$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f408e666-d679-305e-ab55-c3c09f6ad3fd.roa File: f408e666-d679-305e-ab55-c3c09f6ad3fd.roa (raw, json) Hash identifier: eBApWGCGTuNYa9qpTU9t/Ae6ZFNqPnn/nGgLB4+VzoE= Subject key identifier: 32:C4:F2:B3:06:62:C5:42:46:86:7E:63:DC:77:41:A5:1A:E8:EA:DC Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584944694D3DF1BC895C18E2B640 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f408e666-d679-305e-ab55-c3c09f6ad3fd.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 4922 IP address blocks: 192.34.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4d:3d:f1:bc:89:5c:18:e2:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=f313854b-5ad3-4c29-bdb0-ca0ff704a1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:b2:c6:6d:9f:cb:a8:3f:63:be:d4:07:9b: 90:0f:19:11:8f:2f:66:df:e5:7f:c1:1e:39:e1:bc: e8:c0:9b:38:87:bb:9c:ab:b7:07:35:7a:e0:6e:d5: 5a:3f:69:1a:cf:31:86:c7:23:91:3f:b9:10:3b:5a: 29:66:f2:e9:44:4f:de:99:08:16:7f:13:df:85:eb: ae:96:6a:e5:59:f5:ec:e7:d0:be:7f:08:b1:64:aa: 1d:a5:7f:7d:f3:07:d2:3b:97:e5:30:04:cc:37:0a: df:96:e0:89:e0:37:57:4d:9f:a8:51:b4:a3:c2:cb: 26:74:0f:78:b9:af:b7:ab:20:0e:57:4f:2f:12:aa: 11:a0:b2:24:3a:fc:8f:6c:6e:ba:ee:3f:ef:dd:18: ae:3a:5d:57:96:d0:e2:45:76:e3:c1:db:d5:ba:02: df:b6:ae:72:7c:78:28:77:63:68:48:44:e2:1e:cd: 45:b7:5f:ea:32:c0:16:e5:87:f6:dd:5c:66:4b:f7: 8a:12:c1:88:a4:52:ae:ff:41:82:6c:b7:7d:cb:fb: 2e:80:3d:e4:0f:62:65:ec:d9:91:99:f4:2b:82:9f: fb:24:1c:64:7d:41:db:d7:52:1b:d1:e3:86:8d:ac: be:92:f4:2f:bb:b1:ef:14:c4:1f:5e:02:fe:b7:cc: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:F2:B3:06:62:C5:42:46:86:7E:63:DC:77:41:A5:1A:E8:EA:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f408e666-d679-305e-ab55-c3c09f6ad3fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 192.34.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:81:30:b4:07:98:f2:a9:11:be:ff:cf:76:a2:53:87:00:34: e8:8b:64:20:86:e8:36:f8:1a:13:e5:0e:89:0c:4c:a4:67:0e: 74:fb:40:a6:91:e7:1c:eb:5a:19:9e:16:d5:d4:06:d8:fb:37: 3e:10:09:46:94:53:52:78:19:b3:24:68:5d:67:8c:1a:6d:aa: 47:2e:27:b0:29:98:0d:a4:48:14:3e:1f:b0:33:6a:9d:54:44: 42:e4:75:b3:ae:02:21:a4:02:07:05:87:73:45:34:ea:23:98: 52:f8:64:a0:31:c7:53:ee:a3:68:b7:cf:20:23:45:93:86:ae: 1f:5d:03:9a:53:ed:af:86:ec:39:3d:67:ca:36:f9:84:60:dc: f7:f2:ca:21:4d:bf:a2:46:bc:cf:4b:55:87:5d:3d:07:e0:f3: 1e:eb:ee:3b:7e:e6:f7:4d:52:1c:80:3b:01:6e:4d:a1:f8:ec: 69:2e:3f:29:ef:33:1c:60:fd:c3:ef:d3:71:8b:e0:42:cd:bc: 10:5f:5f:94:2f:94:db:54:b0:d0:4f:5b:d7:c4:1f:46:91:b1: 9d:0b:c1:b6:58:b5:64:8c:50:06:85:87:6c:1e:71:bf:86:00: 49:2a:5c:e6:44:dc:45:40:9f:49:74:f8:fb:8b:19:b1:a9:80: 91:fb:00:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU098byJXBjitkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZjMxMzg1NGItNWFkMy00YzI5LWJkYjAtY2EwZmY3MDRhMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvqyxm2fy6g/Y77UB5uQDxkRjy9m3+V/wR45 4bzowJs4h7ucq7cHNXrgbtVaP2kazzGGxyORP7kQO1opZvLpRE/emQgWfxPfheuu lmrlWfXs59C+fwixZKodpX998wfSO5flMATMNwrfluCJ4DdXTZ+oUbSjwssmdA94 ua+3qyAOV08vEqoRoLIkOvyPbG667j/v3RiuOl1XltDiRXbjwdvVugLftq5yfHgo d2NoSETiHs1Ft1/qMsAW5Yf23VxmS/eKEsGIpFKu/0GCbLd9y/sugD3kD2Jl7NmR mfQrgp/7JBxkfUHb11Ib0eOGjay+kvQvu7HvFMQfXgL+t8xF+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLE8rMGYsVCRoZ+Y9x3QaUa6OrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZjQwOGU2NjYtZDY3OS0z MDVlLWFiNTUtYzNjMDlmNmFkM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqBMLQHmPKpEb7/z3aiU4cANOiLZCCG6Db4GhPlDokMTKRnDnT7QKaR 5xzrWhmeFtXUBtj7Nz4QCUaUU1J4GbMkaF1njBptqkcuJ7ApmA2kSBQ+H7Azap1U RELkdbOuAiGkAgcFh3NFNOojmFL4ZKAxx1Puo2i3zyAjRZOGrh9dA5pT7a+G7Dk9 Z8o2+YRg3PfyyiFNv6JGvM9LVYddPQfg8x7r7jt+5vdNUhyAOwFuTaH47GkuPynv Mxxg/cPv03GL4ELNvBBfX5QvlNtUsNBPW9fEH0aRsZ0LwbZYtWSMUAaFh2wecb+G AEkqXOZE3EVAn0l0+PuLGbGpgJH7AJo= -----END CERTIFICATE-----Generated at Mon Apr 28 08:28:11 2025 by rpki-client