$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa File: 52f23f50-50ed-3124-8040-864858a28df3.roa (raw, json) Hash identifier: GUcojWqEKyFlIPfGJL2OGMvM96y6Fhfk3LikklQzYrU= Subject key identifier: A2:3D:B3:DE:A0:6B:A1:F7:F5:39:4A:83:68:68:3F:EE:A3:55:68:A0 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F43285848EF61539374560FAFD456D180 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.190.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:53:93:74:56:0f:af:d4:56:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=917d2161-5820-4f1c-a5c6-70b65299ed36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:5c:6e:5e:c5:15:fe:30:e2:53:f5:f7:ba: 6a:e9:fb:d1:6f:0c:f6:8f:c1:82:be:c7:a4:b8:b1: 00:ad:36:fc:96:03:7d:3b:ba:b5:05:bc:ba:e8:1a: 65:02:0b:fd:2f:90:6a:1d:ff:ba:b5:de:24:b1:0b: dc:15:a6:9d:73:40:36:90:bd:5b:56:38:75:b3:57: f1:cc:22:15:70:a9:56:b0:14:92:d5:e7:53:62:83: a6:30:84:4e:78:5f:0f:91:5b:dc:af:ee:03:9b:79: 33:64:10:9f:8d:38:63:16:2e:e4:2e:99:3e:a4:b0: c0:8a:84:d6:e5:2d:af:d0:d3:33:ec:9b:e5:e7:66: 4b:f6:f3:c2:e0:ff:16:f8:50:4c:cd:2f:4e:6a:d5: 64:ad:97:52:58:d3:e9:ad:6d:67:fa:4e:fb:9e:78: 3f:b9:bc:f2:07:2e:5f:2d:b6:5a:35:84:94:b2:e7: 6e:b4:98:ba:b4:60:e1:dd:22:5c:38:6c:0b:97:72: 95:d2:61:ae:96:25:fe:5f:12:41:12:4c:46:57:3d: 0e:5e:e9:36:42:09:04:4d:aa:d6:6b:bc:7f:96:fd: 4b:34:ec:f0:a5:bc:49:df:ab:19:2e:01:53:fc:1e: 39:95:6f:e2:a8:6e:7e:9e:66:41:4c:7c:a6:3b:8a: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3D:B3:DE:A0:6B:A1:F7:F5:39:4A:83:68:68:3F:EE:A3:55:68:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f6:de:2b:37:be:5d:8b:03:d5:ff:6c:27:a7:ce:5e:c8:f4: 7b:77:a0:56:8d:16:8d:46:65:a1:e8:c1:2e:e2:75:02:6b:bb: b7:04:64:b9:e2:2f:2c:bc:c8:ee:ba:4a:a7:22:65:43:0d:16: fe:70:bb:8f:0f:9a:70:db:a8:34:dc:43:44:e4:68:c8:0f:2d: e8:2d:f1:13:51:fc:99:df:5e:52:68:2f:1a:8b:82:c8:60:9b: 56:27:6a:29:5a:34:17:e1:49:f2:90:83:aa:3e:0e:cf:af:62: dc:5f:04:83:7f:35:9b:1f:01:20:fc:b5:36:93:87:27:74:78: 98:2c:c0:b0:fe:a5:71:e9:0e:31:44:7c:0b:9e:84:c2:92:25: a0:4b:71:43:49:97:b3:6e:28:14:87:55:6b:2d:e0:f0:8b:87: 58:13:1d:10:94:0d:99:38:f5:f4:82:24:2b:5d:9f:1c:af:d7: 1e:7a:a1:a4:30:d4:57:ac:bb:56:a1:b3:7e:b4:8b:80:84:a5: ab:83:b0:87:2d:84:1f:99:38:ce:12:2b:ce:f7:36:5f:27:ed: 28:e6:53:5c:13:21:c7:24:c3:c9:7a:8e:65:42:41:40:e0:42: 39:9a:2e:c2:28:41:34:11:f6:20:48:f2:b5:59:86:61:37:1c: c5:27:de:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVOTdFYPr9RW0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OTE3ZDIxNjEtNTgyMC00ZjFjLWE1YzYtNzBiNjUyOTllZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszFcbl7FFf4w4lP197pq6fvRbwz2j8GCvsek uLEArTb8lgN9O7q1Bby66BplAgv9L5BqHf+6td4ksQvcFaadc0A2kL1bVjh1s1fx zCIVcKlWsBSS1edTYoOmMIROeF8PkVvcr+4Dm3kzZBCfjThjFi7kLpk+pLDAioTW 5S2v0NMz7Jvl52ZL9vPC4P8W+FBMzS9OatVkrZdSWNPprW1n+k77nng/ubzyBy5f LbZaNYSUsudutJi6tGDh3SJcOGwLl3KV0mGuliX+XxJBEkxGVz0OXuk2QgkETarW a7x/lv1LNOzwpbxJ36sZLgFT/B45lW/iqG5+nmZBTHymO4pm5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI9s96ga6H39TlKg2hoP+6jVWigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNTJmMjNmNTAtNTBlZC0z MTI0LTgwNDAtODY0ODU4YTI4ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD23is3vl2LA9X/bCenzl7I9Ht3oFaNFo1GZaHowS7idQJru7cEZLni Lyy8yO66SqciZUMNFv5wu48PmnDbqDTcQ0TkaMgPLegt8RNR/JnfXlJoLxqLgshg m1YnailaNBfhSfKQg6o+Ds+vYtxfBIN/NZsfASD8tTaThyd0eJgswLD+pXHpDjFE fAuehMKSJaBLcUNJl7NuKBSHVWst4PCLh1gTHRCUDZk49fSCJCtdnxyv1x56oaQw 1Fesu1ahs360i4CEpauDsIcthB+ZOM4SK873Nl8n7SjmU1wTIcckw8l6jmVCQUDg QjmaLsIoQTQR9iBI8rVZhmE3HMUn3lM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:19 2025 by rpki-client