$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa File: 821ff32e-07d4-3b00-9b7a-0fca8537383a.roa (raw, json) Hash identifier: Dv1+Yarp9uF+qvfzwcWsuf+CQcCLLZ+LjU5V/gzdpws= Subject key identifier: 13:07:3B:EB:31:99:1F:84:7F:8A:74:B4:8B:C4:E2:3B:C5:A1:DA:D5 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F432858496054128553CBB5391CF93240 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 1824 IP address blocks: 192.252.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:12:85:53:cb:b5:39:1c:f9:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=c25b962c-9780-4b8f-b781-533ab7130c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:34:70:61:83:9f:07:88:7b:8a:85:20:c9:6b: 4e:76:6c:c3:d2:b9:13:ba:2e:3f:2f:88:be:9c:b7: e1:23:76:4d:06:35:86:c3:7f:18:04:4a:03:72:8e: 37:a9:1a:b9:32:cd:b2:ab:52:66:c5:29:ad:78:a9: 98:81:09:c1:37:08:ed:47:0f:af:5e:5d:0b:57:10: 14:ee:f1:23:20:14:3e:42:58:cb:4e:75:1f:75:cb: f7:94:88:e4:0d:8e:b4:66:3a:27:52:56:d3:47:7a: 5e:a6:0c:c4:05:fe:46:c8:d0:ed:4f:44:19:64:13: da:45:39:a9:22:d2:43:09:7b:d7:be:c4:56:28:8f: 9b:c0:b3:2a:25:e8:e3:93:58:d7:d1:af:15:09:02: 7c:50:85:85:51:87:a5:33:f6:5f:eb:00:cd:8d:6c: df:26:6b:93:d1:80:af:7f:a8:a0:40:f1:6c:76:54: eb:7e:d5:fd:f1:7c:39:f9:4e:ec:60:83:3d:5f:ec: e1:9e:8b:04:e5:48:82:2e:64:26:4e:86:71:88:88: d9:8e:ea:7c:57:9c:5b:1d:37:55:12:3c:c7:d5:9e: 0c:e4:95:8f:4b:30:d1:c3:4c:9e:e3:a6:9a:ec:09: 74:2c:7b:72:bd:e1:9d:e2:52:cb:ce:b4:7e:dc:24: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:3B:EB:31:99:1F:84:7F:8A:74:B4:8B:C4:E2:3B:C5:A1:DA:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 192.252.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2c:dd:db:8d:57:45:b2:28:06:74:b9:9b:b6:6a:28:14:61: 29:07:d2:a1:fb:56:f2:1c:6a:73:4a:cb:83:db:6f:86:5e:a5: ed:0e:ce:43:ab:e1:e3:9a:39:7c:60:e9:51:14:2b:8c:c3:e2: 11:06:df:a6:0f:d7:3f:59:22:6e:b6:ac:fa:b8:06:2f:a3:59: 05:1f:3f:d1:a4:82:08:68:dc:be:cb:de:ef:54:bd:30:52:af: 42:04:b1:0c:11:19:4e:6a:89:49:04:f6:91:d7:fb:62:02:25: 61:cc:11:29:fc:63:2e:4f:52:27:2a:19:05:0e:2b:7f:d7:9e: 2f:ee:4a:a5:c3:41:e0:fd:84:41:a1:47:5d:d8:b4:ec:80:d4: 7e:fc:cc:9e:7e:c4:98:43:40:c0:aa:4f:20:b7:58:4e:fd:87: a9:62:bb:43:26:6b:0d:e1:4e:68:f5:3a:e1:88:8c:48:22:2d: 75:4d:ab:e2:6d:9c:07:9c:b2:eb:eb:60:8d:b4:d4:4c:3b:2e: da:4d:24:fc:38:c8:61:48:3c:12:df:05:a4:2f:cc:d6:a2:eb: cd:10:bb:8a:11:f0:52:4b:bd:f1:8a:8e:83:fb:4d:41:74:2c: e5:c5:a7:5e:84:71:0b:1e:58:ce:fd:96:5d:f2:51:11:e6:53: c1:c9:b4:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBKFU8u1ORz5MkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk YzI1Yjk2MmMtOTc4MC00YjhmLWI3ODEtNTMzYWI3MTMwYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/zRwYYOfB4h7ioUgyWtOdmzD0rkTui4/L4i+ nLfhI3ZNBjWGw38YBEoDco43qRq5Ms2yq1JmxSmteKmYgQnBNwjtRw+vXl0LVxAU 7vEjIBQ+QljLTnUfdcv3lIjkDY60ZjonUlbTR3pepgzEBf5GyNDtT0QZZBPaRTmp ItJDCXvXvsRWKI+bwLMqJejjk1jX0a8VCQJ8UIWFUYelM/Zf6wDNjWzfJmuT0YCv f6igQPFsdlTrftX98Xw5+U7sYIM9X+zhnosE5UiCLmQmToZxiIjZjup8V5xbHTdV EjzH1Z4M5JWPSzDRw0ye46aa7Al0LHtyveGd4lLLzrR+3CReXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMHO+sxmR+Ef4p0tIvE4jvFodrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvODIxZmYzMmUtMDdkNC0z YjAwLTliN2EtMGZjYTg1MzczODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUs3duNV0WyKAZ0uZu2aigUYSkH0qH7VvIcanNKy4Pbb4Zepe0OzkOr 4eOaOXxg6VEUK4zD4hEG36YP1z9ZIm62rPq4Bi+jWQUfP9Gkggho3L7L3u9UvTBS r0IEsQwRGU5qiUkE9pHX+2ICJWHMESn8Yy5PUicqGQUOK3/Xni/uSqXDQeD9hEGh R13YtOyA1H78zJ5+xJhDQMCqTyC3WE79h6liu0Mmaw3hTmj1OuGIjEgiLXVNq+Jt nAecsuvrYI201Ew7LtpNJPw4yGFIPBLfBaQvzNai680Qu4oR8FJLvfGKjoP7TUF0 LOXFp16EcQseWM79ll3yURHmU8HJtNQ= -----END CERTIFICATE-----Generated at Wed Apr 30 02:10:18 2025 by rpki-client