$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa File: 2094b4f3-9720-3bee-8fcd-e854d365402a.roa (raw, json) Hash identifier: 8xym58+mlg0PMpHLmhOVfoUH3EkLg5QiZMfjKT6851s= Subject key identifier: 14:9A:11:7F:6B:C2:F7:E1:30:CD:CE:A2:AB:C9:E5:29:9F:BD:15:87 Certificate issuer: /CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e Certificate serial: 010D0C9F43285848EF613E950A2ACA96DEC2BC40 Authority key identifier: EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 393877 IP address blocks: 192.133.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3e:95:0a:2a:ca:96:de:c2:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c484c625-acb7-47f8-9b85-697a54039e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0f:4a:69:37:09:2f:41:c8:14:9c:84:6c:60: a6:87:65:db:d1:b2:09:24:f9:22:04:14:df:89:1b: ec:61:ab:51:88:10:6c:34:78:70:fc:30:d1:cd:44: e8:80:cc:07:73:02:05:f8:e5:3c:9f:d1:b5:45:66: c4:49:44:61:23:62:cb:1b:15:6a:73:5e:0f:0a:6f: 01:2e:cb:42:33:4a:c8:d1:06:38:de:a8:02:7f:a9: 1b:ef:d9:26:fb:a7:db:71:6d:c6:67:2f:6e:9b:00: 5b:f6:83:41:e5:30:dd:c5:49:07:d1:c8:4a:23:f4: 75:c8:bf:68:6c:86:83:67:2f:23:0b:a3:83:a6:d6: 95:1d:d0:10:d0:e5:6f:80:bf:94:1f:0f:16:70:61: d3:7a:5c:18:1d:e3:3a:4e:47:02:44:f4:42:99:0f: db:56:64:2f:5d:9c:6d:31:85:42:82:4b:16:35:64: ef:7b:b1:06:e5:b9:b5:12:2a:64:6e:a7:e6:ee:b2: 57:60:49:36:9a:58:f9:fb:b4:a6:30:fb:c1:1f:dc: fd:7a:e8:9e:e5:0f:fa:52:95:d8:56:29:f8:bb:c0: df:a4:a5:b4:ca:37:a9:54:aa:77:1b:66:c6:48:e8: 1b:d4:49:7e:6c:63:77:14:f3:4c:84:9d:89:07:34: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9A:11:7F:6B:C2:F7:E1:30:CD:CE:A2:AB:C9:E5:29:9F:BD:15:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl X509v3 Authority Key Identifier: keyid:EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer sbgp-ipAddrBlock: critical IPv4: 192.133.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:c6:1b:ea:42:17:7e:09:04:ea:6b:5c:7d:4d:71:95:9f:a9: b2:85:c2:bd:fe:f7:1c:19:32:d7:bb:9a:02:45:86:a5:fe:b9: 88:89:3e:82:24:52:4e:e4:df:ec:ba:73:85:2d:96:3a:35:81: c2:6a:e2:50:75:e4:82:3b:0d:e7:34:fc:8c:6b:c9:d4:08:0c: 49:53:a6:27:ae:0a:8b:49:f5:37:f2:63:46:fb:77:90:64:11: 2d:94:eb:64:b5:70:0d:47:02:ec:af:e0:d3:a3:ca:c1:55:a5: fe:39:ac:57:0a:da:48:74:a4:1c:49:88:53:cf:8f:48:06:3b: ed:e6:84:65:4f:5d:96:82:1f:6f:c8:f7:d7:82:1e:27:d4:7a: c5:2d:4a:db:4d:91:ef:3d:b1:be:5d:a8:44:ff:f8:ab:0e:f3: c8:fa:c2:18:e7:8f:c4:dd:17:da:4b:80:cf:07:ee:c0:91:d8: 1d:31:b2:32:aa:dd:fa:31:ea:58:38:5d:db:6e:d8:fe:c1:0e: 96:f3:e0:08:ad:5e:68:13:fb:c0:43:8b:fe:ba:0b:5f:78:ab: b5:f8:91:d5:50:4b:07:e9:4a:87:42:59:9c:b3:52:e0:c8:02: 8b:7c:15:f6:5f:c5:e4:f9:c0:51:f9:4e:a8:23:c3:2a:b5:20: ab:1e:54:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYT6VCirKlt7CvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZhMGFiZDUtN2NmOC00MmNmLThhNDYtNjI2YjUwZWZk MzBlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzQ4NGM2MjUtYWNiNy00N2Y4LTliODUtNjk3YTU0MDM5ZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ9KaTcJL0HIFJyEbGCmh2Xb0bIJJPkiBBTf iRvsYatRiBBsNHhw/DDRzUTogMwHcwIF+OU8n9G1RWbESURhI2LLGxVqc14PCm8B LstCM0rI0QY43qgCf6kb79km+6fbcW3GZy9umwBb9oNB5TDdxUkH0chKI/R1yL9o bIaDZy8jC6ODptaVHdAQ0OVvgL+UHw8WcGHTelwYHeM6TkcCRPRCmQ/bVmQvXZxt MYVCgksWNWTve7EG5bm1Eipkbqfm7rJXYEk2mlj5+7SmMPvBH9z9euie5Q/6UpXY Vin4u8DfpKW0yjepVKp3G2bGSOgb1El+bGN3FPNMhJ2JBzQkZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSaEX9rwvfhMM3OoqvJ5SmfvRWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmEw YWJkNS03Y2Y4LTQyY2YtOGE0Ni02MjZiNTBlZmQzMGUvMjA5NGI0ZjMtOTcyMC0z YmVlLThmY2QtZTg1NGQzNjU0MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZhMGFiZDUtN2NmOC00MmNmLThh NDYtNjI2YjUwZWZkMzBlL2ZmYTBhYmQ1LTdjZjgtNDJjZi04YTQ2LTYyNmI1MGVm ZDMwZS5jcmwwHwYDVR0jBBgwFoAU73PAu59X8k66/FW5U4oSDxo0itkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmEwYWJkNS03Y2Y4LTQyY2YtOGE0Ni02MjZi NTBlZmQzMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIUtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLGG+pCF34JBOprXH1NcZWfqbKFwr3+9xwZMte7mgJFhqX+uYiJPoIk Uk7k3+y6c4Utljo1gcJq4lB15II7Dec0/IxrydQIDElTpieuCotJ9TfyY0b7d5Bk ES2U62S1cA1HAuyv4NOjysFVpf45rFcK2kh0pBxJiFPPj0gGO+3mhGVPXZaCH2/I 99eCHifUesUtSttNke89sb5dqET/+KsO88j6whjnj8TdF9pLgM8H7sCR2B0xsjKq 3fox6lg4Xdtu2P7BDpbz4AitXmgT+8BDi/66C194q7X4kdVQSwfpSodCWZyzUuDI Aot8FfZfxeT5wFH5Tqgjwyq1IKseVOg= -----END CERTIFICATE-----Generated at Sun Apr 27 19:05:43 2025 by rpki-client