$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa File: 1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa (raw, json) Hash identifier: 5E8Qo7/I6RISVo+ZsqE8re8TCzf6q+QGkqBJ4YMttq4= Subject key identifier: 39:9B:F5:2C:E6:C1:91:EA:46:0E:5E:8E:9C:64:32:D5:64:8C:39:93 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F43285848D7A64A6FF83F82A50F87DE00 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 54054 IP address blocks: 192.110.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4a:6f:f8:3f:82:a5:0f:87:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=ed0531a1-fd05-43c1-b855-41c3fd2dbd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:10:d5:46:da:86:a7:37:40:f7:bf:67:c8: 20:f1:92:cd:08:b0:d8:93:ba:09:75:c1:da:bb:41: 1e:e9:2a:86:cc:d2:2d:b8:26:27:d1:8d:db:4b:16: 8a:c6:5a:cd:64:ad:5a:b1:83:6a:b1:6f:63:f0:dd: dd:f5:0f:f3:c2:08:68:32:4c:c1:09:50:6c:c6:d0: 22:31:3a:cf:b1:67:f9:ad:7e:65:29:70:d7:2e:14: e1:a1:7f:7b:96:6c:ff:64:16:72:bb:93:f3:cd:2e: 65:c2:5c:ce:7c:50:0e:2b:f1:5f:b6:4d:12:36:05: c1:69:f3:61:ee:ec:12:d6:93:e2:2c:50:ef:55:87: 18:a0:1c:e7:27:ff:1d:58:0d:8c:ed:52:14:72:a1: 7e:65:79:c0:2f:1e:3a:c2:b9:fb:40:d9:25:af:24: e9:bc:07:44:29:06:3c:35:f8:bc:d8:a8:be:56:62: 6e:06:6e:0e:9d:2c:1f:12:25:1c:1c:77:95:14:df: d6:a6:71:eb:67:dc:8a:d0:12:d2:0b:f0:6b:ea:e5: 13:b6:91:4b:6f:0d:c5:db:9e:69:7c:30:d8:bf:20: f8:f3:bd:ba:45:08:9c:e6:95:51:f0:0d:c9:09:c4: 1a:26:e2:88:6e:00:55:59:63:d7:48:3f:a7:d8:73: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9B:F5:2C:E6:C1:91:EA:46:0E:5E:8E:9C:64:32:D5:64:8C:39:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 192.110.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:31:a5:4e:80:44:55:6e:8d:c4:e0:08:fb:8c:5c:10:e2:c6: f1:02:aa:5b:74:88:c6:bb:76:c5:fc:3c:91:bd:42:47:12:08: 8d:46:d0:85:c0:33:26:86:e4:9e:d4:d5:70:3c:78:82:69:33: 2e:54:c2:74:57:8a:23:86:c5:7d:f3:a4:0b:cd:fb:4f:00:11: 30:bf:73:1b:6f:bd:4e:fe:1d:ac:e0:0e:47:09:bd:90:93:66: c3:76:c6:23:a1:2e:bb:09:48:b4:39:fc:4b:f8:f5:fe:6e:33: b0:a6:cd:b6:30:91:03:3c:63:44:75:73:ac:34:9f:88:9f:0f: 83:6e:8f:2d:c3:5d:5c:79:9c:0d:2a:c0:8b:dd:2b:5b:84:ff: 83:77:c7:de:cb:84:21:11:7a:eb:45:0d:8a:aa:36:b9:f8:8d: f3:c7:fa:79:39:0d:cc:9c:37:7b:3f:6d:8b:b9:54:94:57:2c: 74:98:e8:62:0a:e5:81:47:e2:ab:4c:67:b3:4f:24:cf:f0:79: cc:37:06:f9:84:c4:b5:41:e1:3f:e2:da:1e:7f:4f:60:a5:1c: 79:74:25:8e:ce:07:dd:ff:eb:48:a1:b5:9a:e6:1c:44:b2:77: 25:c3:0e:1f:d5:4f:36:fc:d5:3f:80:ad:96:48:f9:92:e2:f7: 20:8d:e4:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkpv+D+CpQ+H3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZWQwNTMxYTEtZmQwNS00M2MxLWI4NTUtNDFjM2ZkMmRiZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfYQ1Ubahqc3QPe/Z8gg8ZLNCLDYk7oJdcHa u0Ee6SqGzNItuCYn0Y3bSxaKxlrNZK1asYNqsW9j8N3d9Q/zwghoMkzBCVBsxtAi MTrPsWf5rX5lKXDXLhThoX97lmz/ZBZyu5PzzS5lwlzOfFAOK/Fftk0SNgXBafNh 7uwS1pPiLFDvVYcYoBznJ/8dWA2M7VIUcqF+ZXnALx46wrn7QNklryTpvAdEKQY8 Nfi82Ki+VmJuBm4OnSwfEiUcHHeVFN/WpnHrZ9yK0BLSC/Br6uUTtpFLbw3F255p fDDYvyD48726RQic5pVR8A3JCcQaJuKIbgBVWWPXSD+n2HO5/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmb9SzmwZHqRg5ejpxkMtVkjDmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvMWEyYWI4ZTItNTg5OC0z ZmZmLTgxZTctNDBlNjAxNTk1YjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYxpU6ARFVujcTgCPuMXBDixvECqlt0iMa7dsX8PJG9QkcSCI1G0IXA MyaG5J7U1XA8eIJpMy5UwnRXiiOGxX3zpAvN+08AETC/cxtvvU7+HazgDkcJvZCT ZsN2xiOhLrsJSLQ5/Ev49f5uM7CmzbYwkQM8Y0R1c6w0n4ifD4Nujy3DXVx5nA0q wIvdK1uE/4N3x97LhCEReutFDYqqNrn4jfPH+nk5DcycN3s/bYu5VJRXLHSY6GIK 5YFH4qtMZ7NPJM/wecw3BvmExLVB4T/i2h5/T2ClHHl0JY7OB93/60ihtZrmHESy dyXDDh/VTzb81T+ArZZI+ZLi9yCN5Ko= -----END CERTIFICATE-----Generated at Sun Apr 27 07:04:05 2025 by rpki-client