$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa File: de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa (raw, json) Hash identifier: LU1yhr8HQ+lfPN6h71dMw+D2RY0je9PBT1/rddtxQUQ= Subject key identifier: D2:62:84:89:89:4B:C6:3F:89:99:F1:53:39:E9:D2:1A:55:B3:1A:C7 Certificate issuer: /CN=68875259-2927-45e7-be12-9528b42e0e51 Certificate serial: 010D0C9F432858499F49C00DB5FB93AF3BBB6EC0 Authority key identifier: 9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa Signing time: Wed 23 Apr 2025 14:15:57 +0000 ROA not before: Wed 23 Apr 2025 14:15:57 +0000 ROA not after: Tue 22 Jul 2025 14:15:57 +0000 asID: 8075 IP address blocks: 192.190.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:49:c0:0d:b5:fb:93:af:3b:bb:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68875259-2927-45e7-be12-9528b42e0e51 Validity Not Before: Apr 23 14:15:57 2025 GMT Not After : Jul 22 14:15:57 2025 GMT Subject: CN=13ca974f-a6ff-4b1e-b386-8fb2a7284f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c5:db:7f:d1:51:41:6b:2f:e5:09:ee:c8:82: 43:23:bc:87:0f:f7:09:89:9a:7c:66:33:6a:4c:dd: 23:a8:99:84:0c:eb:3a:aa:e6:87:08:a6:d2:c2:e6: dc:2c:c8:7e:66:2c:97:f8:b2:0e:78:a3:d3:db:60: 52:39:e1:f8:96:16:67:dc:b6:42:6e:0d:5e:e1:0a: 30:26:3a:13:26:2d:33:6c:81:ed:70:22:c1:bd:f1: 55:67:ca:b1:a7:c5:de:1e:f7:0f:cf:6e:83:28:9e: c6:36:75:b2:ca:78:c3:26:1e:a4:fd:18:5a:27:a4: a0:e9:bf:b7:ea:1b:74:8c:7b:5b:d4:54:b3:73:b6: 72:10:07:1a:0b:63:f0:7a:6d:47:4d:69:36:38:14: c8:f8:99:19:dd:18:fd:f8:cf:8b:3c:67:6b:aa:8c: 5f:dd:7b:90:ef:a8:e3:f4:22:42:24:06:14:db:6b: 85:08:98:67:24:88:4b:a0:70:56:c3:53:cd:1d:db: 49:bc:87:b2:f8:1b:4a:06:2f:b3:0a:ab:9c:fb:f9: 03:7d:c8:8a:95:c5:ef:3a:dd:3c:11:5d:04:a0:fa: fe:cc:a6:81:74:30:5e:30:50:a4:8f:ab:96:18:c0: d0:5d:2b:02:c4:fa:31:e8:ca:2d:75:d1:be:57:db: 30:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:62:84:89:89:4B:C6:3F:89:99:F1:53:39:E9:D2:1A:55:B3:1A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.crl X509v3 Authority Key Identifier: keyid:9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer sbgp-ipAddrBlock: critical IPv4: 192.190.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:ce:0d:e4:84:63:85:1c:e8:81:7a:4e:c9:a3:be:de:0f:ed: de:e3:e5:9f:40:d9:d4:3d:4a:36:5c:b5:1c:3c:ad:fd:77:5c: 92:83:6a:3a:e3:ee:e1:85:07:89:d8:bc:55:8a:de:b2:7b:76: cf:b2:a0:c2:15:5b:50:d8:85:3e:bc:3d:16:fc:ad:c0:f4:32: 24:ec:0a:09:6d:f0:39:83:8b:a8:16:b9:9f:73:f3:80:0e:c5: 20:78:e4:5d:cd:80:25:62:ca:68:d8:46:1b:5e:96:82:19:d4: 92:4d:86:11:d6:d8:9b:b7:aa:e9:b5:d9:ec:06:55:40:ca:7b: 3c:48:45:f4:3d:55:f5:09:f4:e3:29:1b:62:eb:18:13:db:93: e2:fc:c3:c6:92:28:75:f6:94:b2:6d:f6:05:fe:15:be:e0:fd: 5a:e8:08:e3:69:6e:ce:f7:86:df:eb:e8:a1:a8:d2:1a:d5:41: 33:58:f2:e5:32:ab:61:3a:ee:b7:da:98:87:d4:ef:d3:d1:59: 8d:f1:93:f4:1d:4f:99:95:08:38:60:11:75:dd:7d:71:76:42: ef:9c:ff:04:a1:99:02:a9:77:dd:bd:45:45:f4:44:1c:8d:98: e0:cd:1c:4c:28:54:12:0c:28:84:6b:33:f3:2b:d5:44:fb:fe: 84:3e:01:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfScANtfuTrzu7bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4NzUyNTktMjkyNy00NWU3LWJlMTItOTUyOGI0MmUw ZTUxMB4XDTI1MDQyMzE0MTU1N1oXDTI1MDcyMjE0MTU1N1owLzEtMCsGA1UEAxMk MTNjYTk3NGYtYTZmZi00YjFlLWIzODYtOGZiMmE3Mjg0ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicXbf9FRQWsv5QnuyIJDI7yHD/cJiZp8ZjNq TN0jqJmEDOs6quaHCKbSwubcLMh+ZiyX+LIOeKPT22BSOeH4lhZn3LZCbg1e4Qow JjoTJi0zbIHtcCLBvfFVZ8qxp8XeHvcPz26DKJ7GNnWyynjDJh6k/RhaJ6Sg6b+3 6ht0jHtb1FSzc7ZyEAcaC2Pwem1HTWk2OBTI+JkZ3Rj9+M+LPGdrqoxf3XuQ76jj 9CJCJAYU22uFCJhnJIhLoHBWw1PNHdtJvIey+BtKBi+zCquc+/kDfciKlcXvOt08 EV0EoPr+zKaBdDBeMFCkj6uWGMDQXSsCxPox6MotddG+V9swgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJihImJS8Y/iZnxUznp0hpVsxrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ODg3 NTI1OS0yOTI3LTQ1ZTctYmUxMi05NTI4YjQyZTBlNTEvZGUxZDkwYWItMzVlMS0z YTNkLWI3NWQtMmFjNjFmNTk2NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjg4NzUyNTktMjkyNy00NWU3LWJl MTItOTUyOGI0MmUwZTUxLzY4ODc1MjU5LTI5MjctNDVlNy1iZTEyLTk1MjhiNDJl MGU1MS5jcmwwHwYDVR0jBBgwFoAUn9/SRwQXIr/HvAiIkpaDEv8iz/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ODg3NTI1OS0yOTI3LTQ1ZTctYmUxMi05NTI4 YjQyZTBlNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL4ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANrODeSEY4Uc6IF6Tsmjvt4P7d7j5Z9A2dQ9SjZctRw8rf13XJKDajrj 7uGFB4nYvFWK3rJ7ds+yoMIVW1DYhT68PRb8rcD0MiTsCglt8DmDi6gWuZ9z84AO xSB45F3NgCViymjYRhteloIZ1JJNhhHW2Ju3qum12ewGVUDKezxIRfQ9VfUJ9OMp G2LrGBPbk+L8w8aSKHX2lLJt9gX+Fb7g/VroCONpbs73ht/r6KGo0hrVQTNY8uUy q2E67rfamIfU79PRWY3xk/QdT5mVCDhgEXXdfXF2Qu+c/wShmQKpd929RUX0RByN mODNHEwoVBIMKIRrM/Mr1UT7/oQ+AQs= -----END CERTIFICATE-----Generated at Fri May 2 15:05:12 2025 by rpki-client