$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/67812d0d-1933-37be-a9ba-934c1e9dd884.roa File: 67812d0d-1933-37be-a9ba-934c1e9dd884.roa (raw, json) Hash identifier: 67mgYuT3Kz7+hY2FVA1QDvZXLsUetdBIqLXvF9VvX4M= Subject key identifier: 0D:16:1C:F9:02:C5:19:11:0F:AF:82:EE:B6:D7:F4:45:51:CF:12:5A Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F432858499DBF30F19EABFA3A1EE78F80 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/67812d0d-1933-37be-a9ba-934c1e9dd884.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 3443 IP address blocks: 192.188.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:30:f1:9e:ab:fa:3a:1e:e7:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=16d0933c-433b-454b-887f-dffa65c8e54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:a9:4c:8d:7f:5e:e4:72:5d:e9:7d:73:f3: 78:e8:06:1d:69:f6:84:e1:12:96:27:d5:30:f1:fd: 2f:a4:66:6b:5e:8c:25:92:9c:1d:bd:ff:b5:ca:87: 52:fd:cb:54:71:4e:32:9c:48:ea:6b:26:10:cf:de: 82:d6:db:5a:8d:be:55:6c:bf:b4:bf:84:04:7c:0d: 99:32:46:1c:a0:9e:a9:7b:73:91:99:f2:97:dc:f9: fa:36:c1:ca:80:ea:90:04:f8:d7:fa:96:ac:d5:48: d6:5a:4c:a3:5c:76:9f:1a:0c:55:1f:68:69:c2:4c: dc:10:a7:41:b2:63:57:91:b3:d8:83:7d:c6:15:a5: e1:0b:45:b1:5a:f7:78:80:ec:42:b9:9e:3a:8b:46: 8f:df:23:cb:c3:73:be:55:9d:49:4e:3f:7b:a8:16: 52:1b:18:1f:21:7f:71:f0:bf:57:bb:c9:9a:f5:96: 24:15:25:da:0f:65:3f:e8:7a:89:0b:7d:10:e0:c7: 79:6b:75:fe:93:d4:24:98:de:e2:9f:8d:61:2a:66: 1f:a9:f9:76:5d:99:18:53:f3:a2:ef:37:fa:42:1c: 2d:3a:8e:03:e7:6d:64:ba:cf:97:5e:54:60:fa:ba: c8:2e:fa:cd:05:68:43:a2:1e:a3:03:c1:d4:8c:bf: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:16:1C:F9:02:C5:19:11:0F:AF:82:EE:B6:D7:F4:45:51:CF:12:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/67812d0d-1933-37be-a9ba-934c1e9dd884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7e:d7:25:d2:aa:c5:ea:dd:ac:9a:9b:4e:ff:cf:88:ce:a7: cf:23:ae:a2:07:0f:fa:ae:79:34:61:6e:55:1c:f4:ce:82:8c: a7:f2:77:90:26:88:bb:32:85:4b:99:5a:5c:fd:01:3a:2f:ca: 68:15:e9:b6:6c:8d:59:3d:b8:df:0f:eb:4b:98:fa:61:ff:c3: 19:2a:7a:e4:c6:ad:e8:c6:83:e3:b4:be:aa:be:48:65:fb:8e: 79:2e:a4:4f:5a:dd:e1:60:9d:dc:fa:9c:6c:12:d1:dc:36:96: 6d:81:9e:31:01:92:d1:f4:e9:fb:35:18:bc:a2:c6:a5:9b:b7: 23:72:15:f3:ee:04:05:51:ac:d7:8d:69:e5:2d:e4:c4:1b:04: 11:84:7b:fd:38:5d:d8:74:3e:d5:3d:3c:ff:92:a3:b8:2c:be: 9a:8a:a4:0b:23:d4:c3:a8:13:0a:b1:ef:f9:82:04:52:53:be: ec:78:89:40:eb:3d:84:8a:76:37:0c:df:49:f1:ee:03:77:8e: 12:a3:14:dc:be:5b:91:2d:7e:82:4e:8c:49:42:a4:aa:dd:5e: 98:72:48:71:6f:f6:c4:a8:0c:9a:e9:68:ca:9d:07:8d:14:44: 9f:ed:24:1c:b5:91:9e:21:8e:f4:dd:e2:80:c8:7b:63:f1:35: 03:22:23:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzDxnqv6Oh7nj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MTZkMDkzM2MtNDMzYi00NTRiLTg4N2YtZGZmYTY1YzhlNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZKpTI1/XuRyXel9c/N46AYdafaE4RKWJ9Uw 8f0vpGZrXowlkpwdvf+1yodS/ctUcU4ynEjqayYQz96C1ttajb5VbL+0v4QEfA2Z MkYcoJ6pe3ORmfKX3Pn6NsHKgOqQBPjX+pas1UjWWkyjXHafGgxVH2hpwkzcEKdB smNXkbPYg33GFaXhC0WxWvd4gOxCuZ46i0aP3yPLw3O+VZ1JTj97qBZSGxgfIX9x 8L9Xu8ma9ZYkFSXaD2U/6HqJC30Q4Md5a3X+k9QkmN7in41hKmYfqfl2XZkYU/Oi 7zf6QhwtOo4D521kus+XXlRg+rrILvrNBWhDoh6jA8HUjL98gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0WHPkCxRkRD6+C7rbX9EVRzxJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNjc4MTJkMGQtMTkzMy0z N2JlLWE5YmEtOTM0YzFlOWRkODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp+1yXSqsXq3ayam07/z4jOp88jrqIHD/queTRhblUc9M6CjKfyd5Am iLsyhUuZWlz9ATovymgV6bZsjVk9uN8P60uY+mH/wxkqeuTGrejGg+O0vqq+SGX7 jnkupE9a3eFgndz6nGwS0dw2lm2BnjEBktH06fs1GLyixqWbtyNyFfPuBAVRrNeN aeUt5MQbBBGEe/04Xdh0PtU9PP+So7gsvpqKpAsj1MOoEwqx7/mCBFJTvux4iUDr PYSKdjcM30nx7gN3jhKjFNy+W5EtfoJOjElCpKrdXphySHFv9sSoDJrpaMqdB40U RJ/tJBy1kZ4hjvTd4oDIe2PxNQMiI3E= -----END CERTIFICATE-----Generated at Mon Apr 28 01:15:56 2025 by rpki-client