$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/8c5b42ca-1d65-3320-95f1-8638aec88cd6.roa File: 8c5b42ca-1d65-3320-95f1-8638aec88cd6.roa (raw, json) Hash identifier: SnD/5P1B4G9Zc29KE/kkPbSH7EJnNJUOY3g+xUSEofA= Subject key identifier: 62:EF:D9:02:1B:E0:28:B2:7D:E5:C5:36:FC:04:AD:D7:34:34:08:C9 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F432858499DBF30CE592506ED16784CA0 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/8c5b42ca-1d65-3320-95f1-8638aec88cd6.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 0 IP address blocks: 192.188.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:30:ce:59:25:06:ed:16:78:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=35aab45a-524a-472a-8df5-87a45fdb01f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:d2:e4:38:08:0c:8b:b3:82:14:aa:d7:c0: a3:9d:0e:a5:9d:f0:4d:e3:c8:b8:5c:e1:de:ec:12: 4b:ea:fe:a3:6b:bf:8e:67:e6:8d:6e:3b:5c:1b:b8: 73:07:b7:05:ea:b6:6e:c1:93:05:3a:91:15:bf:5c: a3:03:53:42:33:f4:4a:f0:df:7c:59:0b:4f:ef:be: 35:31:a0:a5:b2:5d:80:1f:d4:68:14:40:4a:30:ad: e6:1a:ca:c5:5f:6e:a0:5f:46:1b:bb:6f:2b:c0:da: 36:19:81:87:cf:be:8d:ca:06:c3:c0:14:d8:61:89: ab:f6:07:66:95:07:63:2e:65:88:5d:65:08:1c:84: 29:a0:34:be:0b:82:bf:66:47:ee:35:a8:a0:02:3f: e2:85:40:2a:0d:ea:2f:c6:fb:57:93:e7:83:b5:57: 5b:c2:a3:33:12:3a:0b:8b:6c:d6:14:15:a7:a2:31: 4f:aa:12:b4:28:63:f2:81:cb:46:73:5b:85:ea:b4: 7a:00:90:3c:d2:bd:95:1c:c8:b5:df:36:56:0d:66: 5e:ce:2a:d8:40:fe:a8:7e:5b:84:7d:18:9c:8a:63: f8:8b:41:39:a9:fc:8a:a7:48:22:e6:60:7a:db:9d: 4f:81:49:c1:9e:d2:0d:85:21:7e:5d:b2:e5:bc:10: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EF:D9:02:1B:E0:28:B2:7D:E5:C5:36:FC:04:AD:D7:34:34:08:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/8c5b42ca-1d65-3320-95f1-8638aec88cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:36:85:de:fc:53:9c:e5:4c:82:1c:ad:78:16:a2:47:6e:b0: 60:ae:5b:f9:43:c6:05:c9:05:c0:4e:f2:6d:12:83:27:55:b4: 35:b5:e8:e5:b3:02:72:b2:22:13:08:13:d2:1f:68:76:14:bb: 7f:95:4e:20:cf:a4:df:df:12:c0:03:37:7a:ea:d6:c1:76:4a: 2d:8b:c0:05:eb:a2:d8:40:2d:75:d3:e7:0f:8b:b3:ba:17:8c: f8:c9:1e:ba:62:13:38:73:bd:6f:c5:70:cf:0c:34:6a:f9:a8: 23:ae:6e:64:27:3a:c2:12:a3:32:4b:a0:63:84:7a:25:a2:37: 37:12:b3:cf:ab:c9:c6:ee:b8:d5:5c:b1:f6:ba:d6:9f:9d:6b: 4a:55:f7:43:cf:06:d7:6d:9c:48:80:ae:53:50:cf:f0:e6:b4: 1a:ec:fb:62:c9:22:70:65:ac:1f:9b:46:30:1f:dc:02:5b:fe: e0:c8:ac:12:7c:4f:fd:6c:ae:ba:39:fc:15:a6:ad:c2:67:ec: da:22:5e:b1:3d:3f:67:d6:b4:02:ad:bd:51:d4:46:2a:57:bc: a0:24:35:58:ec:cc:13:b7:f8:c3:bb:1f:8f:8e:5f:34:fc:15: 41:7f:0d:65:c8:b1:33:0e:ed:79:d0:39:3f:eb:2e:ef:dc:0e: cd:ba:08:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzDOWSUG7RZ4TKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MzVhYWI0NWEtNTI0YS00NzJhLThkZjUtODdhNDVmZGIwMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYvS5DgIDIuzghSq18CjnQ6lnfBN48i4XOHe 7BJL6v6ja7+OZ+aNbjtcG7hzB7cF6rZuwZMFOpEVv1yjA1NCM/RK8N98WQtP7741 MaClsl2AH9RoFEBKMK3mGsrFX26gX0Ybu28rwNo2GYGHz76NygbDwBTYYYmr9gdm lQdjLmWIXWUIHIQpoDS+C4K/ZkfuNaigAj/ihUAqDeovxvtXk+eDtVdbwqMzEjoL i2zWFBWnojFPqhK0KGPygctGc1uF6rR6AJA80r2VHMi13zZWDWZezirYQP6ofluE fRicimP4i0E5qfyKp0gi5mB6251PgUnBntINhSF+XbLlvBCqgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLv2QIb4CiyfeXFNvwErdc0NAjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvOGM1YjQyY2EtMWQ2NS0z MzIwLTk1ZjEtODYzOGFlYzg4Y2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE42hd78U5zlTIIcrXgWokdusGCuW/lDxgXJBcBO8m0SgydVtDW16OWz AnKyIhMIE9IfaHYUu3+VTiDPpN/fEsADN3rq1sF2Si2LwAXrothALXXT5w+Ls7oX jPjJHrpiEzhzvW/FcM8MNGr5qCOubmQnOsISozJLoGOEeiWiNzcSs8+rycbuuNVc sfa61p+da0pV90PPBtdtnEiArlNQz/DmtBrs+2LJInBlrB+bRjAf3AJb/uDIrBJ8 T/1srro5/BWmrcJn7NoiXrE9P2fWtAKtvVHURipXvKAkNVjszBO3+MO7H4+OXzT8 FUF/DWXIsTMO7XnQOT/rLu/cDs26CNg= -----END CERTIFICATE-----Generated at Tue Apr 29 13:31:52 2025 by rpki-client