$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa File: 3acf301c-9ec5-387a-aab4-0c7bec71a379.roa (raw, json) Hash identifier: 7hy2p6yDdFQ/2qmnd3mAONm3XeCuBwApJ2gTn4VoAGM= Subject key identifier: 62:82:F1:F5:A5:88:5A:A7:08:2C:7C:90:37:03:AC:4C:B4:8F:73:20 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24763B2FE533CBA1BF6F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 192.48.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:76:3b:2f:e5:33:cb:a1:bf:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=37bc4def-affd-4258-b7f7-23edcb70348b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a4:ed:77:58:9f:76:92:d3:88:29:de:f5:82: 2b:57:6e:14:b0:9b:9d:a7:ca:bd:2e:d1:f0:8d:e6: b1:3b:c5:19:b3:f5:0e:79:30:92:ea:12:26:b2:5e: 58:40:a2:78:a8:57:95:9d:4f:08:f6:bf:2a:98:69: 68:90:00:f6:59:59:35:ce:6f:a3:69:2d:69:cf:6e: 1e:e6:ff:72:3f:6f:cb:8f:27:0c:70:91:b9:ff:21: 81:43:66:3e:27:71:aa:d3:e3:42:0b:1e:78:fd:80: 7e:bf:2f:5a:f3:32:c1:c0:3e:13:9f:e7:fc:a1:db: 15:51:4c:b5:d9:c8:ca:af:cd:e1:6b:66:f4:f8:ca: 12:46:0e:ac:8a:8c:f9:d0:ae:e0:d5:0b:3a:e9:6d: 13:78:45:a9:1a:7d:51:48:76:d2:52:53:43:12:0c: c6:90:a3:3f:b9:16:46:3e:21:9c:34:6c:e5:04:85: 57:33:be:00:0f:4b:6d:d5:06:b5:39:a6:77:9a:d6: cb:41:22:bb:34:0c:12:25:b2:30:a1:7a:c2:93:77: 49:2f:21:9d:b8:26:14:db:2d:f0:63:dd:f3:1d:a6: 77:79:87:6c:55:31:b4:ae:19:3c:e7:36:2c:19:3a: 97:08:9f:09:e6:8e:57:fe:be:34:cf:dc:12:d7:78: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:F1:F5:A5:88:5A:A7:08:2C:7C:90:37:03:AC:4C:B4:8F:73:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 192.48.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:41:b1:c9:27:59:92:0b:a0:78:10:ef:4c:b6:b4:80:81:e7: b6:f2:b9:3a:28:a9:a5:f0:3b:b3:e1:0d:a5:f7:1c:83:c5:64: 3d:73:98:02:09:7a:7f:be:d6:50:c5:db:67:8c:41:04:f9:76: c8:93:96:e5:2d:75:97:10:ff:b8:8c:ea:fb:84:70:66:83:ba: f3:9b:78:91:4a:ea:b8:61:82:e9:92:c8:11:14:7c:6c:17:cf: 13:f3:80:8f:22:6f:fb:c7:bc:72:c0:3d:f6:4d:ed:d1:f1:e0: 77:19:c4:cc:3b:1f:de:12:9c:8b:61:20:bb:03:1b:74:02:fc: 05:0d:d7:31:63:f7:13:5c:66:a8:9c:db:62:d3:4a:ae:30:c0: a2:32:3b:1f:1a:7f:68:4b:44:de:ae:6b:be:ba:f6:19:20:ab: f0:44:89:31:80:aa:f4:e3:65:95:a3:dc:8b:40:e1:3e:1f:8f: d5:07:24:54:a4:7c:d4:c2:ed:7d:d4:97:b5:66:3b:37:40:08: 75:05:c0:cb:d3:b5:1e:64:e8:76:30:d5:17:2f:f1:4d:98:2c: fb:77:df:a6:a9:75:73:c9:d1:b0:f0:be:c5:74:c8:ee:6e:0c: 1c:c4:a0:3e:89:b9:c8:1c:34:af:d7:a8:78:81:bf:84:46:18: 7b:27:32:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHY7L+Uzy6G/b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MzdiYzRkZWYtYWZmZC00MjU4LWI3ZjctMjNlZGNiNzAzNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Ttd1ifdpLTiCne9YIrV24UsJudp8q9LtHw jeaxO8UZs/UOeTCS6hImsl5YQKJ4qFeVnU8I9r8qmGlokAD2WVk1zm+jaS1pz24e 5v9yP2/LjycMcJG5/yGBQ2Y+J3Gq0+NCCx54/YB+vy9a8zLBwD4Tn+f8odsVUUy1 2cjKr83ha2b0+MoSRg6sioz50K7g1Qs66W0TeEWpGn1RSHbSUlNDEgzGkKM/uRZG PiGcNGzlBIVXM74AD0tt1Qa1OaZ3mtbLQSK7NAwSJbIwoXrCk3dJLyGduCYU2y3w Y93zHaZ3eYdsVTG0rhk85zYsGTqXCJ8J5o5X/r40z9wS13hRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKC8fWliFqnCCx8kDcDrEy0j3MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2FjZjMwMWMtOWVjNS0z ODdhLWFhYjQtMGM3YmVjNzFhMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlBscknWZILoHgQ70y2tICB57byuTooqaXwO7PhDaX3HIPFZD1zmAIJ en++1lDF22eMQQT5dsiTluUtdZcQ/7iM6vuEcGaDuvObeJFK6rhhgumSyBEUfGwX zxPzgI8ib/vHvHLAPfZN7dHx4HcZxMw7H94SnIthILsDG3QC/AUN1zFj9xNcZqic 22LTSq4wwKIyOx8af2hLRN6ua7669hkgq/BEiTGAqvTjZZWj3ItA4T4fj9UHJFSk fNTC7X3Ul7VmOzdACHUFwMvTtR5k6HYw1Rcv8U2YLPt336apdXPJ0bDwvsV0yO5u DBzEoD6JucgcNK/XqHiBv4RGGHsnMj8= -----END CERTIFICATE-----Generated at Sat Apr 26 21:30:13 2025 by rpki-client