$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa File: 2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa (raw, json) Hash identifier: 0cCIREmkJ27lNYMNlwQKsk/6OKvhvKDlKuX4WlIaXmk= Subject key identifier: BE:37:66:DA:78:82:C3:90:15:21:B4:B7:6C:CA:DA:AD:D2:D5:33:70 Certificate issuer: /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Certificate serial: 010D0C9F43285848EF615AAAF64EDD73BBE56080 Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 192.58.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5a:aa:f6:4e:dd:73:bb:e5:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=bf8b5c60-0036-4bd1-a761-07f27f6601d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:ff:32:29:33:16:e7:96:1f:29:14:45:52: ba:8d:25:03:8b:6f:c6:fa:08:2f:0b:08:27:57:bb: d9:74:84:48:c3:7e:28:39:0f:f8:06:aa:b9:6a:f6: ac:51:ae:23:f9:c0:c4:8c:37:1c:72:b3:47:dd:75: 5b:67:c4:6d:db:22:79:bd:22:86:6c:7e:6d:40:d8: 04:0a:a7:8f:76:14:60:85:c4:ae:bd:e5:f9:65:3c: 3c:f0:28:a7:ac:83:b8:dc:1e:03:da:93:f4:29:c2: cd:20:89:78:bd:bb:e3:1d:bf:27:54:01:95:2c:2e: ac:ba:a8:2d:34:d0:55:48:46:96:09:c0:6c:1b:62: 8c:7d:9d:d8:52:c2:71:74:39:7c:16:8c:89:e5:55: 71:1e:57:33:da:00:3e:01:02:e0:11:bd:ff:e6:3c: cc:d4:9c:57:10:a6:83:62:f1:d4:48:86:f1:5e:f4: 17:eb:75:39:de:c9:f9:62:82:ed:18:00:5f:56:d3: 8d:83:55:ae:5b:67:ae:e2:b9:17:8c:bb:58:41:63: e7:da:4e:67:a3:b1:21:e0:82:fe:29:9b:61:25:96: 8b:7f:89:10:64:44:02:b4:59:14:4b:c5:24:01:62: 43:51:5f:32:28:0d:05:25:68:14:d9:85:6c:9a:ff: 15:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:37:66:DA:78:82:C3:90:15:21:B4:B7:6C:CA:DA:AD:D2:D5:33:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl X509v3 Authority Key Identifier: keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer sbgp-ipAddrBlock: critical IPv4: 192.58.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:65:75:5a:84:d2:33:ff:e7:c6:f2:9e:15:09:e9:09:51:b5: 54:42:1e:34:54:31:d8:a5:9d:c4:d8:b4:66:0d:cc:c0:2b:e3: 5d:ca:87:9d:ac:67:84:59:02:d6:2c:15:2c:b8:ee:d5:01:66: c4:ff:f6:87:64:16:2e:bd:7c:af:89:1a:b3:aa:fa:50:d5:20: fc:b7:e5:58:ed:e7:7c:97:87:ef:15:ff:62:6b:56:76:0a:d3: c6:c3:bc:e3:9a:70:7d:90:2a:dd:23:5e:de:76:9a:cb:5a:52: 7d:26:50:ac:df:86:79:b9:97:b0:55:9f:1f:c4:41:f7:1d:1c: da:a4:5c:35:41:1e:f1:7d:cc:f3:99:f3:f7:03:54:e5:35:7f: 8e:0e:ed:c1:d3:bb:86:c9:70:0c:ee:36:5c:d5:d1:02:26:ce: 1c:71:91:70:47:6a:dc:ae:3a:5c:0d:30:d8:88:79:cb:2b:b4: 48:fd:0f:ca:17:8e:5a:99:42:46:d7:ed:53:d1:79:40:d8:96: 5e:80:27:14:41:7d:fd:76:96:17:4c:63:f2:e5:8d:be:60:bd: f6:b9:8d:bc:19:0b:be:e4:0c:42:a6:a7:19:17:e2:1f:a4:e0: 1c:db:35:a7:7c:4f:90:f4:d8:25:69:35:1c:61:1e:35:65:25: a7:c9:5c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVqq9k7dc7vlYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmNjgwOWYtMGI0NS00N2Q1LWI3Y2MtN2Y4OTJkZGRh MGRjMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YmY4YjVjNjAtMDAzNi00YmQxLWE3NjEtMDdmMjdmNjYwMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+n/MikzFueWHykURVK6jSUDi2/G+ggvCwgn V7vZdIRIw34oOQ/4Bqq5avasUa4j+cDEjDcccrNH3XVbZ8Rt2yJ5vSKGbH5tQNgE CqePdhRghcSuveX5ZTw88CinrIO43B4D2pP0KcLNIIl4vbvjHb8nVAGVLC6suqgt NNBVSEaWCcBsG2KMfZ3YUsJxdDl8FoyJ5VVxHlcz2gA+AQLgEb3/5jzM1JxXEKaD YvHUSIbxXvQX63U53sn5YoLtGABfVtONg1WuW2eu4rkXjLtYQWPn2k5no7Eh4IL+ KZthJZaLf4kQZEQCtFkUS8UkAWJDUV8yKA0FJWgU2YVsmv8VwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL43Ztp4gsOQFSG0t2zK2q3S1TNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2 ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5MmRkZGEwZGMvMmFlNDBjOTUtNGNjNS0z M2E1LThhYTMtMDU0YzkyMGQ1YjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JmNjgwOWYtMGI0NS00N2Q1LWI3 Y2MtN2Y4OTJkZGRhMGRjL2NiZjY4MDlmLTBiNDUtNDdkNS1iN2NjLTdmODkyZGRk YTBkYy5jcmwwHwYDVR0jBBgwFoAUmwap4jKSLvGtTIQEPijY3xF1DZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5 MmRkZGEwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVldVqE0jP/58bynhUJ6QlRtVRCHjRUMdilncTYtGYNzMAr413Kh52s Z4RZAtYsFSy47tUBZsT/9odkFi69fK+JGrOq+lDVIPy35Vjt53yXh+8V/2JrVnYK 08bDvOOacH2QKt0jXt52mstaUn0mUKzfhnm5l7BVnx/EQfcdHNqkXDVBHvF9zPOZ 8/cDVOU1f44O7cHTu4bJcAzuNlzV0QImzhxxkXBHatyuOlwNMNiIecsrtEj9D8oX jlqZQkbX7VPReUDYll6AJxRBff12lhdMY/Lljb5gvfa5jbwZC77kDEKmpxkX4h+k 4BzbNad8T5D02CVpNRxhHjVlJafJXL4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:47 2025 by rpki-client