$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa File: 61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa (raw, json) Hash identifier: O6ExFKd/SZ/8SBULEYtWts8KBNKQsDU2ozDS21A0aRo= Subject key identifier: 52:54:A6:07:BE:2E:91:35:EA:76:87:70:C1:95:CF:64:AC:5E:E5:06 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F43285848EF615C081022E1B400E81380 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 30148 IP address blocks: 192.124.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5c:08:10:22:e1:b4:00:e8:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=98fe70d2-74d7-4653-945c-b142fc10598d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cb:d2:4b:d2:0f:3d:56:c7:10:c5:62:2b:7b: 17:49:fb:1b:62:e0:87:ec:16:0f:1f:3e:27:1f:ab: 4d:98:c8:67:34:b0:6e:2e:0d:16:ea:18:ba:8e:46: 91:f4:ef:6f:7b:ff:70:7a:80:10:4f:94:08:da:33: ff:22:1e:de:1a:68:fc:f5:62:98:ff:bf:81:43:df: d2:3d:16:4b:a8:76:79:0a:a8:f5:53:69:df:3a:35: d2:46:b3:8a:91:54:e6:7b:6e:37:be:18:f7:1c:c2: 2c:26:97:c3:1d:94:51:c4:eb:db:5c:6e:5d:fc:56: 0a:19:f8:e8:e6:11:23:5b:ba:5a:92:6f:42:6f:86: d8:f2:af:5e:7e:d2:f5:7b:d0:1d:5e:c2:b9:16:e0: 56:c2:a6:30:93:02:3e:7a:cf:82:e3:07:74:72:b6: 05:7c:29:27:06:f2:99:6a:84:78:0a:85:16:59:41: b7:ab:b4:25:f4:8f:d6:67:da:68:5e:da:29:dc:e7: 8d:87:97:2a:42:37:48:18:c8:bd:aa:6a:5e:1f:ab: 1e:fc:a8:04:f8:18:95:60:4e:0b:26:5f:29:78:e9: 54:7f:e8:c4:e7:d3:7b:36:16:f1:86:da:d7:69:79: 51:c7:77:5f:fd:4e:7e:ea:d5:0f:7b:be:30:2c:e1: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:54:A6:07:BE:2E:91:35:EA:76:87:70:C1:95:CF:64:AC:5E:E5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 192.124.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:90:77:c3:d9:1e:29:d4:4b:43:55:1b:97:72:0a:e7:47:5f: 09:ec:8e:be:50:31:6c:66:a4:bd:be:f6:28:8b:eb:74:0a:05: 05:f2:f6:a7:0f:63:da:04:6c:63:7d:3c:94:24:ce:f8:05:f8: 46:63:15:8a:4f:46:65:59:93:f1:52:5b:e7:e0:88:83:2c:8d: 29:f6:a5:4b:5d:3f:ed:31:1b:df:bb:7e:7e:39:08:a0:e4:53: ad:27:f2:15:49:9d:8b:5d:c7:aa:8b:f4:80:89:c8:de:73:ce: 40:ce:a7:33:0e:b1:40:52:24:e9:31:d0:fc:54:d5:1a:e0:bd: e6:bb:3e:03:c6:54:56:08:29:7a:89:9a:57:43:21:c7:47:3f: 27:e7:19:56:cc:bc:64:ed:3b:1f:01:f5:43:2a:b7:41:1c:24: 8b:22:83:e5:2e:54:c2:4c:b3:b8:8e:19:86:2e:93:d0:90:b9: ed:fb:cb:04:c9:8a:54:58:66:e4:fe:f2:da:f0:af:8d:5e:52: e9:74:03:04:24:e9:da:11:23:47:3f:4f:c3:f7:b8:30:24:fb: 8c:ec:e0:78:d9:43:3c:63:e2:a8:0c:d1:6d:31:34:e7:9d:59: 53:93:aa:0d:68:d1:f6:e9:f7:7b:2b:99:58:ea:2a:56:63:fd: 71:ac:36:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVwIECLhtADoE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OThmZTcwZDItNzRkNy00NjUzLTk0NWMtYjE0MmZjMTA1OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4svSS9IPPVbHEMViK3sXSfsbYuCH7BYPHz4n H6tNmMhnNLBuLg0W6hi6jkaR9O9ve/9weoAQT5QI2jP/Ih7eGmj89WKY/7+BQ9/S PRZLqHZ5Cqj1U2nfOjXSRrOKkVTme243vhj3HMIsJpfDHZRRxOvbXG5d/FYKGfjo 5hEjW7pakm9Cb4bY8q9eftL1e9AdXsK5FuBWwqYwkwI+es+C4wd0crYFfCknBvKZ aoR4CoUWWUG3q7Ql9I/WZ9poXtop3OeNh5cqQjdIGMi9qmpeH6se/KgE+BiVYE4L Jl8peOlUf+jE59N7NhbxhtrXaXlRx3df/U5+6tUPe74wLOGMIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJUpge+LpE16naHcMGVz2SsXuUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvNjE3NzEyOTctMWNiMy0z NjhiLWE0YjYtZjhjZGNkMGM2M2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHz5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOQd8PZHinUS0NVG5dyCudHXwnsjr5QMWxmpL2+9iiL63QKBQXy9qcP Y9oEbGN9PJQkzvgF+EZjFYpPRmVZk/FSW+fgiIMsjSn2pUtdP+0xG9+7fn45CKDk U60n8hVJnYtdx6qL9ICJyN5zzkDOpzMOsUBSJOkx0PxU1Rrgvea7PgPGVFYIKXqJ mldDIcdHPyfnGVbMvGTtOx8B9UMqt0EcJIsig+UuVMJMs7iOGYYuk9CQue37ywTJ ilRYZuT+8trwr41eUul0AwQk6doRI0c/T8P3uDAk+4zs4HjZQzxj4qgM0W0xNOed WVOTqg1o0fbp93srmVjqKlZj/XGsNkc= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:08 2025 by rpki-client