$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: vOAni6H1lunQ1cY3c/gd3CIJupByB/QgzDaP5TqbHT8= Subject key identifier: 1F:D5:E0:A0:BB:35:A3:49:88:D0:50:FB:E0:F9:DF:73:B7:75:80:A3 Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F432858493243DCB0D3FFE61448196E40 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:dc:b0:d3:ff:e6:14:48:19:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=f46d0d2f-2ed8-45ea-a95f-d892bc5a23ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5d:c8:05:f0:c8:d1:9f:8a:78:80:ee:b2:0f: 1a:93:24:55:f8:44:b6:35:96:30:80:61:cc:c9:a2: f9:88:30:f2:0b:13:d6:fc:11:f3:ee:89:32:48:b2: 0b:83:8a:19:37:ac:5a:71:2e:42:45:e0:29:87:25: 56:63:97:8c:11:3d:e3:03:c1:d3:85:df:d8:6d:ae: c2:1f:61:4d:61:33:66:e5:24:8d:03:98:8f:5c:71: 1b:81:b1:8a:f0:00:83:46:30:46:2a:de:04:c4:ee: 3b:6c:7c:79:a1:1a:b5:3e:f3:cf:7f:cc:00:bf:8c: 70:3f:27:17:6f:fd:8d:ca:ad:1c:a7:8e:7c:d8:35: 00:86:5e:a3:11:b3:9a:5d:a2:bb:30:58:2d:ff:ac: f7:cd:99:7c:6b:4f:00:b5:c0:84:b7:13:2c:83:6a: 6d:24:52:d4:2d:b5:89:38:20:e6:4f:73:25:5d:8c: a5:0b:7b:9f:0c:23:57:4e:e0:d8:00:ab:8e:78:ad: df:51:e6:8d:1a:0c:2c:45:28:3c:b9:ec:63:f0:59: 1c:7c:68:a3:58:9f:e5:d0:7d:c3:25:d0:8b:9b:17: 07:3a:f6:23:c5:32:4e:d8:1c:20:e1:7e:dc:5b:47: 75:a4:43:62:9f:73:c6:36:df:7d:d5:c6:b6:43:9a: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D5:E0:A0:BB:35:A3:49:88:D0:50:FB:E0:F9:DF:73:B7:75:80:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a8:b6:1b:fe:83:57:a3:4a:1a:ce:82:e0:fb:04:9c:13:a4: 13:2c:3e:e8:89:63:bb:a2:14:2b:ec:bb:ed:da:95:d5:d1:6d: 64:8c:b7:fd:02:b1:e6:24:30:13:b3:f1:38:ee:60:fa:05:b0: cd:52:1f:18:69:e0:6c:01:b6:1f:51:8c:72:0a:85:dc:b0:57: fc:81:bb:01:ca:ad:c3:8d:03:20:59:1f:e5:92:e7:90:6d:bf: b2:d7:7b:e4:04:c6:2b:db:22:23:31:cb:31:9c:ed:01:39:0d: b2:11:cc:b9:9e:3f:b1:99:3a:dd:62:ad:42:48:3f:2e:3b:f3: f4:0f:a0:7d:bf:06:00:82:45:20:95:7d:df:5d:b4:56:0f:e9: 3d:09:a3:02:48:a8:f2:1b:b3:5c:7f:67:ee:14:fe:29:80:1c: f6:87:62:88:de:14:8a:fa:57:22:45:91:ac:da:ca:49:6e:7d: 1a:55:8b:87:8e:3b:de:5e:26:c6:7a:7a:e8:97:35:3f:7d:2d: 8c:d6:a2:d0:b8:27:05:b2:8c:ac:1d:a5:48:a1:3c:44:be:90: 72:35:20:43:e3:92:80:51:14:74:88:df:55:d8:1e:41:52:c0: cd:e6:fe:8b:d8:f0:ab:f5:ad:cb:38:0e:88:ba:b0:5d:2e:82: 01:18:b9:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9yw0//mFEgZbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk ZjQ2ZDBkMmYtMmVkOC00NWVhLWE5NWYtZDg5MmJjNWEyM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF3IBfDI0Z+KeIDusg8akyRV+ES2NZYwgGHM yaL5iDDyCxPW/BHz7okySLILg4oZN6xacS5CReAphyVWY5eMET3jA8HThd/Yba7C H2FNYTNm5SSNA5iPXHEbgbGK8ACDRjBGKt4ExO47bHx5oRq1PvPPf8wAv4xwPycX b/2Nyq0cp4582DUAhl6jEbOaXaK7MFgt/6z3zZl8a08AtcCEtxMsg2ptJFLULbWJ OCDmT3MlXYylC3ufDCNXTuDYAKuOeK3fUeaNGgwsRSg8uexj8FkcfGijWJ/l0H3D JdCLmxcHOvYjxTJO2Bwg4X7cW0d1pENin3PGNt991ca2Q5pK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/V4KC7NaNJiNBQ++D533O3dYCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKothv+g1ejShrOguD7BJwTpBMsPuiJY7uiFCvsu+3aldXRbWSMt/0C seYkMBOz8TjuYPoFsM1SHxhp4GwBth9RjHIKhdywV/yBuwHKrcONAyBZH+WS55Bt v7LXe+QExivbIiMxyzGc7QE5DbIRzLmeP7GZOt1irUJIPy478/QPoH2/BgCCRSCV fd9dtFYP6T0JowJIqPIbs1x/Z+4U/imAHPaHYojeFIr6VyJFkazayklufRpVi4eO O95eJsZ6euiXNT99LYzWotC4JwWyjKwdpUihPES+kHI1IEPjkoBRFHSI31XYHkFS wM3m/ovY8Kv1rcs4Doi6sF0uggEYua4= -----END CERTIFICATE-----Generated at Mon Apr 28 12:26:39 2025 by rpki-client