$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa File: d784b0e5-c75f-36a1-b21e-eade3788cd04.roa (raw, json) Hash identifier: WyABDUtdg/RnhG9l9tDbeQgaquuz2mGgmQ4B/YTmXhU= Subject key identifier: 6E:A1:45:34:75:28:C4:C7:7B:39:C8:19:4C:95:53:B0:83:A9:82:F4 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F432858492CAE8347878CE500FE139580 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 397373 IP address blocks: 192.158.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:83:47:87:8c:e5:00:fe:13:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8f849ef3-4957-485a-ba96-939f574ab17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:ab:60:9f:ca:0b:be:a8:e3:c8:4e:22:04: 20:c7:2b:17:d3:64:54:27:08:ba:7f:6c:d2:bd:c0: 83:d0:14:3c:c5:db:46:36:ce:fd:46:af:de:4b:2f: 34:20:45:57:06:6c:03:cd:8b:ca:5e:e8:e4:3c:b5: a6:12:e2:ba:a1:90:31:1a:4e:47:4a:12:fa:3e:21: 37:59:fa:57:b0:ea:a2:fa:55:dd:46:0c:f8:da:03: ea:5e:a2:21:f8:9c:6d:8a:63:cb:22:46:0a:11:3e: d8:08:ed:d0:6e:40:11:fe:34:d8:37:09:19:5c:28: 53:58:95:24:20:f2:42:df:f2:b6:b7:14:df:2b:82: 95:63:04:53:b8:05:3a:ad:d5:75:21:32:75:49:73: b1:00:ba:6e:d2:de:74:67:29:92:be:bf:72:61:84: 56:8c:d8:95:93:8e:dc:a4:fc:89:08:f4:42:28:4e: c0:31:7c:c8:9e:42:5f:f0:86:7a:11:93:62:65:f2: ac:44:32:25:9d:77:92:e0:9d:42:fe:54:1a:74:a9: e1:88:fc:b1:fa:2b:e8:2c:64:08:78:a7:e8:e2:5d: d3:94:a4:e7:65:7c:e9:b5:f8:8c:47:49:c9:d9:8f: a5:35:84:3d:c3:aa:1f:0b:2d:dd:d2:97:da:19:ff: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A1:45:34:75:28:C4:C7:7B:39:C8:19:4C:95:53:B0:83:A9:82:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f1:71:ac:0b:d7:cc:90:4d:c9:3b:1a:7a:9b:5f:b2:4e:e5: 55:12:27:59:2a:8d:9c:19:38:74:01:92:b3:eb:9f:3e:29:ae: 9a:01:38:00:74:00:65:da:c0:9a:f7:14:1e:2a:29:0b:f7:18: a8:aa:52:ef:02:15:16:0a:90:11:c1:1a:62:0c:d2:89:0d:77: 69:af:ea:1f:b3:2a:5f:d2:e2:aa:7f:20:1a:0e:3e:44:70:4e: 3e:cc:87:3f:27:d8:cd:29:ac:5c:f6:98:d4:c7:30:43:24:39: a6:0a:f9:3f:00:dc:5a:dd:a3:ac:f2:a8:e5:6c:e0:a0:8d:e9: db:c7:b8:ea:b4:c7:62:87:5e:ea:d1:c9:54:b4:20:fc:b3:5c: 09:96:4a:c7:67:88:bf:0b:c3:09:b6:fe:5c:0d:73:1b:46:a0: bc:94:d9:d9:2f:43:8d:87:93:7c:78:ab:e6:d4:f6:3b:95:c8: 8c:05:8f:09:1b:75:f4:39:c3:cb:93:bf:94:75:06:f4:20:b1: 40:e1:4f:70:f4:e0:6b:81:a4:6f:55:04:0b:b5:ed:1e:9d:00: 28:85:cc:96:03:f4:88:66:c6:54:68:57:cb:88:4f:1c:99:3b: e9:12:3e:0e:e3:fc:ed:0a:7b:39:ab:51:a2:7f:54:f3:e9:e5: a1:4d:73:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroNHh4zlAP4TlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGY4NDllZjMtNDk1Ny00ODVhLWJhOTYtOTM5ZjU3NGFiMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mWrYJ/KC76o48hOIgQgxysX02RUJwi6f2zS vcCD0BQ8xdtGNs79Rq/eSy80IEVXBmwDzYvKXujkPLWmEuK6oZAxGk5HShL6PiE3 WfpXsOqi+lXdRgz42gPqXqIh+JxtimPLIkYKET7YCO3QbkAR/jTYNwkZXChTWJUk IPJC3/K2txTfK4KVYwRTuAU6rdV1ITJ1SXOxALpu0t50ZymSvr9yYYRWjNiVk47c pPyJCPRCKE7AMXzInkJf8IZ6EZNiZfKsRDIlnXeS4J1C/lQadKnhiPyx+ivoLGQI eKfo4l3TlKTnZXzptfiMR0nJ2Y+lNYQ9w6ofCy3d0pfaGf/AdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6hRTR1KMTHeznIGUyVU7CDqYL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZDc4NGIwZTUtYzc1Zi0z NmExLWIyMWUtZWFkZTM3ODhjZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzxcawL18yQTck7GnqbX7JO5VUSJ1kqjZwZOHQBkrPrnz4prpoBOAB0 AGXawJr3FB4qKQv3GKiqUu8CFRYKkBHBGmIM0okNd2mv6h+zKl/S4qp/IBoOPkRw Tj7Mhz8n2M0prFz2mNTHMEMkOaYK+T8A3Frdo6zyqOVs4KCN6dvHuOq0x2KHXurR yVS0IPyzXAmWSsdniL8Lwwm2/lwNcxtGoLyU2dkvQ42Hk3x4q+bU9juVyIwFjwkb dfQ5w8uTv5R1BvQgsUDhT3D04GuBpG9VBAu17R6dACiFzJYD9IhmxlRoV8uITxyZ O+kSPg7j/O0KezmrUaJ/VPPp5aFNc18= -----END CERTIFICATE-----Generated at Sat Apr 26 15:51:19 2025 by rpki-client