$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa File: 50e13e91-c133-394c-976b-9cabe9d2d09f.roa (raw, json) Hash identifier: Z9B6Ek/35ZOQMOoQpOtwr6nDjTy3HYANlVhmi62ekdg= Subject key identifier: 2A:E1:50:C8:E4:90:25:B0:75:2B:17:80:3D:B4:E5:BA:70:C5:16:83 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F432858498E648589CD736AC882DFE918 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 45 IP address blocks: 192.188.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:85:89:cd:73:6a:c8:82:df:e9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=10d2cbc6-006b-4294-af89-da02b6a2cdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c9:6d:9c:ae:f0:42:54:9a:1a:7b:70:db:b6: c7:e2:e9:ee:2f:07:1c:74:53:31:22:27:69:be:dd: 93:77:de:cc:c9:ff:ca:d0:4d:b2:1b:bd:c6:ff:92: aa:15:65:58:1a:00:e8:05:07:31:75:ff:b7:72:99: ca:84:fe:50:c2:10:92:76:84:ac:31:d0:5b:bb:b7: ff:51:ed:c5:a8:da:5a:bb:88:da:54:90:2b:b6:65: 6c:ff:c2:89:89:39:99:5f:41:1d:8c:70:eb:32:be: 71:e3:99:d6:d6:cc:e6:8b:87:fd:eb:31:b1:4b:53: e1:a9:83:2a:2d:63:83:6a:8e:e8:69:c4:30:45:c1: f3:ef:d9:4c:73:c1:d0:6d:06:6a:5d:12:ae:26:76: ab:fc:60:64:2f:48:27:46:d1:56:4c:1a:c5:c6:06: db:6c:e3:2a:d0:c0:bf:3b:80:75:dc:e6:db:16:22: 17:86:12:f5:be:ec:c1:36:a3:92:51:c1:bb:43:54: 1a:21:8c:7e:af:00:d1:7c:14:a9:8b:8e:d3:5c:43: 52:f2:86:d4:d6:6b:39:ea:58:0d:56:be:09:e1:c9: 1d:fc:6b:45:1e:b8:bd:d2:73:ad:6d:29:74:0c:36: ec:fe:02:20:43:4b:d2:f9:05:63:05:c7:63:38:92: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E1:50:C8:E4:90:25:B0:75:2B:17:80:3D:B4:E5:BA:70:C5:16:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d4:ef:c0:a2:f3:ad:7f:1a:19:ea:5d:9e:32:7e:8c:8c:00: 4c:77:8c:16:1e:55:78:0b:e4:28:30:fb:3b:17:95:fd:38:7c: e7:4c:db:31:cf:fe:91:70:d1:d0:dd:0d:5d:2f:46:50:a0:c6: f7:1f:71:37:8f:de:57:e9:d9:5c:5c:a7:15:3b:15:fe:ec:82: dd:15:95:5d:3d:4f:09:b1:87:b0:a0:c4:9c:5a:59:d0:37:8f: a1:b5:41:ea:ff:c5:1d:f9:31:b2:61:dc:a7:98:38:4f:1f:ac: e9:d1:2f:79:fe:cf:1c:75:96:d7:cf:d0:02:1b:88:ac:7e:32: b8:96:04:0a:8c:30:a6:84:9f:38:20:0f:c6:5c:8a:b4:0c:04: 6c:48:23:e1:08:d4:07:77:91:dd:c7:5d:61:64:d8:46:7e:bd: f9:f7:00:22:18:ff:8f:20:77:9d:1b:f5:93:6b:94:28:e6:f5: 99:de:1d:12:2d:40:70:af:d9:16:f8:d9:18:35:5c:69:88:73: 88:dd:2e:1e:f9:af:41:07:60:72:62:9c:ba:95:ef:cb:be:af: df:98:e9:bc:bd:53:4d:24:c2:d8:fb:fa:7b:a7:bb:e0:00:e5: 39:fe:6e:b9:74:3b:83:0d:92:c5:56:6e:da:57:15:ec:4f:2a: fc:a0:b8:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIWJzXNqyILf6RgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MTBkMmNiYzYtMDA2Yi00Mjk0LWFmODktZGEwMmI2YTJjZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMltnK7wQlSaGntw27bH4unuLwccdFMxIidp vt2Td97Myf/K0E2yG73G/5KqFWVYGgDoBQcxdf+3cpnKhP5QwhCSdoSsMdBbu7f/ Ue3FqNpau4jaVJArtmVs/8KJiTmZX0EdjHDrMr5x45nW1szmi4f96zGxS1PhqYMq LWODao7oacQwRcHz79lMc8HQbQZqXRKuJnar/GBkL0gnRtFWTBrFxgbbbOMq0MC/ O4B13ObbFiIXhhL1vuzBNqOSUcG7Q1QaIYx+rwDRfBSpi47TXENS8obU1ms56lgN Vr4J4ckd/GtFHri90nOtbSl0DDbs/gIgQ0vS+QVjBcdjOJJ4PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrhUMjkkCWwdSsXgD205bpwxRaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNTBlMTNlOTEtYzEzMy0z OTRjLTk3NmItOWNhYmU5ZDJkMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHU78Ci861/GhnqXZ4yfoyMAEx3jBYeVXgL5Cgw+zsXlf04fOdM2zHP /pFw0dDdDV0vRlCgxvcfcTeP3lfp2VxcpxU7Ff7sgt0VlV09Twmxh7CgxJxaWdA3 j6G1Qer/xR35MbJh3KeYOE8frOnRL3n+zxx1ltfP0AIbiKx+MriWBAqMMKaEnzgg D8ZcirQMBGxII+EI1Ad3kd3HXWFk2EZ+vfn3ACIY/48gd50b9ZNrlCjm9ZneHRIt QHCv2Rb42Rg1XGmIc4jdLh75r0EHYHJinLqV78u+r9+Y6by9U00kwtj7+nunu+AA 5Tn+brl0O4MNksVWbtpXFexPKvyguOo= -----END CERTIFICATE-----Generated at Sun Apr 27 13:19:09 2025 by rpki-client