$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/2e9abda3-50da-3927-96d7-361941addf54.roa File: 2e9abda3-50da-3927-96d7-361941addf54.roa (raw, json) Hash identifier: irr3zZLww7YTUSHVg7SwXCVDXxXNpOTY+KgdG5eHtj8= Subject key identifier: 1D:ED:E7:F0:3F:E6:43:F1:A0:51:D7:94:47:BB:A5:C8:44:5E:E5:86 Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945 Certificate serial: 010D0C9F43285849A04D3F2FF9F026C0FCC60B40 Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/2e9abda3-50da-3927-96d7-361941addf54.roa Signing time: Wed 23 Apr 2025 22:58:48 +0000 ROA not before: Wed 23 Apr 2025 22:58:48 +0000 ROA not after: Tue 22 Jul 2025 22:58:48 +0000 asID: 16589 IP address blocks: 192.101.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:4d:3f:2f:f9:f0:26:c0:fc:c6:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03866eb-6362-4657-aa66-83307258d945 Validity Not Before: Apr 23 22:58:48 2025 GMT Not After : Jul 22 22:58:48 2025 GMT Subject: CN=395a0430-95ca-4554-bd23-b71df976bf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:da:6f:72:f2:72:1f:65:8e:03:e3:56:df: 54:85:09:14:33:8e:df:cf:75:77:11:52:a0:9e:f6: 47:3f:eb:0d:74:46:a2:c1:7e:d2:9c:9d:bf:37:b7: 29:a3:c4:9f:44:42:50:81:50:20:4d:37:1e:33:ba: f2:13:0d:dc:da:71:6a:4f:ac:3c:95:db:2f:44:0f: 17:3b:b6:63:2c:d6:88:3b:4c:cb:ab:d5:f5:c7:ae: b2:b1:eb:db:db:e8:de:62:f4:39:81:81:98:ba:80: 58:ae:4e:50:5a:1f:d6:e4:98:36:89:30:c8:ed:70: 27:14:80:ed:c9:89:4d:81:d6:6a:25:3e:e3:32:f0: e6:e7:ba:31:36:f8:24:6f:75:54:ff:aa:80:24:74: 21:f2:a0:7f:66:a3:15:25:35:82:de:6d:98:8a:40: df:d6:ba:7d:bb:73:37:70:ae:5b:03:17:30:6a:6b: 50:bf:b5:ed:88:87:94:49:45:a9:79:6f:d3:d3:8b: 41:81:c1:b1:e9:21:e1:9d:56:e1:8d:8b:a7:e0:4d: 8e:44:0f:3a:04:dd:eb:6d:82:98:97:49:1e:7b:25: e5:48:71:ad:79:fc:39:45:e6:ea:02:36:43:e3:b7: d7:16:53:18:46:bf:9d:9c:c1:2f:75:4a:08:ac:85: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:ED:E7:F0:3F:E6:43:F1:A0:51:D7:94:47:BB:A5:C8:44:5E:E5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/2e9abda3-50da-3927-96d7-361941addf54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl X509v3 Authority Key Identifier: keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer sbgp-ipAddrBlock: critical IPv4: 192.101.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fb:8a:bf:f3:6e:15:a6:fb:bd:44:01:3b:06:28:8c:12:8f: 3d:a9:80:43:ed:51:b2:a2:2f:d0:7a:ed:33:00:7d:0d:0c:00: 2a:98:20:67:b7:98:53:f1:91:66:64:94:17:3d:1f:2c:7d:59: 6e:fa:4c:ca:9f:27:26:78:37:fe:78:d2:89:28:af:2f:76:c7: 20:87:30:c3:7b:4d:47:1e:17:f7:7f:2a:fe:44:d1:2b:37:c5: e7:d5:5c:f8:7f:da:bf:30:df:43:47:3b:38:fe:ca:5b:57:52: ed:6a:e7:46:07:13:c7:cb:38:05:6b:2b:cb:ff:0e:fc:48:89: 72:60:13:75:82:39:11:d6:fe:d0:ef:aa:41:7c:0f:5f:52:be: 14:ff:a9:5c:12:e7:d4:06:69:17:51:e9:c5:d1:2b:8e:10:fc: 6a:b2:5c:32:f9:87:82:0f:eb:f3:98:7b:1f:83:9b:50:f5:92: 94:84:8b:fe:42:41:03:74:c5:2c:25:de:c4:db:8b:b6:65:c4: d0:7b:e3:8b:14:6b:a7:aa:e9:a9:8e:a8:a0:63:de:85:14:95: 5c:cd:39:45:53:62:78:4f:05:f0:78:81:b0:9d:b3:d2:b5:6a: d9:c9:13:e2:40:df:ba:6e:5b:bb:0e:e4:36:16:fa:4b:69:7a: f2:ef:dd:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgTT8v+fAmwPzGC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk OTQ1MB4XDTI1MDQyMzIyNTg0OFoXDTI1MDcyMjIyNTg0OFowLzEtMCsGA1UEAxMk Mzk1YTA0MzAtOTVjYS00NTU0LWJkMjMtYjcxZGY5NzZiZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/3ab3Lych9ljgPjVt9UhQkUM47fz3V3EVKg nvZHP+sNdEaiwX7SnJ2/N7cpo8SfREJQgVAgTTceM7ryEw3c2nFqT6w8ldsvRA8X O7ZjLNaIO0zLq9X1x66ysevb2+jeYvQ5gYGYuoBYrk5QWh/W5Jg2iTDI7XAnFIDt yYlNgdZqJT7jMvDm57oxNvgkb3VU/6qAJHQh8qB/ZqMVJTWC3m2YikDf1rp9u3M3 cK5bAxcwamtQv7XtiIeUSUWpeW/T04tBgcGx6SHhnVbhjYun4E2ORA86BN3rbYKY l0keeyXlSHGtefw5RebqAjZD47fXFlMYRr+dnMEvdUoIrIUY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3t5/A/5kPxoFHXlEe7pchEXuWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4 NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvMmU5YWJkYTMtNTBkYS0z OTI3LTk2ZDctMzYxOTQxYWRkZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4 ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG37ir/zbhWm+71EATsGKIwSjz2pgEPtUbKiL9B67TMAfQ0MACqYIGe3 mFPxkWZklBc9Hyx9WW76TMqfJyZ4N/540okory92xyCHMMN7TUceF/d/Kv5E0Ss3 xefVXPh/2r8w30NHOzj+yltXUu1q50YHE8fLOAVrK8v/DvxIiXJgE3WCORHW/tDv qkF8D19SvhT/qVwS59QGaRdR6cXRK44Q/GqyXDL5h4IP6/OYex+Dm1D1kpSEi/5C QQN0xSwl3sTbi7ZlxNB744sUa6eq6amOqKBj3oUUlVzNOUVTYnhPBfB4gbCds9K1 atnJE+JA37puW7sO5DYW+ktpevLv3WI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:29:04 2025 by rpki-client