$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa File: 2d512d2b-840f-30cb-88f8-f79128126588.roa (raw, json) Hash identifier: 2bm/GwJ+p2z9uFTUIgXE93Sv7di8qdZRpCfaN6EbT8w= Subject key identifier: C3:A5:8E:FF:F5:0B:43:05:76:80:A7:D4:06:EC:22:86:C8:04:C9:C3 Certificate issuer: /CN=d3bf28f7-eba5-4254-a572-761a872427b5 Certificate serial: 010D0C9F4328584937D93042020FD14AC2074E00 Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.103.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:30:42:02:0f:d1:4a:c2:07:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5 Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=49676a51-439a-4bd4-aa38-cb6c79551ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:34:79:93:05:3f:66:91:da:85:32:f8:17:25: c4:b9:13:86:bd:07:17:d4:db:da:3f:e2:fc:75:ff: 36:2a:35:cd:a4:b7:d1:1e:07:2e:d0:9f:77:3b:19: 4c:2c:6d:bd:83:eb:b6:32:38:4e:00:2e:5a:49:0a: e2:3a:60:61:cc:90:bc:0e:cd:fc:81:e2:95:bb:d2: eb:d6:b5:f9:9b:2c:0a:c5:d7:ac:b3:f5:87:9a:33: 94:9e:c4:97:60:be:10:17:e7:21:98:bf:07:ab:45: 4e:08:70:05:3e:16:c4:ab:79:77:18:5d:c0:a0:05: 84:dd:da:67:ce:dc:14:86:ce:c2:fb:a3:79:f1:43: 15:37:a8:63:a5:87:b2:b4:be:c4:df:77:40:0f:fb: ce:26:af:62:d2:42:14:15:c4:d0:14:c2:34:1c:6f: 63:e7:42:45:b5:a6:8a:32:89:56:ad:12:62:e5:ae: 9f:ec:3a:31:ad:0a:f7:86:d7:a0:06:36:a6:bb:0c: 2b:01:66:e0:c4:16:1a:d1:db:5b:f2:21:2c:4f:3b: a8:c4:13:69:64:53:7d:af:93:4b:a6:e9:f7:f8:e1: 38:45:fd:63:e1:bf:0f:46:a1:f2:e4:96:cd:e2:96: 10:0c:94:a2:ca:6d:66:fa:4a:e9:cf:d7:a2:ed:0c: f6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A5:8E:FF:F5:0B:43:05:76:80:A7:D4:06:EC:22:86:C8:04:C9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl X509v3 Authority Key Identifier: keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer sbgp-ipAddrBlock: critical IPv4: 192.103.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:58:18:17:ef:30:1b:04:05:ef:a7:bc:b6:19:73:5c:f9:dc: 58:7f:e9:18:0b:02:e1:d5:8f:0e:41:fa:3b:e8:4f:ad:35:67: d1:36:a8:eb:0e:70:35:1b:9c:34:40:d8:de:94:12:9f:b8:67: a4:9c:02:99:b7:83:f4:42:eb:61:db:90:42:95:60:aa:67:28: fc:18:4f:f9:83:68:77:f6:7f:b2:45:1d:08:c9:11:ec:3a:cb: c5:4d:ad:d5:25:79:f9:fa:d3:b0:d6:b8:4e:7b:6e:96:f7:27: 28:23:04:e9:55:68:fa:a4:05:d0:83:1e:ca:c9:20:1c:e3:e2: 06:88:5e:b5:cc:a0:c3:b1:fd:97:9c:00:94:55:66:cb:d9:60: 99:47:77:14:a4:1f:74:d1:92:00:60:21:55:0f:45:f2:84:b9: f9:c0:61:19:4f:09:36:de:b2:e0:9f:d4:2e:ec:49:8f:1f:d5: d3:18:b0:a8:93:1d:3a:f4:80:cd:09:5d:d0:5f:81:cb:87:59: d4:e1:70:59:22:3f:8a:3d:19:1d:4e:6a:0d:01:a7:7d:68:04: ce:92:1c:e4:19:39:5f:96:2f:9e:54:f0:0a:8d:6a:63:e7:d8: 50:5d:07:54:3a:9d:27:8c:99:23:98:bb:1b:55:fd:32:09:f9: 2c:71:1e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TBCAg/RSsIHTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiZjI4ZjctZWJhNS00MjU0LWE1NzItNzYxYTg3MjQy N2I1MB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk NDk2NzZhNTEtNDM5YS00YmQ0LWFhMzgtY2I2Yzc5NTUxYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDR5kwU/ZpHahTL4FyXEuROGvQcX1NvaP+L8 df82KjXNpLfRHgcu0J93OxlMLG29g+u2MjhOAC5aSQriOmBhzJC8Ds38geKVu9Lr 1rX5mywKxdess/WHmjOUnsSXYL4QF+chmL8Hq0VOCHAFPhbEq3l3GF3AoAWE3dpn ztwUhs7C+6N58UMVN6hjpYeytL7E33dAD/vOJq9i0kIUFcTQFMI0HG9j50JFtaaK MolWrRJi5a6f7DoxrQr3htegBjamuwwrAWbgxBYa0dtb8iEsTzuoxBNpZFN9r5NL pun3+OE4Rf1j4b8PRqHy5JbN4pYQDJSiym1m+krpz9ei7Qz2DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOljv/1C0MFdoCn1AbsIobIBMnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kM2Jm MjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFhODcyNDI3YjUvMmQ1MTJkMmItODQwZi0z MGNiLTg4ZjgtZjc5MTI4MTI2NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDNiZjI4ZjctZWJhNS00MjU0LWE1 NzItNzYxYTg3MjQyN2I1L2QzYmYyOGY3LWViYTUtNDI1NC1hNTcyLTc2MWE4NzI0 MjdiNS5jcmwwHwYDVR0jBBgwFoAUBYO/RQRVyIycbPigW3Yx/vdqjBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kM2JmMjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFh ODcyNDI3YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENYGBfvMBsEBe+nvLYZc1z53Fh/6RgLAuHVjw5B+jvoT601Z9E2qOsO cDUbnDRA2N6UEp+4Z6ScApm3g/RC62HbkEKVYKpnKPwYT/mDaHf2f7JFHQjJEew6 y8VNrdUlefn607DWuE57bpb3JygjBOlVaPqkBdCDHsrJIBzj4gaIXrXMoMOx/Zec AJRVZsvZYJlHdxSkH3TRkgBgIVUPRfKEufnAYRlPCTbesuCf1C7sSY8f1dMYsKiT HTr0gM0JXdBfgcuHWdThcFkiP4o9GR1Oag0Bp31oBM6SHOQZOV+WL55U8AqNamPn 2FBdB1Q6nSeMmSOYuxtV/TIJ+SxxHhg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:04:00 2025 by rpki-client