$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa File: afcd93bd-2515-3100-bccc-fb4b5902b55e.roa (raw, json) Hash identifier: kInOBQBFZTdAZa8P1184SFI644CmZTXayA40OQMHMsc= Subject key identifier: C4:D9:70:7B:85:01:87:72:F7:5E:CE:44:AC:AF:81:E6:9C:E4:E0:5F Certificate issuer: /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de Certificate serial: 010D0C9F432858494CC948C6CDA66C7D58D876C0 Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 271 IP address blocks: 192.197.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:48:c6:cd:a6:6c:7d:58:d8:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=6dfb4252-4674-4f91-bede-69de0a6ca68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:53:3a:3a:17:7b:b9:b0:01:a6:62:4e:ec: 64:bd:d3:73:8f:7e:82:c3:68:3d:76:c9:ef:66:1c: e6:e5:02:92:ae:ce:32:e8:86:9c:e1:78:c7:42:ef: 4f:a4:ae:57:6c:b7:04:fd:9f:0f:36:b3:c3:c6:6c: ef:4a:87:d6:ee:16:14:9f:81:4e:ea:8e:e0:1d:33: 5e:0f:84:72:55:d7:60:b0:09:71:a7:0b:be:d2:f3: a4:52:92:84:6d:8d:87:06:20:d9:56:3a:93:2b:e6: 98:28:8b:2b:bb:4d:6c:bf:5b:cd:c8:bb:af:51:6f: 9c:dd:11:7c:4f:08:4d:5e:6e:88:51:5b:0f:33:d8: a5:0b:7a:6c:91:b8:d9:3d:89:8d:7c:b2:0f:04:d0: 95:59:6d:dd:7f:46:34:95:68:90:d3:a4:39:70:af: 2b:e7:78:64:65:25:f6:1d:a0:4d:8b:48:3f:2b:7a: 6f:39:a9:ac:17:84:17:10:6b:5f:71:c0:2a:a7:e1: ff:b0:3a:2b:f6:40:ed:b8:47:9a:6a:0b:31:44:fa: 6c:81:39:8a:a2:f3:0c:fc:9b:03:53:b7:cb:3f:fd: 2d:94:d0:9c:71:c5:f5:35:50:d7:a6:ed:3e:be:1e: 59:33:40:cf:dc:8a:3e:ac:4b:6d:28:50:3c:a1:ad: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D9:70:7B:85:01:87:72:F7:5E:CE:44:AC:AF:81:E6:9C:E4:E0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl X509v3 Authority Key Identifier: keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer sbgp-ipAddrBlock: critical IPv4: 192.197.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d7:b8:c2:3c:19:f9:40:3f:44:86:b7:da:b4:f6:49:5a:3b: 99:e2:ab:97:34:b5:71:02:53:c8:b1:0c:a8:da:b3:d9:12:3e: 7d:d9:c3:3d:7e:28:a8:14:9c:0a:c4:c2:3a:2a:6b:4e:f0:28: f7:b8:23:e8:a4:be:05:2d:98:09:d0:00:9b:e2:ba:c9:51:98: f3:54:c2:45:86:76:c5:85:37:eb:d4:78:4d:d5:43:2f:19:eb: 2a:1b:f0:41:69:a7:5b:05:f3:63:23:87:65:bb:8c:74:d0:e7: 3a:7c:69:a1:68:3a:71:8a:2a:40:18:8f:ea:85:25:d1:23:f7: e9:1d:b1:e9:04:9e:b1:71:b0:40:17:2d:b2:24:c3:43:db:9f: b2:9e:9e:6a:00:f6:1a:d6:75:6d:80:e9:11:f0:fc:0e:06:06: 3f:aa:3d:fe:f3:65:ac:fa:6d:12:4e:f1:d6:19:87:3d:f2:6a: 2e:d6:1c:3b:3c:10:2f:61:ef:0c:2f:05:97:d4:f0:65:e1:f3: c9:67:a3:66:54:5f:04:3b:01:e9:a5:40:dc:81:a9:f2:fd:02: 49:45:50:54:8b:68:61:b0:a2:d2:34:55:de:87:06:35:87:a1: dc:de:42:34:de:80:87:b2:6b:26:f2:5b:a9:cf:41:b2:55:33: c7:96:b5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUjGzaZsfVjYdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzkxZmVlMWMtMWIxZi00NDhjLTg5MzctOWEzMTVlYjhl OWRlMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NmRmYjQyNTItNDY3NC00ZjkxLWJlZGUtNjlkZTBhNmNhNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTdTOjoXe7mwAaZiTuxkvdNzj36Cw2g9dsnv Zhzm5QKSrs4y6Iac4XjHQu9PpK5XbLcE/Z8PNrPDxmzvSofW7hYUn4FO6o7gHTNe D4RyVddgsAlxpwu+0vOkUpKEbY2HBiDZVjqTK+aYKIsru01sv1vNyLuvUW+c3RF8 TwhNXm6IUVsPM9ilC3pskbjZPYmNfLIPBNCVWW3df0Y0lWiQ06Q5cK8r53hkZSX2 HaBNi0g/K3pvOamsF4QXEGtfccAqp+H/sDor9kDtuEeaagsxRPpsgTmKovMM/JsD U7fLP/0tlNCcccX1NVDXpu0+vh5ZM0DP3Io+rEttKFA8oa04MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTZcHuFAYdy917ORKyvgeac5OBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFm ZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWViOGU5ZGUvYWZjZDkzYmQtMjUxNS0z MTAwLWJjY2MtZmI0YjU5MDJiNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzkxZmVlMWMtMWIxZi00NDhjLTg5 MzctOWEzMTVlYjhlOWRlLzc5MWZlZTFjLTFiMWYtNDQ4Yy04OTM3LTlhMzE1ZWI4 ZTlkZS5jcmwwHwYDVR0jBBgwFoAUuk8rbivo6d4SGuS/YzB/Y8OgO9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMx NWViOGU5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMXiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjXuMI8GflAP0SGt9q09klaO5niq5c0tXECU8ixDKjas9kSPn3Zwz1+ KKgUnArEwjoqa07wKPe4I+ikvgUtmAnQAJviuslRmPNUwkWGdsWFN+vUeE3VQy8Z 6yob8EFpp1sF82Mjh2W7jHTQ5zp8aaFoOnGKKkAYj+qFJdEj9+kdsekEnrFxsEAX LbIkw0Pbn7KenmoA9hrWdW2A6RHw/A4GBj+qPf7zZaz6bRJO8dYZhz3yai7WHDs8 EC9h7wwvBZfU8GXh88lno2ZUXwQ7AemlQNyBqfL9AklFUFSLaGGwotI0Vd6HBjWH odzeQjTegIeyaybyW6nPQbJVM8eWtSA= -----END CERTIFICATE-----Generated at Mon Apr 28 09:25:07 2025 by rpki-client