$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4f360b59-09d4-30e1-8edd-94687ade48d8.roa File: 4f360b59-09d4-30e1-8edd-94687ade48d8.roa (raw, json) Hash identifier: KQNkYG2it289zvBmDnakLtrvaWgjJ+4o2CJyWScwJVI= Subject key identifier: C8:E9:4D:96:4D:6B:C6:D5:92:AF:77:0F:65:11:54:6D:27:4A:67:38 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F43285848F65BD9D5007D3BDDCA4B0D00 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4f360b59-09d4-30e1-8edd-94687ade48d8.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 192.175.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d9:d5:00:7d:3b:dd:ca:4b:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=1d463aed-b827-43e1-89e2-2711e75ad325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:0a:0a:e1:dc:e7:3b:32:c7:99:c6:ae:be: 15:50:2d:51:7b:16:6f:bb:5f:12:db:38:cf:db:5b: 02:f5:19:3e:8d:fc:b2:f1:05:01:7b:13:28:d5:79: 2a:ec:dc:7d:01:bb:11:ee:7c:47:ca:08:c6:83:f0: 19:b2:af:b7:f8:43:3f:fb:28:f8:bc:87:f3:7f:7a: f2:f8:c5:1a:e3:3f:ca:ee:4e:5d:8c:78:81:2c:14: 9e:2f:bd:0f:cb:66:ca:b3:6d:a6:7d:59:e0:18:9f: 69:d4:a2:3b:a2:ae:77:42:1e:14:5a:a7:f4:41:52: 72:4d:07:cc:18:8e:84:a2:34:41:2a:42:cb:af:aa: df:65:37:aa:83:4d:de:cc:aa:28:53:26:cb:7a:ca: 02:82:03:4b:d2:79:46:ee:fd:cf:25:a9:e2:d0:b6: 6f:d9:c9:95:b1:ab:2c:99:dd:ca:ed:cd:33:73:f2: 93:ee:52:d8:e0:4f:2c:94:7f:67:d5:f4:fc:6a:cd: 30:ca:b9:05:f3:d5:8f:09:c1:e6:35:71:bb:78:e2: f9:02:72:34:ba:09:69:4e:ce:94:78:23:43:c2:45: 33:12:e1:d8:c0:c1:c3:43:b7:2d:21:87:98:4b:54: e1:0b:6d:a1:8f:50:71:8e:7d:31:b0:2f:76:66:43: de:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:4D:96:4D:6B:C6:D5:92:AF:77:0F:65:11:54:6D:27:4A:67:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4f360b59-09d4-30e1-8edd-94687ade48d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.175.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b3:e8:e4:04:10:44:6a:80:be:dd:90:c7:cf:6a:c6:29:d9: 0b:1a:c7:eb:c5:ba:7e:97:3e:44:a2:46:50:b8:8b:f4:2b:b8: 17:23:ed:4f:17:83:09:fe:1c:2b:ee:41:ab:21:01:a2:d4:2e: f3:b9:9c:7b:cd:47:74:df:ae:e6:9f:86:90:58:25:ff:6b:be: 91:64:37:f4:ef:1f:7c:7e:9b:6f:63:b4:c6:c9:ac:06:88:7e: 9f:5b:8d:5d:74:fd:93:33:2f:51:74:c1:88:09:a0:f2:b8:7c: 7d:7c:c9:34:af:12:da:92:2a:3e:a0:90:f5:8f:32:68:46:17: 67:24:77:e0:d8:01:d5:b1:b5:d4:57:a4:f8:53:98:2c:98:e0: bf:c6:e0:38:5b:c2:2b:9e:09:df:cd:56:62:42:bf:c7:db:7f: e2:99:bd:3e:6f:29:d9:d9:1c:ab:69:43:b8:5b:06:bd:c3:14: f8:7d:9f:16:f2:18:22:a7:53:b0:5b:8c:b2:0d:1b:59:a2:94: 49:37:ff:b0:f9:33:c3:a1:c1:c2:3d:f6:bc:80:4d:71:29:a3: d4:90:94:d8:f8:d1:7e:60:67:50:9c:64:f3:12:8d:00:4b:ec: 77:f1:92:de:c6:b0:cd:28:e3:56:ee:4e:d2:9e:0b:5a:70:33: 05:31:14:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9nVAH073cpLDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MWQ0NjNhZWQtYjgyNy00M2UxLTg5ZTItMjcxMWU3NWFkMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdoKCuHc5zsyx5nGrr4VUC1RexZvu18S2zjP 21sC9Rk+jfyy8QUBexMo1Xkq7Nx9AbsR7nxHygjGg/AZsq+3+EM/+yj4vIfzf3ry +MUa4z/K7k5djHiBLBSeL70Py2bKs22mfVngGJ9p1KI7oq53Qh4UWqf0QVJyTQfM GI6EojRBKkLLr6rfZTeqg03ezKooUybLesoCggNL0nlG7v3PJani0LZv2cmVsass md3K7c0zc/KT7lLY4E8slH9n1fT8as0wyrkF89WPCcHmNXG7eOL5AnI0uglpTs6U eCNDwkUzEuHYwMHDQ7ctIYeYS1ThC22hj1Bxjn0xsC92ZkPeTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjpTZZNa8bVkq93D2URVG0nSmc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNGYzNjBiNTktMDlkNC0z MGUxLThlZGQtOTQ2ODdhZGU0OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2z6OQEEERqgL7dkMfPasYp2Qsax+vFun6XPkSiRlC4i/QruBcj7U8X gwn+HCvuQashAaLULvO5nHvNR3TfruafhpBYJf9rvpFkN/TvH3x+m29jtMbJrAaI fp9bjV10/ZMzL1F0wYgJoPK4fH18yTSvEtqSKj6gkPWPMmhGF2ckd+DYAdWxtdRX pPhTmCyY4L/G4DhbwiueCd/NVmJCv8fbf+KZvT5vKdnZHKtpQ7hbBr3DFPh9nxby GCKnU7BbjLING1milEk3/7D5M8OhwcI99ryATXEpo9SQlNj40X5gZ1CcZPMSjQBL 7Hfxkt7GsM0o41buTtKeC1pwMwUxFMw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:17 2025 by rpki-client