$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa File: 4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa (raw, json) Hash identifier: rHYR/yZN+G5Gfk371mWI7wRPr7mymH6uIoBJfYOBy+c= Subject key identifier: 79:47:29:80:E3:C0:95:A3:DD:DD:37:00:D6:A6:88:A1:46:5B:F1:18 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F43285849CBCF95BF7DFDF5EAEA1A6250 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 192.152.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:95:bf:7d:fd:f5:ea:ea:1a:62:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=25ec64ea-3bec-4d92-9d13-038453a15cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:c2:c4:03:5c:0e:99:e3:b6:8a:5e:ac:49: 78:4f:32:66:88:32:d9:7d:75:c5:05:4e:5f:28:80: fd:98:28:1f:ad:a8:49:a8:47:ab:48:9d:f0:bc:0f: 3d:73:e8:11:8f:16:1f:86:bf:9b:5e:62:ea:c3:a3: 4f:35:0c:c4:1f:0e:47:cc:37:53:81:4c:a6:08:20: e7:72:40:74:c3:56:4a:2a:58:36:98:77:96:c2:2d: e4:b2:cc:d2:5f:28:2b:ef:28:27:90:21:1a:ca:a8: e6:e8:6a:4d:01:1a:32:4e:1d:c7:05:51:bb:b9:dc: 04:22:b3:25:23:92:59:0a:56:0e:70:7e:7c:b2:d0: 1f:9b:b6:b1:2a:19:15:35:24:ce:31:4d:49:46:c9: 37:65:04:41:73:fc:e9:7f:d2:20:12:dd:2d:3b:e0: fd:6a:a2:eb:8e:aa:7b:dd:ea:eb:7c:d8:18:9e:ca: 25:7a:d3:ef:8b:c7:ec:2d:96:9e:a4:f3:59:04:b8: 44:84:b3:86:12:1e:ad:98:4a:1d:51:99:64:23:aa: 3f:f3:57:77:54:45:d2:b3:b3:b2:ce:5a:c0:98:24: 55:b3:0b:d7:1b:25:56:ee:bc:61:70:91:28:69:72: 9b:a9:36:03:10:0f:bc:71:c7:15:0c:34:2a:23:cf: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:47:29:80:E3:C0:95:A3:DD:DD:37:00:D6:A6:88:A1:46:5B:F1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:be:1c:6c:d9:18:c0:a0:ff:5a:20:2b:49:3c:5e:43:82:2d: dd:d1:8d:b1:6c:28:5f:95:65:a3:c6:de:f0:c8:a9:29:a0:5d: eb:c5:11:ad:cf:14:74:a4:c1:41:f7:ed:d3:79:00:39:7a:3f: 46:84:01:61:0a:e5:8e:cf:82:f6:de:2d:f0:19:2e:c4:9f:13: a3:d5:ee:d5:28:13:e2:ae:fc:4a:3a:b5:85:df:2d:b9:68:a2: 67:bd:d3:59:cb:fe:1d:77:b6:8a:f3:c6:0f:8a:89:37:c8:cd: 40:9e:d5:9d:6b:88:d2:aa:40:dd:bd:c2:e7:2d:0c:3e:ff:6d: 96:60:ad:ba:cf:fd:56:79:e9:9d:8d:07:39:a3:9e:ec:7f:90: 7f:dc:1d:5e:38:ee:84:08:a5:ea:ba:c6:38:d4:71:6d:d1:59: bb:9f:84:74:ad:bd:9e:55:88:ab:52:fb:e2:bc:44:c9:8a:1a: 45:bc:59:f8:8a:ac:d9:17:bf:38:5c:3a:63:a6:fa:f5:2c:6d: c9:3e:14:5a:9f:4c:07:f5:1b:2b:2c:bd:45:84:7e:d5:be:4e: 6d:41:ff:86:df:63:a8:c2:da:ab:67:08:3d:dc:41:29:05:97: 44:18:96:a2:ac:d9:20:80:ca:19:2d:25:6d:2d:34:c7:bb:19: ce:87:f0:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5W/ff316uoaYlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MjVlYzY0ZWEtM2JlYy00ZDkyLTlkMTMtMDM4NDUzYTE1Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+7CxANcDpnjtoperEl4TzJmiDLZfXXFBU5f KID9mCgfrahJqEerSJ3wvA89c+gRjxYfhr+bXmLqw6NPNQzEHw5HzDdTgUymCCDn ckB0w1ZKKlg2mHeWwi3ksszSXygr7ygnkCEayqjm6GpNARoyTh3HBVG7udwEIrMl I5JZClYOcH58stAfm7axKhkVNSTOMU1JRsk3ZQRBc/zpf9IgEt0tO+D9aqLrjqp7 3errfNgYnsoletPvi8fsLZaepPNZBLhEhLOGEh6tmEodUZlkI6o/81d3VEXSs7Oy zlrAmCRVswvXGyVW7rxhcJEoaXKbqTYDEA+8cccVDDQqI882+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlHKYDjwJWj3d03ANamiKFGW/EYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvNGU0NmM4ZGQtZDA2YS0z ZDU4LThhMDctZTBiNTE5ZmQxZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK++HGzZGMCg/1ogK0k8XkOCLd3RjbFsKF+VZaPG3vDIqSmgXevFEa3P FHSkwUH37dN5ADl6P0aEAWEK5Y7PgvbeLfAZLsSfE6PV7tUoE+Ku/Eo6tYXfLblo ome901nL/h13torzxg+KiTfIzUCe1Z1riNKqQN29wuctDD7/bZZgrbrP/VZ56Z2N Bzmjnux/kH/cHV447oQIpeq6xjjUcW3RWbufhHStvZ5ViKtS++K8RMmKGkW8WfiK rNkXvzhcOmOm+vUsbck+FFqfTAf1GyssvUWEftW+Tm1B/4bfY6jC2qtnCD3cQSkF l0QYlqKs2SCAyhktJW0tNMe7Gc6H8Jw= -----END CERTIFICATE-----Generated at Sat Jun 14 23:50:39 2025 by rpki-client