$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa File: c112586d-f411-30a6-89bd-6a1bd803789b.roa (raw, json) Hash identifier: 0gaJYkYUBfg6FHmv+0b/C+JzxmacU6LyNeYF88qFBrc= Subject key identifier: A2:41:E1:67:11:48:23:F8:DA:A6:16:3A:B9:B3:16:9A:B5:81:D9:59 Certificate issuer: /CN=b5280624-435b-4568-8d14-dbdda87b17c2 Certificate serial: 010D0C9F432858491ED6EA2C744B33EFEE5C90C0 Authority key identifier: 40:2C:F4:EC:E7:9E:A5:3C:3C:FC:A5:1F:D7:C0:AD:A8:08:90:DA:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 396441 IP address blocks: 192.101.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ea:2c:74:4b:33:ef:ee:5c:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5280624-435b-4568-8d14-dbdda87b17c2 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=44142ee5-d0fc-4ee0-9415-e471428483fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:11:5a:a8:be:56:e2:82:ea:ec:36:02:30: a4:b1:96:8a:fc:07:70:39:eb:df:27:a9:c8:9b:b0: c3:92:ba:c5:ca:76:9e:a6:07:b6:7b:1a:61:a3:68: 98:16:5b:7e:4e:cf:da:6a:15:0d:a4:2d:83:d9:da: 32:e8:cb:bb:62:2d:7d:cd:1d:bb:30:da:90:2b:13: d9:dc:94:84:4c:0a:12:a6:b3:44:17:4f:4d:8d:59: c2:db:57:ee:73:af:5e:27:16:32:80:0a:06:cd:56: e5:a0:4b:d1:ef:24:02:e9:2a:ca:2d:91:f4:4e:0d: 08:77:06:a3:23:8e:cf:76:e8:13:48:09:4e:e3:42: 41:fa:f6:ed:0f:c7:bf:0a:20:ce:ed:a8:bf:31:e5: ce:93:7b:36:4e:85:86:1b:93:8d:f7:3c:9c:98:18: 29:80:c4:9d:a7:ac:46:c0:4e:ef:c2:9e:d9:94:c4: e3:0f:fa:2c:a5:af:10:0b:a8:9d:33:b9:3d:a9:dd: 3d:fe:07:12:cd:b9:0e:2f:8d:35:fe:1e:2a:ad:66: 55:8d:88:00:e9:ae:d8:a1:ce:a7:c5:50:ae:99:f3: 1f:49:37:a3:db:01:8e:38:2b:ae:97:35:b4:b6:f7: 27:82:59:04:7f:52:d5:2c:4e:78:a8:c3:6c:20:e3: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:41:E1:67:11:48:23:F8:DA:A6:16:3A:B9:B3:16:9A:B5:81:D9:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.crl X509v3 Authority Key Identifier: keyid:40:2C:F4:EC:E7:9E:A5:3C:3C:FC:A5:1F:D7:C0:AD:A8:08:90:DA:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer sbgp-ipAddrBlock: critical IPv4: 192.101.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:88:9b:c9:36:59:5d:82:65:20:50:ce:70:36:e8:67:1f:6f: a7:c2:73:56:58:ea:b4:e3:17:c3:f8:41:c0:e0:89:a0:ff:2e: 13:d3:04:aa:3c:55:ea:69:c0:bc:57:64:6d:f2:36:8f:f2:d1: 09:33:fc:99:e0:79:58:9a:6c:32:44:78:7c:9b:ec:bc:21:2c: 27:41:75:e1:d2:da:79:7f:9f:1e:79:2b:e8:96:f4:ab:a9:ef: e8:0b:2b:1e:ba:26:d6:00:fb:ed:b0:84:52:5e:d2:2c:ba:c2: 5b:ee:4c:1a:7f:d7:ed:1a:9f:0a:5d:e9:07:b2:8e:dc:8f:12: cf:c8:cd:70:c5:51:e9:9b:b0:e5:b2:ab:74:68:0a:d1:47:d9: 1b:b4:d6:e7:1a:a8:55:8f:59:d5:7e:04:f7:1e:5c:be:0c:a2: 1b:0e:10:ee:ac:ce:54:0b:a9:e6:65:fc:41:e8:bd:e9:14:65: b0:de:51:8e:5f:3f:f7:2d:50:b5:bd:38:ac:67:b3:22:c3:7f: 1a:e7:80:c1:2f:2a:e1:2a:46:2e:d6:b3:fc:0c:d3:e4:13:78: 4b:15:aa:73:ba:e7:fb:b7:00:d3:f5:39:10:2b:dc:78:a2:59: 55:fa:a3:a0:79:27:3a:72:7a:4c:23:4a:b3:13:8f:61:3d:ee: 8b:d6:b5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uosdEsz7+5ckMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyODA2MjQtNDM1Yi00NTY4LThkMTQtZGJkZGE4N2Ix N2MyMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NDQxNDJlZTUtZDBmYy00ZWUwLTk0MTUtZTQ3MTQyODQ4M2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2cRWqi+VuKC6uw2AjCksZaK/AdwOevfJ6nI m7DDkrrFynaepge2expho2iYFlt+Ts/aahUNpC2D2doy6Mu7Yi19zR27MNqQKxPZ 3JSETAoSprNEF09NjVnC21fuc69eJxYygAoGzVbloEvR7yQC6SrKLZH0Tg0Idwaj I47PdugTSAlO40JB+vbtD8e/CiDO7ai/MeXOk3s2ToWGG5ON9zycmBgpgMSdp6xG wE7vwp7ZlMTjD/ospa8QC6idM7k9qd09/gcSzbkOL401/h4qrWZVjYgA6a7Yoc6n xVCumfMfSTej2wGOOCuulzW0tvcnglkEf1LVLE54qMNsIOOWWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJB4WcRSCP42qYWOrmzFpq1gdlZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTI4 MDYyNC00MzViLTQ1NjgtOGQxNC1kYmRkYTg3YjE3YzIvYzExMjU4NmQtZjQxMS0z MGE2LTg5YmQtNmExYmQ4MDM3ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjUyODA2MjQtNDM1Yi00NTY4LThk MTQtZGJkZGE4N2IxN2MyL2I1MjgwNjI0LTQzNWItNDU2OC04ZDE0LWRiZGRhODdi MTdjMi5jcmwwHwYDVR0jBBgwFoAUQCz07OeepTw8/KUf18CtqAiQ2howDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTI4MDYyNC00MzViLTQ1NjgtOGQxNC1kYmRk YTg3YjE3YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByIm8k2WV2CZSBQznA26Gcfb6fCc1ZY6rTjF8P4QcDgiaD/LhPTBKo8 VeppwLxXZG3yNo/y0Qkz/JngeViabDJEeHyb7LwhLCdBdeHS2nl/nx55K+iW9Kup 7+gLKx66JtYA++2whFJe0iy6wlvuTBp/1+0anwpd6QeyjtyPEs/IzXDFUembsOWy q3RoCtFH2Ru01ucaqFWPWdV+BPceXL4MohsOEO6szlQLqeZl/EHovekUZbDeUY5f P/ctULW9OKxnsyLDfxrngMEvKuEqRi7Ws/wM0+QTeEsVqnO65/u3ANP1ORAr3Hii WVX6o6B5JzpyekwjSrMTj2E97ovWtVk= -----END CERTIFICATE-----Generated at Mon Apr 28 18:43:25 2025 by rpki-client