$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3413744-9e4f-3fc1-a6a5-d87cddee7cee.roa File: d3413744-9e4f-3fc1-a6a5-d87cddee7cee.roa (raw, json) Hash identifier: 78kkAhyJulqbFnBpJ3krIXYaJ+csazTg0sUsLSawRdM= Subject key identifier: E5:70:F0:56:40:8D:75:34:0E:C2:5F:55:8B:1B:88:17:6B:C0:7D:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB5A17F9116C1296EB8680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3413744-9e4f-3fc1-a6a5-d87cddee7cee.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 192.158.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5a:17:f9:11:6c:12:96:eb:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2f2137f2-a11d-496b-9ce6-b36fdbc6ca28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9b:24:48:45:91:e1:81:48:e0:e7:94:a3:81: 92:68:ab:99:e1:d1:91:79:c8:e3:78:dc:4e:b2:44: 88:75:b6:b4:8d:bf:9b:a3:74:03:8b:73:d2:68:03: d6:0b:e3:dc:2a:c2:30:8f:55:d4:d1:ed:d3:47:dc: 0b:22:5b:bc:30:01:aa:30:59:6b:eb:6f:3d:1a:20: c9:0a:cd:b2:eb:80:f5:b9:fd:f0:86:7c:e3:16:a9: b4:a3:83:da:6e:3a:13:55:2c:2a:5b:35:7c:97:84: 41:df:eb:16:0b:3c:94:b8:3d:5e:b0:a6:52:51:2e: fd:dd:35:0d:29:27:21:18:89:20:7f:77:5d:e1:09: 43:d4:65:f4:cd:a8:64:00:61:e3:00:a6:51:f6:04: 11:bf:d6:2a:d7:fe:d8:39:3a:9b:e8:6c:7a:46:c6: 98:84:ba:1b:24:95:16:97:76:24:80:bf:a0:59:32: 8b:41:24:bf:5a:1a:5e:f3:5a:35:29:7d:05:c7:f2: 78:fa:c1:ce:9f:44:ce:79:9c:f1:5c:b9:2f:63:eb: cf:e2:3e:52:2a:6b:39:8a:5a:86:5c:33:44:2a:04: 69:68:b5:a0:25:e4:88:a5:93:2e:a0:17:3c:22:72: 9a:97:fc:50:ed:15:9e:ce:fa:dd:ea:1f:0d:0e:f4: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:70:F0:56:40:8D:75:34:0E:C2:5F:55:8B:1B:88:17:6B:C0:7D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3413744-9e4f-3fc1-a6a5-d87cddee7cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 192.158.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:35:fa:2e:50:c5:8c:9f:af:87:9a:c2:54:ec:f4:06:da:1d: e6:9a:86:8b:f7:5e:01:c7:73:65:d2:a5:db:2e:f6:3f:f6:07: 68:97:ff:7a:a6:a6:62:83:83:06:b3:06:07:0d:12:bc:42:1f: c2:48:e8:fe:32:db:d3:e1:7f:61:fa:3f:32:5b:11:48:99:27: c9:62:a4:25:ea:c9:31:ad:e0:ab:83:23:5f:fc:5f:9e:96:f0: 3e:cb:da:82:88:25:d7:97:b4:1b:b6:b8:a9:9b:ca:94:19:e6: ad:53:d6:92:83:0d:1d:1f:9f:d5:21:2a:5e:72:8f:8d:73:0a: fc:7b:cf:a1:37:c1:90:c3:c8:bd:42:8c:90:89:54:52:8d:e3: 8c:26:9d:dc:2e:6f:46:da:cc:7e:6a:d9:04:11:f3:24:5e:84: dc:ed:0e:81:49:d6:18:8a:ad:1a:52:b0:37:c3:0b:8f:97:1b: e5:9e:bd:7a:77:a5:aa:37:82:2e:29:92:53:a0:50:81:16:69: 84:50:ef:c3:80:e0:44:09:ea:cb:2b:53:52:08:6c:0a:f5:47: 96:af:1e:e6:e7:0a:88:5b:fa:73:42:ca:1d:4e:d6:71:4b:20: fb:8f:da:26:22:aa:bd:aa:08:0a:d5:31:b4:e1:f2:2b:19:a0: 10:8c:b2:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1oX+RFsEpbrhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmYyMTM3ZjItYTExZC00OTZiLTljZTYtYjM2ZmRiYzZjYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5skSEWR4YFI4OeUo4GSaKuZ4dGRecjjeNxO skSIdba0jb+bo3QDi3PSaAPWC+PcKsIwj1XU0e3TR9wLIlu8MAGqMFlr6289GiDJ Cs2y64D1uf3whnzjFqm0o4PabjoTVSwqWzV8l4RB3+sWCzyUuD1esKZSUS793TUN KSchGIkgf3dd4QlD1GX0zahkAGHjAKZR9gQRv9Yq1/7YOTqb6Gx6RsaYhLobJJUW l3YkgL+gWTKLQSS/Whpe81o1KX0Fx/J4+sHOn0TOeZzxXLkvY+vP4j5SKms5ilqG XDNEKgRpaLWgJeSIpZMuoBc8InKal/xQ7RWezvrd6h8NDvSxkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVw8FZAjXU0DsJfVYsbiBdrwH1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM0MTM3NDQtOWU0Zi0z ZmMxLWE2YTUtZDg3Y2RkZWU3Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU1+i5QxYyfr4eawlTs9AbaHeaahov3XgHHc2XSpdsu9j/2B2iX/3qm pmKDgwazBgcNErxCH8JI6P4y29Phf2H6PzJbEUiZJ8lipCXqyTGt4KuDI1/8X56W 8D7L2oKIJdeXtBu2uKmbypQZ5q1T1pKDDR0fn9UhKl5yj41zCvx7z6E3wZDDyL1C jJCJVFKN44wmndwub0bazH5q2QQR8yRehNztDoFJ1hiKrRpSsDfDC4+XG+WevXp3 pao3gi4pklOgUIEWaYRQ78OA4EQJ6ssrU1IIbAr1R5avHubnCohb+nNCyh1O1nFL IPuP2iYiqr2qCArVMbTh8isZoBCMsk0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:17 2025 by rpki-client