$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa File: 72035800-3e75-3949-9085-d1960203a8c1.roa (raw, json) Hash identifier: BXU8WBoTDV+VekHu1tXBEY6KwvdC2cP5yZLh2sNtCxo= Subject key identifier: 8B:59:25:17:5E:9E:85:B0:41:A0:C8:B0:12:D9:4E:47:F6:CD:FC:D2 Certificate issuer: /CN=e553e5ec-0211-480d-9476-86db3dbe2182 Certificate serial: 010D0C9F432858498769AEB91C2F11658A842F50 Authority key identifier: 74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 31898 IP address blocks: 192.159.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ae:b9:1c:2f:11:65:8a:84:2f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e553e5ec-0211-480d-9476-86db3dbe2182 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=cc9db2f8-148b-427b-88c7-4c9a90994c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:56:3d:b0:fd:f4:c9:2b:62:45:07:23:31: 52:dc:11:ff:4e:8d:6f:92:66:2e:1e:af:34:5c:a1: 29:67:c3:c2:02:f9:ae:72:6a:da:4b:08:22:31:01: a0:af:f4:47:40:46:d2:9b:ae:94:e9:f7:b7:8e:bd: a8:01:d6:9e:82:14:67:cd:fe:b2:5f:5c:c7:0c:ac: 0a:08:4f:95:e1:0e:26:38:6d:af:62:7b:2a:28:77: 10:53:f1:bb:39:71:f9:09:0d:e4:a2:16:26:47:b3: d0:57:5b:2f:0d:c4:91:1b:b1:3e:77:3e:8a:4a:7e: e0:e1:8e:28:5b:07:b6:9f:e2:26:40:c7:3b:30:02: 77:30:27:29:11:6e:9d:99:8d:34:b8:36:bd:93:fe: f6:a4:c7:a6:44:58:76:78:49:72:5d:32:02:2b:8a: 28:c9:88:62:58:87:25:d5:c7:08:8e:7b:68:ec:9f: df:03:3f:ac:79:7c:80:1b:80:2e:1c:00:17:9e:8e: 39:d1:52:8a:6b:bf:91:86:39:c8:f4:7d:e4:8e:8f: 21:42:80:51:be:bb:e6:1a:e2:4a:37:f8:fb:47:e0: f5:78:da:91:a1:89:5b:bc:9b:1f:78:85:10:e1:77: 85:fc:98:02:ad:1a:b7:bd:67:2e:ed:7b:b2:1d:29: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:59:25:17:5E:9E:85:B0:41:A0:C8:B0:12:D9:4E:47:F6:CD:FC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.crl X509v3 Authority Key Identifier: keyid:74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer sbgp-ipAddrBlock: critical IPv4: 192.159.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6e:7a:1d:61:36:f8:fd:fa:84:49:a1:04:25:82:fd:e7:6d: 03:50:57:7b:c3:c0:60:4e:4a:cb:81:64:69:c8:5f:47:8a:56: 89:ed:cf:29:8e:3d:e5:f8:90:92:bc:70:b3:c3:82:c1:e6:48: 34:9a:81:d9:49:a7:ef:1c:ac:1c:df:fa:d3:bd:46:92:95:49: 68:0d:1a:71:51:ef:91:1e:33:aa:12:79:8e:15:d7:95:a1:54: a7:5a:66:ce:3f:8e:68:5d:bd:90:b2:df:e8:1f:98:eb:31:44: 97:b9:f3:55:81:34:29:f6:ae:38:ef:d6:53:cd:2d:2e:9a:90: 83:6f:47:21:05:2d:71:06:1f:a1:40:85:04:2d:2e:bf:f4:d9: c0:29:36:74:04:3c:59:55:07:47:54:62:87:f3:5f:3f:00:9b: 4b:6d:2b:23:aa:ab:25:dd:48:f9:a1:de:5b:22:fe:82:77:7f: 02:6d:e3:14:f2:11:52:f1:90:61:5a:64:07:d3:6c:c1:1a:b6: 5d:6f:a9:10:78:27:58:a7:51:d9:c3:a1:32:9f:e4:6d:07:dc: 1f:f3:d3:18:2c:2a:3b:e6:ea:18:68:47:88:cc:fb:09:e6:6d: 7b:67:2d:38:ef:62:cb:6b:3a:21:1d:0f:c3:07:14:61:49:87: c3:2e:d4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaa65HC8RZYqEL1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTU1M2U1ZWMtMDIxMS00ODBkLTk0NzYtODZkYjNkYmUy MTgyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk Y2M5ZGIyZjgtMTQ4Yi00MjdiLTg4YzctNGM5YTkwOTk0YzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu45WPbD99MkrYkUHIzFS3BH/To1vkmYuHq80 XKEpZ8PCAvmucmraSwgiMQGgr/RHQEbSm66U6fe3jr2oAdaeghRnzf6yX1zHDKwK CE+V4Q4mOG2vYnsqKHcQU/G7OXH5CQ3kohYmR7PQV1svDcSRG7E+dz6KSn7g4Y4o Wwe2n+ImQMc7MAJ3MCcpEW6dmY00uDa9k/72pMemRFh2eElyXTICK4ooyYhiWIcl 1ccIjnto7J/fAz+seXyAG4AuHAAXno450VKKa7+RhjnI9H3kjo8hQoBRvrvmGuJK N/j7R+D1eNqRoYlbvJsfeIUQ4XeF/JgCrRq3vWcu7XuyHSlYSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItZJRdenoWwQaDIsBLZTkf2zfzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNTUz ZTVlYy0wMjExLTQ4MGQtOTQ3Ni04NmRiM2RiZTIxODIvNzIwMzU4MDAtM2U3NS0z OTQ5LTkwODUtZDE5NjAyMDNhOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTU1M2U1ZWMtMDIxMS00ODBkLTk0 NzYtODZkYjNkYmUyMTgyL2U1NTNlNWVjLTAyMTEtNDgwZC05NDc2LTg2ZGIzZGJl MjE4Mi5jcmwwHwYDVR0jBBgwFoAUdBO0BGdk9aCwchAbNb+XvbIlTCUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNTUzZTVlYy0wMjExLTQ4MGQtOTQ3Ni04NmRi M2RiZTIxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExueh1hNvj9+oRJoQQlgv3nbQNQV3vDwGBOSsuBZGnIX0eKVontzymO PeX4kJK8cLPDgsHmSDSagdlJp+8crBzf+tO9RpKVSWgNGnFR75EeM6oSeY4V15Wh VKdaZs4/jmhdvZCy3+gfmOsxRJe581WBNCn2rjjv1lPNLS6akINvRyEFLXEGH6FA hQQtLr/02cApNnQEPFlVB0dUYofzXz8Am0ttKyOqqyXdSPmh3lsi/oJ3fwJt4xTy EVLxkGFaZAfTbMEatl1vqRB4J1inUdnDoTKf5G0H3B/z0xgsKjvm6hhoR4jM+wnm bXtnLTjvYstrOiEdD8MHFGFJh8Mu1D8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:51:00 2025 by rpki-client