$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa File: b51ec417-f848-3dcb-9fd9-9674c9833110.roa (raw, json) Hash identifier: jG1k8GI396yeJcQUDSEwwG7bw8XRIOqFrpaWTpVDaIk= Subject key identifier: 43:51:F7:2D:24:21:AB:DC:08:0C:9F:33:BB:D9:9A:E2:8E:AE:8D:C0 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584988CF2CC6E6882544084BB7C0 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 395567 IP address blocks: 192.111.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2c:c6:e6:88:25:44:08:4b:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=c340f7c4-1fc2-4648-8e6a-2fdac57a43d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:03:ac:d0:18:54:8b:28:f3:09:e7:89:ee: b2:94:f2:d2:57:c7:14:af:cc:19:59:f5:b3:81:49: 2a:d1:11:30:48:97:0a:0b:fe:da:5a:d2:65:44:14: c9:72:0a:bd:00:ff:b2:6c:7a:58:23:9a:99:8a:9e: e4:6c:35:f3:7e:a0:79:3a:ba:7c:59:4d:3f:86:78: 3b:16:18:8c:2c:64:14:8c:d0:78:1b:5c:62:a9:2d: 49:66:d3:36:d1:03:f1:9e:0c:f7:c6:bd:c7:7e:07: 19:77:aa:40:5b:bd:be:0e:ec:e4:60:a0:64:fc:c6: a8:cb:7b:e4:69:78:72:cc:11:9b:05:31:8b:1b:88: 13:73:af:bf:22:08:a8:fe:62:80:af:7b:51:d8:57: fb:ec:5f:c5:95:03:6c:f7:f1:b3:9e:73:39:fd:ca: 33:85:16:98:4d:91:4d:1e:5b:95:0c:dc:d4:17:cf: 42:41:75:21:40:b9:7f:4e:e4:51:37:c6:5a:80:06: a3:b3:0f:ef:10:a2:b7:96:58:38:94:56:0d:8a:1f: 2b:ba:14:24:dd:99:c1:de:d6:c9:07:3c:1f:68:26: eb:00:12:19:60:81:71:0a:ae:ea:78:43:d7:cf:41: b3:4a:9d:84:8b:51:10:71:87:d8:35:65:14:89:53: e9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:F7:2D:24:21:AB:DC:08:0C:9F:33:BB:D9:9A:E2:8E:AE:8D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 192.111.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:93:e2:90:b2:af:ac:2b:19:ac:a7:d4:1c:f1:b7:92:9c:4f: 90:b7:1c:78:fe:f1:ac:df:74:5b:2f:93:33:80:3e:2a:af:05: 3c:a5:2d:5a:3d:92:e3:4c:8f:bb:af:64:eb:ba:9c:69:c7:35: 07:09:1b:9b:ad:cf:31:56:7a:89:f8:62:17:90:b6:aa:31:16: 17:8e:9d:6e:ec:95:47:a0:fa:6f:75:75:ec:88:24:c0:7b:53: d1:5e:a3:85:6d:9b:82:d9:dd:89:8c:37:6f:6a:c1:cc:46:b1: 3e:09:ea:60:d0:3d:bc:93:98:e1:4e:47:2b:5a:3b:12:14:d4: 3f:ba:58:3d:d8:70:39:08:af:f6:57:0d:0c:61:43:69:fc:ff: f8:0b:73:5a:9b:a8:28:aa:8a:24:80:ac:ac:75:70:9c:c7:37: e8:b3:42:e1:70:7d:6e:ad:58:d8:f0:1b:a5:64:a9:62:11:af: 74:78:f8:fa:2e:7a:58:84:c5:60:c5:91:e2:97:13:ed:81:06: 94:07:3f:45:68:f2:43:59:33:48:47:4d:ad:3d:75:2b:ec:fb: e1:07:f1:ea:42:49:0c:56:41:88:95:ac:a7:02:95:f9:60:d0: 35:4b:e8:f5:df:d2:3c:66:d3:7f:c2:86:3a:c3:7b:e2:64:56: e3:c9:77:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyzG5oglRAhLt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YzM0MGY3YzQtMWZjMi00NjQ4LThlNmEtMmZkYWM1N2E0M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF0DrNAYVIso8wnnie6ylPLSV8cUr8wZWfWz gUkq0REwSJcKC/7aWtJlRBTJcgq9AP+ybHpYI5qZip7kbDXzfqB5Orp8WU0/hng7 FhiMLGQUjNB4G1xiqS1JZtM20QPxngz3xr3HfgcZd6pAW72+DuzkYKBk/Maoy3vk aXhyzBGbBTGLG4gTc6+/Igio/mKAr3tR2Ff77F/FlQNs9/GznnM5/cozhRaYTZFN HluVDNzUF89CQXUhQLl/TuRRN8ZagAajsw/vEKK3llg4lFYNih8ruhQk3ZnB3tbJ BzwfaCbrABIZYIFxCq7qeEPXz0GzSp2Ei1EQcYfYNWUUiVPpawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENR9y0kIavcCAyfM7vZmuKOro3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvYjUxZWM0MTctZjg0OC0z ZGNiLTlmZDktOTY3NGM5ODMzMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwG8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKT4pCyr6wrGayn1Bzxt5KcT5C3HHj+8azfdFsvkzOAPiqvBTylLVo9 kuNMj7uvZOu6nGnHNQcJG5utzzFWeon4YheQtqoxFheOnW7slUeg+m91deyIJMB7 U9Feo4Vtm4LZ3YmMN29qwcxGsT4J6mDQPbyTmOFORytaOxIU1D+6WD3YcDkIr/ZX DQxhQ2n8//gLc1qbqCiqiiSArKx1cJzHN+izQuFwfW6tWNjwG6VkqWIRr3R4+Pou eliExWDFkeKXE+2BBpQHP0Vo8kNZM0hHTa09dSvs++EH8epCSQxWQYiVrKcClflg 0DVL6PXf0jxm03/ChjrDe+JkVuPJd8U= -----END CERTIFICATE-----Generated at Mon Apr 28 05:32:46 2025 by rpki-client