$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa File: 5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa (raw, json) Hash identifier: uSh5aeccBP6Ra7OkTkr7AWeLrDPjhOMxyq/U7T+eov8= Subject key identifier: E9:F3:4F:62:94:AD:01:8B:E2:3F:A0:57:37:B7:CF:27:6B:0A:65:10 Certificate issuer: /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd Certificate serial: 010D0C9F43285849244E83FD818A58EDDB3D31C0 Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.80.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:83:fd:81:8a:58:ed:db:3d:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=a8a1ad2a-2e08-4c5c-9359-4cfefbd91031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:a6:fe:84:73:9e:4e:26:0d:4e:4c:ec:48: 1a:03:7e:4e:38:6f:6d:c2:f7:60:e8:66:28:39:f8: dc:ea:65:1b:a4:33:30:02:3f:06:9a:52:ee:47:bb: c5:9f:11:f1:54:4e:1d:a9:5f:11:3c:8a:16:15:0f: 8b:90:64:f3:d4:43:b2:f8:9a:08:1b:1d:b9:59:23: 52:e1:04:7d:d6:3c:09:e8:18:f7:d8:2c:70:2c:a9: 69:4b:49:c6:ba:d7:f2:31:da:c2:8c:0a:8a:8e:be: 2f:1f:ba:9d:57:42:d5:40:b8:bc:47:11:96:34:e2: 58:e4:7e:df:20:7c:df:39:7b:66:63:77:f3:3e:1f: 7c:3f:78:26:3a:ba:19:4e:90:de:3d:51:32:53:e0: 3b:0f:09:e1:1a:2b:00:c4:d1:4b:1f:02:6b:b8:35: 33:46:79:2a:9b:55:fd:d3:1e:1b:d6:22:59:f3:99: 5f:0a:d3:8d:45:54:9b:11:c3:30:35:b6:ad:e0:40: ae:6d:24:25:8c:aa:81:37:e2:9d:5a:27:68:ef:e4: e9:cd:48:af:50:cf:02:4e:35:c3:36:06:6a:26:c9: cd:82:ee:23:ae:ba:d2:4a:b8:35:79:d6:d0:d5:d0: b4:8f:05:9f:2f:e9:30:95:e3:46:84:ce:ad:5c:b7: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:4F:62:94:AD:01:8B:E2:3F:A0:57:37:B7:CF:27:6B:0A:65:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl X509v3 Authority Key Identifier: keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer sbgp-ipAddrBlock: critical IPv4: 192.80.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e0:93:05:47:3d:24:a9:c6:73:2e:30:a8:07:c3:cc:c6:d6: a8:4a:73:06:e1:c1:62:ea:d3:4c:0b:1d:68:a0:7f:43:72:fc: cc:67:94:17:3e:88:22:16:79:23:e0:3d:71:2c:b1:28:bf:48: 54:f7:c8:91:04:ce:08:ba:d0:c5:7f:25:23:b8:73:53:20:f8: 9b:60:91:f1:cb:52:5b:01:ab:76:6b:52:bb:2d:31:e8:2c:fb: d8:1c:88:76:9a:09:06:7c:cf:ec:01:e3:33:56:d0:c2:e0:27: 61:37:bb:21:a6:f2:87:9a:d7:04:74:39:d3:78:15:a6:4c:7a: ce:92:81:51:6b:1a:19:40:91:c9:74:52:04:05:39:4f:05:a4: 1e:fa:24:76:28:7e:19:dc:eb:13:db:87:36:03:d9:ab:c5:89: 40:12:48:01:de:de:0b:ea:2a:a7:89:f6:22:0f:b3:9d:ee:20: 37:b7:f2:a6:78:bc:08:c3:d9:aa:47:7b:91:e2:e7:65:9b:89: e6:15:84:26:ff:de:d4:37:a6:87:35:be:2c:a3:eb:4c:d0:03: 0a:05:ae:07:f2:b8:ea:be:f6:11:f8:4e:b1:2a:85:f4:3d:3c: 94:7a:c7:cb:0f:27:3e:e2:df:d1:8b:6e:a1:01:10:75:bc:2f: 15:26:6e:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToP9gYpY7ds9McAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3 OGRkMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YThhMWFkMmEtMmUwOC00YzVjLTkzNTktNGNmZWZiZDkxMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv+m/oRznk4mDU5M7EgaA35OOG9twvdg6GYo Ofjc6mUbpDMwAj8GmlLuR7vFnxHxVE4dqV8RPIoWFQ+LkGTz1EOy+JoIGx25WSNS 4QR91jwJ6Bj32CxwLKlpS0nGutfyMdrCjAqKjr4vH7qdV0LVQLi8RxGWNOJY5H7f IHzfOXtmY3fzPh98P3gmOroZTpDePVEyU+A7DwnhGisAxNFLHwJruDUzRnkqm1X9 0x4b1iJZ85lfCtONRVSbEcMwNbat4ECubSQljKqBN+KdWido7+TpzUivUM8CTjXD NgZqJsnNgu4jrrrSSrg1edbQ1dC0jwWfL+kwleNGhM6tXLfgwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnzT2KUrQGL4j+gVze3zydrCmUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3 NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvNWE3ZTk0YWEtZGEyMC0z NjIwLTlhNWYtZTRlN2ZiZGEwNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JhNzQ3Y2UtOWE0ZC00NzBjLWIz YTEtZGZjMzZmOWM3OGRkLzdiYTc0N2NlLTlhNGQtNDcwYy1iM2ExLWRmYzM2Zjlj NzhkZC5jcmwwHwYDVR0jBBgwFoAU2cENbez66cRVgdY1AR7AbdZwSqowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMz NmY5Yzc4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjgkwVHPSSpxnMuMKgHw8zG1qhKcwbhwWLq00wLHWigf0Ny/MxnlBc+ iCIWeSPgPXEssSi/SFT3yJEEzgi60MV/JSO4c1Mg+JtgkfHLUlsBq3ZrUrstMegs +9gciHaaCQZ8z+wB4zNW0MLgJ2E3uyGm8oea1wR0OdN4FaZMes6SgVFrGhlAkcl0 UgQFOU8FpB76JHYofhnc6xPbhzYD2avFiUASSAHe3gvqKqeJ9iIPs53uIDe38qZ4 vAjD2apHe5Hi52WbieYVhCb/3tQ3poc1viyj60zQAwoFrgfyuOq+9hH4TrEqhfQ9 PJR6x8sPJz7i39GLbqEBEHW8LxUmbts= -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:03 2025 by rpki-client