$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/c5e030a6-56f9-33d7-bf1d-a6e9bd24df84.roa File: c5e030a6-56f9-33d7-bf1d-a6e9bd24df84.roa (raw, json) Hash identifier: Pn+G4wJD6sPDSpVXaqB3ejiRbY3v93etbEZeo0CZZSI= Subject key identifier: 01:25:35:98:56:E6:14:A1:84:E6:1B:3A:61:ED:78:7D:A6:DE:C8:0C Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F432858492CB217DDCAF5C5845B3926C0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/c5e030a6-56f9-33d7-bf1d-a6e9bd24df84.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 971 IP address blocks: 192.34.101.0/24 maxlen: 24 2604:fbc0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:17:dd:ca:f5:c5:84:5b:39:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=08532d09-1e28-4d77-baff-7d93e019ca0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:72:b4:59:d0:97:63:68:41:12:89:17:c3: 7e:fe:4f:47:aa:01:a4:9f:4c:d4:44:36:41:99:70: 5b:ff:0e:f8:dd:b3:19:70:31:c1:19:3c:92:47:d9: d7:bc:99:47:b0:f7:6d:4f:db:aa:05:d3:7c:76:a5: 9e:89:39:54:bd:f8:6b:0d:c4:57:6a:7a:77:6a:34: 5c:0c:64:00:1b:e6:57:06:8a:54:21:90:20:35:2b: fc:cf:75:63:9c:3a:d3:cf:28:4a:de:46:46:66:00: 9c:a9:32:8d:56:0f:8c:16:32:3f:f3:b2:68:1c:23: 91:e4:b3:c3:14:da:86:4b:87:65:76:da:07:50:f8: 99:f6:56:90:c4:22:1f:c8:9b:16:31:c5:6c:30:ab: 96:25:41:e6:fc:14:38:07:f0:c6:e9:ab:d9:c1:5f: 04:11:1c:6d:3e:20:a1:6f:78:12:2c:02:9a:d2:5a: 64:c9:3d:fd:5c:1a:1a:77:8d:33:5c:aa:74:51:83: 66:05:17:be:80:a3:09:fc:d7:ac:2b:ea:b0:13:4f: db:ac:f4:26:a2:70:07:a6:e0:22:13:31:f8:be:29: af:74:92:02:a5:71:94:a8:85:1a:2c:07:09:00:d8: 93:e3:b5:4f:5b:aa:8b:92:f9:5d:35:1c:75:92:d4: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:25:35:98:56:E6:14:A1:84:E6:1B:3A:61:ED:78:7D:A6:DE:C8:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/c5e030a6-56f9-33d7-bf1d-a6e9bd24df84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 192.34.101.0/24 IPv6: 2604:fbc0:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f7:c6:bc:dc:60:4e:4b:84:85:04:3c:02:90:69:26:55:35: d1:34:94:c4:43:88:92:9b:95:42:40:1b:51:a7:2d:38:c7:eb: 5c:81:1b:72:d6:6b:38:f4:ba:86:ef:2c:be:40:d3:81:b4:42: 44:ee:49:a3:58:40:c0:0c:8d:4e:de:e0:26:10:49:0e:c8:66: 3d:e5:b0:de:4b:b3:51:e2:70:36:c9:0a:fc:78:b1:be:1f:3c: 05:6d:09:4f:da:29:19:31:46:06:7b:c8:f0:9d:d2:d2:f4:5d: 70:3f:09:c6:ce:6e:ab:c2:1f:b4:85:2f:71:a2:41:4c:a5:5c: 36:65:fa:f8:19:5f:21:7d:43:30:93:19:36:80:dc:f1:04:23: 72:7f:49:d6:1a:40:32:08:f8:0d:3e:4f:2e:7c:8f:c0:8c:d0: bf:b4:2d:34:a2:51:27:64:73:56:f9:8f:6e:4a:0c:03:95:94: 18:f3:3d:ab:62:75:a1:78:15:c6:7b:99:56:c2:78:ad:49:04: 8f:29:67:3a:9d:32:7f:9b:9a:11:66:69:71:09:4d:d8:a1:b1: 49:b1:82:13:1e:98:32:58:df:51:47:41:ea:15:c8:e0:ce:71: d7:8f:86:07:d6:35:8c:ba:e7:79:ba:96:af:a6:7a:2c:da:43: 6a:ef:74:3e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEksshfdyvXFhFs5JsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDg1MzJkMDktMWUyOC00ZDc3LWJhZmYtN2Q5M2UwMTljYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsBytFnQl2NoQRKJF8N+/k9HqgGkn0zURDZB mXBb/w743bMZcDHBGTySR9nXvJlHsPdtT9uqBdN8dqWeiTlUvfhrDcRXanp3ajRc DGQAG+ZXBopUIZAgNSv8z3VjnDrTzyhK3kZGZgCcqTKNVg+MFjI/87JoHCOR5LPD FNqGS4dldtoHUPiZ9laQxCIfyJsWMcVsMKuWJUHm/BQ4B/DG6avZwV8EERxtPiCh b3gSLAKa0lpkyT39XBoad40zXKp0UYNmBRe+gKMJ/NesK+qwE0/brPQmonAHpuAi EzH4vimvdJICpXGUqIUaLAcJANiT47VPW6qLkvldNRx1ktQvKQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAElNZhW5hShhOYbOmHteH2m3sgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYzVlMDMwYTYtNTZmOS0z M2Q3LWJmMWQtYTZlOWJkMjRkZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwCJlMA4E AgACMAgDBgQmBPvAEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCm98a83GBOS4SFBDwCkGkmVTXRNJTEQ4iS m5VCQBtRpy04x+tcgRty1ms49LqG7yy+QNOBtEJE7kmjWEDADI1O3uAmEEkOyGY9 5bDeS7NR4nA2yQr8eLG+HzwFbQlP2ikZMUYGe8jwndLS9F1wPwnGzm6rwh+0hS9x okFMpVw2Zfr4GV8hfUMwkxk2gNzxBCNyf0nWGkAyCPgNPk8ufI/AjNC/tC00olEn ZHNW+Y9uSgwDlZQY8z2rYnWheBXGe5lWwnitSQSPKWc6nTJ/m5oRZmlxCU3YobFJ sYITHpgyWN9RR0HqFcjgznHXj4YH1jWMuud5upavpnos2kNq73Q+ -----END CERTIFICATE-----Generated at Mon Apr 28 06:09:17 2025 by rpki-client