$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa File: 9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa (raw, json) Hash identifier: jJ6LarieYAVvgOYdX4zKf1XajgnkNEamLs4yHO16EDQ= Subject key identifier: 40:86:B7:9F:09:9E:13:5F:3F:D2:C0:FB:9B:79:4D:2D:9E:FD:07:A0 Certificate issuer: /CN=052fe149-2c89-4322-a901-3a7f35c17350 Certificate serial: 010D0C9F432858499C59E442E4D49DF2B7A11340 Authority key identifier: 50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 3477 IP address blocks: 192.111.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e4:42:e4:d4:9d:f2:b7:a1:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052fe149-2c89-4322-a901-3a7f35c17350 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=5bed3282-8a11-44e8-8f4e-1d362493f7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:b6:12:17:e5:55:f7:09:36:3f:d3:20:a1: 02:fd:eb:c2:24:fc:5d:0c:9d:e4:3c:c8:ca:a4:b4: b5:d6:26:1e:83:b3:27:dd:2b:24:10:d8:f7:65:88: 17:2f:d0:9c:82:47:22:e6:51:9e:17:97:24:fe:ac: d0:d5:97:3e:be:91:a2:51:9c:e6:73:6a:fb:af:69: 88:55:2f:a9:5c:dc:bf:4d:d0:60:73:56:17:8f:4b: cb:fb:06:c3:1c:62:86:99:c3:e9:7b:ad:45:35:89: e7:59:c6:2d:4f:ae:bf:fd:54:01:80:6a:95:a3:ae: 34:dc:d7:17:55:5d:e2:ae:1b:de:f1:fa:12:ba:14: 68:f3:33:eb:76:f2:84:15:db:24:70:e0:40:d7:54: 5b:bb:3d:cc:7d:13:78:ec:ea:cc:c9:4d:fc:1e:a4: 9d:ae:0e:fb:37:9a:c4:1d:ad:ea:8a:af:c1:1d:6a: 14:01:69:b5:6c:24:d0:a1:cb:40:76:14:f1:79:53: 97:db:dd:ee:4b:7c:7f:94:10:27:ab:65:e2:88:50: af:97:3d:e8:85:2b:10:8b:ec:89:ff:a3:e4:1f:e6: 9e:85:06:c6:4f:32:86:f3:8d:e5:55:44:80:3e:5d: 84:50:8f:5b:6b:da:a0:18:98:ba:61:cf:9a:28:9d: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:86:B7:9F:09:9E:13:5F:3F:D2:C0:FB:9B:79:4D:2D:9E:FD:07:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl X509v3 Authority Key Identifier: keyid:50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer sbgp-ipAddrBlock: critical IPv4: 192.111.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:00:aa:7f:e6:30:aa:ce:8c:32:67:5f:34:69:c2:e8:f7:c8: 67:b1:ff:b7:1a:01:64:bd:8b:26:84:4f:47:f9:67:ae:7e:d6: 1e:cf:dc:1a:13:a1:a1:b8:ab:e6:6e:2f:d2:d8:e0:14:a8:a6: ea:00:36:c8:29:9f:6d:14:d5:e8:92:d1:cc:f1:d2:f7:f0:ba: 41:a7:75:13:35:f4:72:58:d5:1a:1b:99:af:23:eb:03:2e:b8: fe:03:31:9f:01:b4:db:6e:e0:f9:88:e0:79:84:e4:f9:96:8c: 26:1d:b3:2d:85:84:84:42:dd:4f:40:d7:4f:8b:3d:d7:84:db: b4:bb:97:0a:b9:5f:80:4e:cd:1e:68:b1:71:da:57:c4:fe:48: 1b:41:1a:dd:fb:9d:72:64:f1:cc:32:86:72:f5:06:d8:f2:38: 2d:cb:03:11:5e:05:7f:1b:c5:0d:5f:6f:c8:67:c8:90:9b:1e: 9c:de:ce:3b:3e:4d:43:fc:02:a1:f0:ee:a6:3d:bf:da:07:64: 74:17:a4:08:cc:22:16:6d:b6:23:7a:3f:38:d3:59:64:49:37: 7e:51:ec:70:a5:28:90:34:2e:24:8c:73:33:2a:fe:31:4c:b2: 48:59:8c:ae:0d:a1:70:9f:d3:1c:24:57:55:be:01:20:4f:f7: a2:dc:1c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWeRC5NSd8rehE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUyZmUxNDktMmM4OS00MzIyLWE5MDEtM2E3ZjM1YzE3 MzUwMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NWJlZDMyODItOGExMS00NGU4LThmNGUtMWQzNjI0OTNmN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8+2EhflVfcJNj/TIKEC/evCJPxdDJ3kPMjK pLS11iYeg7Mn3SskENj3ZYgXL9Ccgkci5lGeF5ck/qzQ1Zc+vpGiUZzmc2r7r2mI VS+pXNy/TdBgc1YXj0vL+wbDHGKGmcPpe61FNYnnWcYtT66//VQBgGqVo6403NcX VV3irhve8foSuhRo8zPrdvKEFdskcOBA11Rbuz3MfRN47OrMyU38HqSdrg77N5rE Ha3qiq/BHWoUAWm1bCTQoctAdhTxeVOX293uS3x/lBAnq2XiiFCvlz3ohSsQi+yJ /6PkH+aehQbGTzKG843lVUSAPl2EUI9ba9qgGJi6Yc+aKJ3snwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECGt58JnhNfP9LA+5t5TS2e/QegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wNTJm ZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdmMzVjMTczNTAvOWNkNTU4MGYtNTg1Ny0z N2RlLWIzYzgtMzUzZDBlOWViOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDUyZmUxNDktMmM4OS00MzIyLWE5 MDEtM2E3ZjM1YzE3MzUwLzA1MmZlMTQ5LTJjODktNDMyMi1hOTAxLTNhN2YzNWMx NzM1MC5jcmwwHwYDVR0jBBgwFoAUUCCXEJate6kH2I1KnJA6bvBDuVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wNTJmZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdm MzVjMTczNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwAqn/mMKrOjDJnXzRpwuj3yGex/7caAWS9iyaET0f5Z65+1h7P3BoT oaG4q+ZuL9LY4BSopuoANsgpn20U1eiS0czx0vfwukGndRM19HJY1Robma8j6wMu uP4DMZ8BtNtu4PmI4HmE5PmWjCYdsy2FhIRC3U9A10+LPdeE27S7lwq5X4BOzR5o sXHaV8T+SBtBGt37nXJk8cwyhnL1BtjyOC3LAxFeBX8bxQ1fb8hnyJCbHpzezjs+ TUP8AqHw7qY9v9oHZHQXpAjMIhZttiN6PzjTWWRJN35R7HClKJA0LiSMczMq/jFM skhZjK4NoXCf0xwkV1W+ASBP96LcHBc= -----END CERTIFICATE-----Generated at Mon Apr 28 01:08:03 2025 by rpki-client