$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa File: 4733c78a-74b2-36ce-8265-e75f07c9798e.roa (raw, json) Hash identifier: kKvDmWdOCF9Z8dWiVefLkF2DombY5yqP78UIp/EyyIc= Subject key identifier: 99:A0:E7:2D:41:B8:0F:68:4E:F0:2E:E8:9B:6C:B0:87:D3:41:34:0C Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F43285848F65BD3BDEE0DF67FC3694280 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 192.175.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d3:bd:ee:0d:f6:7f:c3:69:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=23222904-f876-41f8-807d-b12ff7b85cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:64:78:b2:a6:d7:48:83:9e:70:16:ff:a1: a5:8f:c4:04:32:f7:20:15:3a:c8:05:b2:47:95:35: c0:c7:b6:3d:03:33:68:74:45:68:be:78:a2:5b:72: ed:3f:91:40:85:3a:d1:c1:f5:08:0e:e8:8d:2d:24: 6c:57:1b:18:d3:65:06:cb:6b:ee:3a:29:33:e2:17: 27:d5:51:48:b5:30:75:42:77:46:43:ab:40:5d:02: 67:7d:32:12:cd:41:11:85:f6:d8:b6:6e:02:13:16: 7d:c1:97:fa:b8:67:96:80:4e:b5:cd:94:aa:b2:06: be:ac:db:22:97:40:40:8b:a8:d6:c3:9a:a5:f4:22: 77:d4:d7:32:21:d5:38:8d:1d:74:85:38:df:17:8e: af:15:5a:eb:c4:aa:a6:f8:eb:f8:d9:04:52:16:22: 28:02:01:d8:d0:b9:c6:5f:79:6c:aa:a4:ed:1f:19: 26:c6:8e:7c:25:a3:37:f3:0e:5e:e5:91:19:df:f6: 05:71:53:b5:5d:0d:b0:f0:b0:02:c3:81:76:d9:e3: 32:21:fa:3d:1d:87:26:f9:0a:c1:98:18:3f:26:8c: 51:1f:66:6e:a0:6d:61:d5:aa:b1:55:76:36:ab:fe: 77:9e:63:fa:18:d3:f0:e0:db:10:1f:80:86:ce:88: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A0:E7:2D:41:B8:0F:68:4E:F0:2E:E8:9B:6C:B0:87:D3:41:34:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.175.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:e8:48:f0:3e:a7:61:e3:4e:2c:1e:7b:20:34:f2:1f:27:c9: ed:eb:e7:3b:00:cd:a4:d8:58:04:2c:7f:c8:52:29:b6:b4:ed: 6e:df:d0:e1:ca:1c:87:67:aa:4f:4d:95:9f:1b:7c:f4:94:19: a0:6e:72:7b:dd:aa:07:93:80:a6:0a:a2:a2:d9:ea:0f:73:47: 9c:33:10:7e:66:b6:b2:9d:9a:33:cd:ec:6e:b3:f9:0f:6a:4a: ca:42:64:f6:e3:fa:92:e2:05:72:71:e4:56:88:d9:b2:85:1a: 53:75:c8:90:dd:d0:b1:ef:c6:bd:79:0e:4f:22:48:12:fd:f6: ea:09:5a:e8:79:67:0b:d2:15:a2:e4:09:e7:7f:58:ca:7d:81: bd:0c:73:df:af:e4:6b:89:ba:94:fd:49:ff:db:e1:0c:af:29: b7:b8:13:2e:56:b5:38:c6:ee:ef:f8:9a:6a:07:68:07:ad:d6: cf:f9:96:79:ad:6b:15:89:06:1d:eb:cc:66:9b:3d:d7:7b:cb: 0d:6c:ef:fa:37:69:2f:17:32:be:93:01:3e:b2:66:e1:77:e8: 5d:24:10:e1:4d:f4:82:a3:e0:3a:15:e2:bc:5e:00:43:3f:37: 96:fb:c7:6c:58:a1:26:6e:25:eb:01:f7:10:25:69:eb:65:de: f0:33:93:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9O97g32f8NpQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MjMyMjI5MDQtZjg3Ni00MWY4LTgwN2QtYjEyZmY3Yjg1Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WdkeLKm10iDnnAW/6Glj8QEMvcgFTrIBbJH lTXAx7Y9AzNodEVovniiW3LtP5FAhTrRwfUIDuiNLSRsVxsY02UGy2vuOikz4hcn 1VFItTB1QndGQ6tAXQJnfTISzUERhfbYtm4CExZ9wZf6uGeWgE61zZSqsga+rNsi l0BAi6jWw5ql9CJ31NcyIdU4jR10hTjfF46vFVrrxKqm+Ov42QRSFiIoAgHY0LnG X3lsqqTtHxkmxo58JaM38w5e5ZEZ3/YFcVO1XQ2w8LACw4F22eMyIfo9HYcm+QrB mBg/JoxRH2ZuoG1h1aqxVXY2q/53nmP6GNPw4NsQH4CGzogw8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmg5y1BuA9oTvAu6JtssIfTQTQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNDczM2M3OGEtNzRiMi0z NmNlLTgyNjUtZTc1ZjA3Yzk3OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/oSPA+p2HjTiweeyA08h8nye3r5zsAzaTYWAQsf8hSKba07W7f0OHK HIdnqk9NlZ8bfPSUGaBucnvdqgeTgKYKoqLZ6g9zR5wzEH5mtrKdmjPN7G6z+Q9q SspCZPbj+pLiBXJx5FaI2bKFGlN1yJDd0LHvxr15Dk8iSBL99uoJWuh5ZwvSFaLk Ced/WMp9gb0Mc9+v5GuJupT9Sf/b4QyvKbe4Ey5WtTjG7u/4mmoHaAet1s/5lnmt axWJBh3rzGabPdd7yw1s7/o3aS8XMr6TAT6yZuF36F0kEOFN9IKj4DoV4rxeAEM/ N5b7x2xYoSZuJesB9xAlaetl3vAzkxQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:09 2025 by rpki-client