$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa File: 3430934f-1559-3834-9666-ebb72d355783.roa (raw, json) Hash identifier: pmtyTjXeEY0pWPVPtfaLSImTwwW1tJXWH9iJ7lBooY8= Subject key identifier: 68:D2:D3:4D:BF:75:BF:C5:D4:9A:4D:74:00:11:19:F4:E3:BC:EE:03 Certificate issuer: /CN=269e6e83-2a0d-4c81-ac1b-0611cf797293 Certificate serial: 010D0C9F432858498A3463B74BF299A017A547E0 Authority key identifier: C3:91:15:34:64:14:83:9D:A3:33:21:38:C7:32:A0:D1:0F:C8:AE:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 40149 IP address blocks: 192.107.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:63:b7:4b:f2:99:a0:17:a5:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269e6e83-2a0d-4c81-ac1b-0611cf797293 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=11677734-b360-46c3-85b7-6bd3235c1954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:19:0a:e0:1c:8f:67:ae:d5:79:11:84:cf:21: 16:38:49:29:50:a5:b1:15:f0:15:0e:45:b2:9b:3c: 8f:31:64:71:eb:d5:fd:93:8e:c1:d8:5a:53:90:66: 2a:e0:74:a9:35:a8:cb:a2:4c:73:de:48:1f:14:7d: b0:14:e6:dc:bc:32:01:30:dc:5d:23:97:cd:41:a3: 36:a0:52:75:50:45:0c:85:45:24:e2:f7:54:40:ba: 57:92:8a:cc:3c:be:4b:01:e3:88:21:ed:f1:01:7a: 87:6a:d8:3d:17:eb:6b:a7:d6:fa:6a:7d:8a:d8:d3: 0d:c1:1e:41:fa:10:05:44:77:f6:4a:ac:ee:7c:23: 7b:e7:99:5b:d4:dd:b0:c7:dd:52:ad:b8:b8:4f:48: fd:d2:bb:8e:6b:90:c7:c3:f0:a4:d1:a0:07:be:ea: 42:fc:60:b4:b1:6f:17:f7:a9:89:aa:e4:e9:3f:2c: f1:32:de:39:ce:59:1c:ca:9e:16:1a:42:7a:56:f3: 50:e5:3e:2d:6a:2c:f3:f7:91:5c:c0:21:6e:8e:82: 8d:5b:63:19:e4:d7:bb:c6:a5:da:c1:a7:af:f3:1d: 33:88:88:13:d2:cf:5e:b1:ac:be:ff:54:3e:bf:a1: 9a:52:19:7e:6c:59:6f:05:ac:60:56:bd:67:d6:17: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D2:D3:4D:BF:75:BF:C5:D4:9A:4D:74:00:11:19:F4:E3:BC:EE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.crl X509v3 Authority Key Identifier: keyid:C3:91:15:34:64:14:83:9D:A3:33:21:38:C7:32:A0:D1:0F:C8:AE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer sbgp-ipAddrBlock: critical IPv4: 192.107.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a7:f3:8e:f4:de:98:85:39:08:01:12:90:74:07:c1:9e:90: af:2e:aa:e0:6c:61:a4:84:4d:fc:59:bc:62:78:6f:c2:e6:79: a6:68:b6:f1:89:a7:6d:36:ce:cf:ff:5d:4f:d0:d5:bb:cc:44: 44:aa:4d:ee:0d:4c:11:1e:64:1d:4d:b9:44:69:76:c2:37:ef: 20:1e:2a:0b:9d:13:53:4a:89:07:10:9e:d9:31:f5:68:7c:c9: a0:54:e7:c5:af:b9:35:4d:a1:82:d5:c4:35:68:e4:99:8f:0b: 7c:ea:51:66:66:cb:f0:bb:51:97:79:bc:72:38:53:ad:f4:0b: bf:e0:7d:07:dd:98:d5:93:2a:1a:11:35:c0:74:3d:a1:46:6e: a7:61:79:b7:e1:c8:cc:8f:d7:cc:38:76:41:eb:3d:6b:8f:6d: bf:09:69:de:44:60:53:78:44:93:23:c1:38:d7:ba:bb:af:c9: a1:4c:3a:c2:43:92:c8:db:22:7b:52:23:d0:be:3d:d0:fa:f2: 2c:25:b3:d8:fd:2c:6f:b6:af:84:07:9d:09:ca:8d:1e:b7:7f: 5c:f4:64:a8:1b:46:96:8d:8c:28:6f:93:b3:3b:05:32:b6:d2: 95:e2:08:09:06:c2:10:de:70:0e:da:53:50:d2:8d:5c:b3:fd: 20:a2:cb:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGO3S/KZoBelR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY5ZTZlODMtMmEwZC00YzgxLWFjMWItMDYxMWNmNzk3 MjkzMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk MTE2Nzc3MzQtYjM2MC00NmMzLTg1YjctNmJkMzIzNWMxOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBkK4ByPZ67VeRGEzyEWOEkpUKWxFfAVDkWy mzyPMWRx69X9k47B2FpTkGYq4HSpNajLokxz3kgfFH2wFObcvDIBMNxdI5fNQaM2 oFJ1UEUMhUUk4vdUQLpXkorMPL5LAeOIIe3xAXqHatg9F+trp9b6an2K2NMNwR5B +hAFRHf2SqzufCN755lb1N2wx91Srbi4T0j90ruOa5DHw/Ck0aAHvupC/GC0sW8X 96mJquTpPyzxMt45zlkcyp4WGkJ6VvNQ5T4taizz95FcwCFujoKNW2MZ5Ne7xqXa waev8x0ziIgT0s9esay+/1Q+v6GaUhl+bFlvBaxgVr1n1hcmrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjS002/db/F1JpNdAARGfTjvO4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNjll NmU4My0yYTBkLTRjODEtYWMxYi0wNjExY2Y3OTcyOTMvMzQzMDkzNGYtMTU1OS0z ODM0LTk2NjYtZWJiNzJkMzU1NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjY5ZTZlODMtMmEwZC00YzgxLWFj MWItMDYxMWNmNzk3MjkzLzI2OWU2ZTgzLTJhMGQtNGM4MS1hYzFiLTA2MTFjZjc5 NzI5My5jcmwwHwYDVR0jBBgwFoAUw5EVNGQUg52jMyE4xzKg0Q/IrnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNjllNmU4My0yYTBkLTRjODEtYWMxYi0wNjEx Y2Y3OTcyOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASn84703piFOQgBEpB0B8GekK8uquBsYaSETfxZvGJ4b8LmeaZotvGJ p202zs//XU/Q1bvMRESqTe4NTBEeZB1NuURpdsI37yAeKgudE1NKiQcQntkx9Wh8 yaBU58WvuTVNoYLVxDVo5JmPC3zqUWZmy/C7UZd5vHI4U630C7/gfQfdmNWTKhoR NcB0PaFGbqdhebfhyMyP18w4dkHrPWuPbb8Jad5EYFN4RJMjwTjXuruvyaFMOsJD ksjbIntSI9C+PdD68iwls9j9LG+2r4QHnQnKjR63f1z0ZKgbRpaNjChvk7M7BTK2 0pXiCAkGwhDecA7aU1DSjVyz/SCiy4g= -----END CERTIFICATE-----Generated at Tue Apr 29 06:00:52 2025 by rpki-client