl1mE1sjXKeGgGMe 0m6H9KPAab6N0eHM27Yorr/hS5bBh/cfyv7lanb97f1NwzPALz+w5X/AQtQT9Uby L/RzNwzfUVFU8dj9S5TA13iRUaHxKHRwl4n8wG60CBTpyD8hG50HcpZmtf1G85I7 gir6fyxu55W8ENlvsCxANn471vsB0g7yen72sO7hPpOlnDNmP1dCLdp4sLNEYQBg cw0+Aou/RorphGSHhGwagpz9vJ61NTbs3N7FUdt3JeNcoAJ1Vm+B1jvZ1FFlzczA 9vTKdC/cH18I6Vuog3kiGJjLSWzrYTl6/WBQ0R9BTYYH7zCPrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfVQj6f5N5F0KqR8qEsZNaWu6HaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGUzZmEzZjUtNTY1Mi0z YWQ4LWJkNGMtNjg5YzYwOGQzOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8Or29sPl862LJYVJXBPeNwS5f0WIBwRagKJMfC9dSy+TOlBtEBRkTR ILWXCAH0GqIh637+V5+YWVVd8BuvVWKm22t/hTl0ts4AUJ/UB2vQ2LEaBlnZScWH fCrfC8Md8ZojnIPf7451njUFpxlq/adYKhUhOfNkgq7gKHPcX8h0hUVY0hUP3oqL /HirdNy1n+LMCOI68vW4cNIG5TcXzDnhee7MTRaRStApFoMv9pBNRoOZvzE4nHUM YOUsK9Vrhtc9BAuticS3J+p20TtDIxfy3h8Z2KOeqgWkEeVIXZmQLA+GtuFeuffc aKdOCrYcWl0+VyTVV/wrFOtYJ/u6l/Q= -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:14 2025 by rpki-client