$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/f1d50c9a-8e03-3af4-9cd3-0a72586b8f20.roa File: f1d50c9a-8e03-3af4-9cd3-0a72586b8f20.roa (raw, json) Hash identifier: 01KSyOURF4AzNoTyZ0XzrhSJAw8U5YVTxe6QHeuI84g= Subject key identifier: CA:1E:88:9E:31:AB:F2:55:3C:2D:00:E7:5D:F8:19:95:46:DF:83:89 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F432858498CFF1F0D143850AC5E1C3C80 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/f1d50c9a-8e03-3af4-9cd3-0a72586b8f20.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 397423 IP address blocks: 192.154.213.0/24 maxlen: 24 192.154.248.0/24 maxlen: 24 192.154.253.0/24 maxlen: 24 192.154.254.0/24 maxlen: 24 192.154.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1f:0d:14:38:50:ac:5e:1c:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=aff0456c-b6d1-48ad-b918-4b55dad6bdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:70:8c:b1:cd:b7:16:a8:6a:51:7f:56:84: 7d:df:1a:7f:d5:55:fd:c1:52:e2:e1:ed:6e:7c:04: ab:45:3a:fd:2b:e9:99:c2:17:ff:e4:53:dc:04:ba: 3e:be:81:38:4c:4a:6b:4f:d7:e4:b4:06:a3:4d:82: 3c:a4:07:fd:34:83:fa:5b:44:68:47:0c:db:cf:1a: fe:59:72:ce:3d:8a:80:4b:3f:84:50:ab:6f:05:2f: 68:3e:a7:57:5f:f1:de:29:1b:4a:3d:66:43:b4:82: 56:7e:63:ca:dc:61:87:6b:be:cb:3e:fb:39:df:56: 37:49:f2:5a:af:57:23:33:f6:9d:25:c5:9e:39:dc: 8c:e5:82:e4:2d:84:8b:ea:e5:a4:ae:22:0b:92:73: 4f:e1:7c:d1:88:f0:65:91:74:64:1a:6c:d2:73:d7: 3a:29:a1:f5:56:83:da:7c:fc:f5:f3:a8:93:3a:65: fa:2e:f1:7c:e2:6c:77:12:7a:80:d3:85:9d:40:12: 36:e6:02:3d:4a:fe:05:b5:cb:59:f6:3a:30:4f:3e: a8:6f:0c:f6:fd:9c:43:f3:d5:71:43:39:d4:2c:18: 1e:bd:66:94:63:2b:cd:76:03:51:dc:9e:22:d9:4d: 66:dc:c9:ff:49:89:6d:56:b6:94:f6:2a:3a:e8:81: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:88:9E:31:AB:F2:55:3C:2D:00:E7:5D:F8:19:95:46:DF:83:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/f1d50c9a-8e03-3af4-9cd3-0a72586b8f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 192.154.213.0/24 192.154.248.0/24 192.154.253.0-192.154.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:45:74:1a:0d:50:02:18:df:c0:fb:0d:28:ba:45:97:4e:6c: 83:81:31:46:e8:9c:12:c7:48:ab:dd:39:a5:71:ee:73:80:2c: fb:51:66:7f:3d:7a:c7:35:af:74:76:4b:b1:e5:f4:d1:4c:64: ff:fc:0e:6d:5a:ff:49:5b:74:9a:d5:14:73:ff:1a:6a:55:0b: 10:f8:3c:3f:95:7d:95:9e:7d:51:f1:4a:e9:1d:de:c1:ab:23: d6:71:b0:7e:d8:ec:10:56:c9:51:85:b2:5c:1e:c6:cf:84:0b: 01:89:93:fa:da:fe:f8:1e:62:05:16:f7:76:30:2e:58:4a:34: 13:46:b8:1c:43:b9:19:c4:94:4f:d4:0f:08:1e:51:0f:38:91: 9b:a1:4f:4b:6f:6d:98:01:74:5a:76:5c:a8:f3:54:f6:c1:a1: 10:d4:d7:b1:be:b3:53:b2:b2:41:ab:f1:5b:ac:eb:15:2b:e3: e2:3f:9f:2d:8c:13:b7:71:d2:5e:82:04:7d:43:a7:16:bf:60: 29:14:26:0a:13:1a:d1:43:30:bc:56:7b:c2:e5:34:e3:08:5b: 2a:46:de:92:64:46:4a:49:01:26:31:ce:ce:80:45:f5:bd:5b: d4:26:7a:ab:d6:ea:6c:d0:30:c7:e7:97:2b:ce:90:c1:44:a2: b4:f6:6a:0b -----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgIUAQ0Mn0MoWEmM/x8NFDhQrF4cPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YWZmMDQ1NmMtYjZkMS00OGFkLWI5MTgtNGI1NWRhZDZiZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1lwjLHNtxaoalF/VoR93xp/1VX9wVLi4e1u fASrRTr9K+mZwhf/5FPcBLo+voE4TEprT9fktAajTYI8pAf9NIP6W0RoRwzbzxr+ WXLOPYqASz+EUKtvBS9oPqdXX/HeKRtKPWZDtIJWfmPK3GGHa77LPvs531Y3SfJa r1cjM/adJcWeOdyM5YLkLYSL6uWkriILknNP4XzRiPBlkXRkGmzSc9c6KaH1VoPa fPz186iTOmX6LvF84mx3EnqA04WdQBI25gI9Sv4FtctZ9jowTz6obwz2/ZxD89Vx QznULBgevWaUYyvNdgNR3J4i2U1m3Mn/SYltVraU9io66IG+xwIDAQABo4IDaDCC A2QwHQYDVR0OBBYEFMoeiJ4xq/JVPC0A5134GZVG34OJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvZjFkNTBjOWEtOGUwMy0z YWY0LTljZDMtMGE3MjU4NmI4ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQAwJrVAwQA wJr4MAsDBADAmv0DAwDAmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/RXQaDVACGN/A+w0oukWXTmyDgTFG 6JwSx0ir3Tmlce5zgCz7UWZ/PXrHNa90dkux5fTRTGT//A5tWv9JW3Sa1RRz/xpq VQsQ+Dw/lX2Vnn1R8UrpHd7BqyPWcbB+2OwQVslRhbJcHsbPhAsBiZP62v74HmIF Fvd2MC5YSjQTRrgcQ7kZxJRP1A8IHlEPOJGboU9Lb22YAXRadlyo81T2waEQ1Nex vrNTsrJBq/FbrOsVK+PiP58tjBO3cdJeggR9Q6cWv2ApFCYKExrRQzC8VnvC5TTj CFsqRt6SZEZKSQEmMc7OgEX1vVvUJnqr1ups0DDH55crzpDBRKK09moL -----END CERTIFICATE-----Generated at Sat Apr 26 17:41:20 2025 by rpki-client