$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa File: a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa (raw, json) Hash identifier: J74Yc1VjsYcTZmDuqjxIKcO4JEBFAg9BHEZyz0M7Asc= Subject key identifier: B6:90:C6:7E:8B:33:01:A7:26:79:33:89:2B:EB:3F:A5:1F:6E:1E:51 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F43285848E2D105855EDD24583426D4C0 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 22418 IP address blocks: 192.157.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:05:85:5e:dd:24:58:34:26:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=ef4a8492-8a2c-4818-a686-8b96ca5b756e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:ae:97:62:53:af:d0:6d:b5:a8:84:b5:28: 6e:61:d4:7b:77:a5:07:4d:a9:b2:65:ec:4a:41:d6: 3f:49:7c:4e:c6:51:17:5d:49:b2:5b:30:45:d0:01: 05:88:5f:95:fc:cc:9c:76:b5:83:a9:3e:86:28:b6: bf:5d:ce:0e:67:fa:ac:40:71:89:45:3b:44:c8:ce: 18:03:d2:f6:29:a7:f6:8c:31:26:66:ea:d8:f7:c3: d0:bc:e8:9e:05:e5:88:f9:16:d7:5f:c6:18:f1:28: 7b:dd:6d:b9:51:92:5e:97:d8:08:b6:6f:88:05:a2: 1e:c3:05:de:f7:2f:88:c4:8d:8a:8e:9c:95:f3:13: 85:4a:9f:46:7e:6a:2a:1c:8e:98:fe:70:39:bf:ae: 7b:2f:e7:a8:d8:40:70:77:96:60:23:f8:93:00:eb: b4:ee:07:03:16:f8:f2:d0:8f:16:31:4a:5a:f6:05: 1f:60:76:0c:c1:1a:b7:dc:ff:3a:50:d3:7f:e1:e3: 50:db:3b:0c:93:9b:a2:d3:53:4a:97:3a:cf:81:55: bb:3b:31:4f:ae:cc:6a:b9:85:32:8e:1b:b4:07:c3: f3:ab:12:85:c4:42:b5:5c:60:a5:9f:e5:ca:c5:c0: 86:9e:c2:0f:03:85:b2:f5:c7:55:76:9d:14:5d:5c: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:90:C6:7E:8B:33:01:A7:26:79:33:89:2B:EB:3F:A5:1F:6E:1E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:02:1a:8d:9c:55:4e:f6:fe:0b:ca:38:00:0e:db:68:8e:3d: 12:9a:e5:ad:10:05:0a:22:de:e2:bd:1d:49:27:28:10:82:ce: 15:b7:2b:1b:0d:d9:d6:13:2e:43:3c:b3:b4:95:30:f6:20:56: 6b:f1:a4:4f:9e:9e:57:36:e1:15:5f:10:ab:a4:ae:c0:af:7a: 61:ca:96:69:5b:91:dd:3c:95:7e:de:e2:48:12:65:33:7d:ca: 91:e3:a7:d1:28:84:04:19:d7:c7:ea:ee:e4:94:17:c7:05:e9: 16:7d:3c:38:7d:e5:28:82:fe:a6:ce:c4:10:4d:c1:c0:f0:1c: 90:53:62:d0:c3:30:1e:8a:d5:9b:89:82:56:23:e9:d5:ac:5a: 8d:6f:fc:8e:9a:ce:03:e7:63:90:2c:e9:65:bc:a3:08:29:9c: 5f:2d:00:dc:06:4e:07:79:fb:6b:60:a1:6a:5a:2d:6f:b1:81: 08:ce:ad:ea:cc:71:1a:5c:88:fd:b3:0e:31:c2:3c:83:bc:0a: a3:75:e0:ed:23:27:b9:59:da:2e:b3:96:fc:e4:c0:0b:d5:a3: b1:5a:21:de:bb:fd:04:3a:62:e8:47:a9:50:6e:19:04:8f:0f: 24:ef:04:c8:28:e1:ee:59:26:eb:3c:74:0f:f3:1b:da:46:12: e3:5f:ba:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QWFXt0kWDQm1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZWY0YTg0OTItOGEyYy00ODE4LWE2ODYtOGI5NmNhNWI3NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiCul2JTr9BttaiEtShuYdR7d6UHTamyZexK QdY/SXxOxlEXXUmyWzBF0AEFiF+V/MycdrWDqT6GKLa/Xc4OZ/qsQHGJRTtEyM4Y A9L2Kaf2jDEmZurY98PQvOieBeWI+RbXX8YY8Sh73W25UZJel9gItm+IBaIewwXe 9y+IxI2KjpyV8xOFSp9GfmoqHI6Y/nA5v657L+eo2EBwd5ZgI/iTAOu07gcDFvjy 0I8WMUpa9gUfYHYMwRq33P86UNN/4eNQ2zsMk5ui01NKlzrPgVW7OzFPrsxquYUy jhu0B8PzqxKFxEK1XGCln+XKxcCGnsIPA4Wy9cdVdp0UXVzU7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaQxn6LMwGnJnkziSvrP6Ufbh5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYTlhZjZhNGYtYzgxNy0z M2RmLThkNTYtMjJhZmFhYjVjMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMCGo2cVU72/gvKOAAO22iOPRKa5a0QBQoi3uK9HUknKBCCzhW3KxsN 2dYTLkM8s7SVMPYgVmvxpE+enlc24RVfEKukrsCvemHKlmlbkd08lX7e4kgSZTN9 ypHjp9EohAQZ18fq7uSUF8cF6RZ9PDh95SiC/qbOxBBNwcDwHJBTYtDDMB6K1ZuJ glYj6dWsWo1v/I6azgPnY5As6WW8owgpnF8tANwGTgd5+2tgoWpaLW+xgQjOrerM cRpciP2zDjHCPIO8CqN14O0jJ7lZ2i6zlvzkwAvVo7FaId67/QQ6YuhHqVBuGQSP DyTvBMgo4e5ZJus8dA/zG9pGEuNfuv0= -----END CERTIFICATE-----Generated at Mon Apr 28 06:08:17 2025 by rpki-client