$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e2398531-5f7e-3b17-8134-67fb830d6611.roa File: e2398531-5f7e-3b17-8134-67fb830d6611.roa (raw, json) Hash identifier: fsSivs+atOsRjFjR87XaSoMmRURsXzU2/ladzn8gPh0= Subject key identifier: 62:82:0C:AB:04:DA:BF:F2:61:9B:91:2B:48:34:64:5B:0F:54:43:26 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285849806F0D68A018A6978EB67480 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e2398531-5f7e-3b17-8134-67fb830d6611.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 192.77.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:0d:68:a0:18:a6:97:8e:b6:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=430d7869-ac3e-4146-81d0-8614072b8ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a4:70:92:30:ba:af:a3:0e:b9:64:8c:ec:8c: af:57:7c:0f:29:a0:19:ca:db:cf:ee:47:08:cf:6c: cd:92:a6:68:35:a8:11:06:d7:a4:fd:98:de:9e:37: f8:6d:9f:29:04:7c:c8:03:a1:af:a5:8e:7f:0f:34: 4f:19:1a:71:52:14:c7:c8:b1:d7:8d:f1:3d:be:8a: 36:36:32:ae:d2:fa:b9:45:3a:ea:e1:bf:4e:c6:61: 5e:43:d2:6e:1a:fe:b2:79:0a:a6:8f:6b:66:ec:72: 2e:2a:eb:11:cf:4e:ab:f0:b0:0f:53:cf:f5:32:f1: 4c:7c:fa:fc:d0:0f:12:a4:56:08:b4:7a:63:65:e5: 69:93:b5:f8:36:ed:bb:bf:39:15:98:8e:7d:54:9e: 20:cc:bf:03:f9:a3:53:c1:ec:af:a4:f9:56:65:ab: 04:ea:d3:8f:08:b0:37:48:0a:03:23:9a:9a:87:00: ea:c2:97:ea:6e:37:3e:7d:30:69:ca:da:b6:2c:bb: ef:79:e3:2e:38:f2:ee:83:d0:06:bb:a5:20:af:3c: 41:b1:47:17:de:cd:ba:f4:45:72:0e:35:bc:bc:c9: 92:ed:76:e4:c4:5b:2e:68:89:05:16:bc:9c:6f:94: 2e:ff:f4:eb:89:e4:41:e7:6a:3f:b2:df:8c:c5:fc: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:0C:AB:04:DA:BF:F2:61:9B:91:2B:48:34:64:5B:0F:54:43:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e2398531-5f7e-3b17-8134-67fb830d6611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 192.77.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:50:25:0d:71:4b:33:25:72:0e:4e:30:12:98:a5:ac:11:22: 72:e5:3a:f9:ae:00:56:91:03:e3:15:38:07:e8:f7:b6:36:f7: b7:be:6d:c8:c9:43:65:72:5a:18:05:0e:30:9a:72:19:32:ba: 82:3b:a0:c8:0f:3c:7c:ac:07:b7:71:29:28:6f:73:67:26:51: db:16:ad:1f:14:2d:b0:5c:ac:f4:c8:64:18:87:30:30:8c:de: d8:2c:b2:b8:bf:f2:02:fb:f2:9c:e0:63:94:1c:c0:03:fd:89: fc:b0:53:dd:7a:6a:a2:b3:5b:d9:0e:fc:fe:fc:c5:45:db:fb: c7:9e:6a:fd:51:bc:67:49:ee:ca:68:29:96:7b:a3:4f:eb:74: 3b:37:ba:ff:69:a8:98:3f:c8:6a:46:56:dd:9b:58:b5:65:8c: 33:4e:22:1e:d4:d7:81:bc:72:59:e4:66:4f:c3:fc:21:8c:c3: b5:9a:05:4d:9c:07:90:6c:fa:99:6f:49:e1:4f:97:05:ad:3a: cc:62:62:c9:77:dc:13:b9:9d:78:96:6e:74:e9:1f:9e:ca:7e: bf:c8:78:4a:9b:2a:ee:31:23:10:1c:88:79:6a:47:03:ed:03: 34:cb:b9:2e:5d:36:bb:6f:4a:f9:31:de:77:7c:5a:0f:4f:c0: ed:04:11:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbw1ooBiml462dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NDMwZDc4NjktYWMzZS00MTQ2LTgxZDAtODYxNDA3MmI4ZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76RwkjC6r6MOuWSM7IyvV3wPKaAZytvP7kcI z2zNkqZoNagRBtek/Zjenjf4bZ8pBHzIA6GvpY5/DzRPGRpxUhTHyLHXjfE9voo2 NjKu0vq5RTrq4b9OxmFeQ9JuGv6yeQqmj2tm7HIuKusRz06r8LAPU8/1MvFMfPr8 0A8SpFYItHpjZeVpk7X4Nu27vzkVmI59VJ4gzL8D+aNTweyvpPlWZasE6tOPCLA3 SAoDI5qahwDqwpfqbjc+fTBpytq2LLvveeMuOPLug9AGu6UgrzxBsUcX3s269EVy DjW8vMmS7XbkxFsuaIkFFrycb5Qu//TrieRB52o/st+MxfxW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKCDKsE2r/yYZuRK0g0ZFsPVEMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZTIzOTg1MzEtNWY3ZS0z YjE3LTgxMzQtNjdmYjgzMGQ2NjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwE3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9QJQ1xSzMlcg5OMBKYpawRInLlOvmuAFaRA+MVOAfo97Y297e+bcjJ Q2VyWhgFDjCachkyuoI7oMgPPHysB7dxKShvc2cmUdsWrR8ULbBcrPTIZBiHMDCM 3tgssri/8gL78pzgY5QcwAP9ifywU916aqKzW9kO/P78xUXb+8eeav1RvGdJ7spo KZZ7o0/rdDs3uv9pqJg/yGpGVt2bWLVljDNOIh7U14G8clnkZk/D/CGMw7WaBU2c B5Bs+plvSeFPlwWtOsxiYsl33BO5nXiWbnTpH57Kfr/IeEqbKu4xIxAciHlqRwPt AzTLuS5dNrtvSvkx3nd8Wg9PwO0EETU= -----END CERTIFICATE-----Generated at Mon Apr 28 11:43:50 2025 by rpki-client