$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa File: a3f85181-11c0-326a-830f-14c1fb40c85f.roa (raw, json) Hash identifier: 4QI2+/X28KH41VqT0lALsqd1k5Mr8Ri2eeGKboVnf04= Subject key identifier: E8:CD:18:70:1B:9A:B4:A5:39:ED:CA:28:29:2F:B6:77:A6:09:54:13 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858493C093A8E527D6C68F8734100 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 21949 IP address blocks: 96.45.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3a:8e:52:7d:6c:68:f8:73:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=e5eabaf8-41cc-4827-8c6e-b6dc6c616c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:f5:26:9c:4e:6d:f6:68:79:9d:c4:09:c3: dc:bf:c2:92:92:d9:03:38:ae:45:59:93:aa:19:b5: 49:8c:04:1c:a2:34:11:8f:38:55:3f:2c:a4:ca:cd: 9c:25:7d:cf:2c:f7:23:13:9d:2b:62:cc:2a:4d:98: 15:cf:0a:91:59:d6:8b:9b:7a:c7:5a:55:2d:77:92: 47:b6:24:a4:39:3c:8f:a7:99:38:f1:60:fc:cb:5d: 39:62:63:4e:4e:91:75:0a:68:68:94:b7:24:ca:39: 80:a9:20:35:e5:06:6c:49:cb:d6:fc:e4:6e:0e:0a: e7:82:f0:f0:9c:1d:81:1a:bb:a3:99:95:5f:a8:56: 0c:93:e4:49:b8:ce:0b:84:75:4c:2b:68:3f:bd:d4: 31:34:a4:f1:a8:3c:34:18:3d:5c:76:d3:75:ed:f0: e4:09:ca:d1:2b:4c:c6:8e:67:7b:3d:af:a0:78:96: d0:d6:00:da:a9:43:bc:be:5a:9e:c7:d9:56:eb:1e: f4:9b:98:91:a4:9d:52:13:56:90:7d:b2:77:34:cb: 50:5e:e4:14:e4:84:70:82:f8:6f:46:8d:3b:64:4d: 48:98:96:27:fa:54:29:42:55:0c:32:8e:c9:95:1b: c5:08:b9:bb:11:7c:8c:11:9b:b1:e0:58:e7:92:ba: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CD:18:70:1B:9A:B4:A5:39:ED:CA:28:29:2F:B6:77:A6:09:54:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 96.45.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e2:c9:4c:e2:cd:bc:48:bb:3e:8f:97:55:b8:33:ae:75:d6: a5:23:87:19:7f:1a:85:d2:3f:84:f9:55:03:eb:13:48:62:cf: e6:24:88:05:39:1f:a3:28:ca:f7:29:e9:5d:2d:08:87:1a:6e: b8:f1:6a:89:eb:2a:50:0e:b9:94:83:1b:bd:8f:74:7d:0f:51: 6d:ef:28:0e:9a:c2:7a:14:3f:8c:04:c4:b4:aa:d3:99:9e:a6: 49:54:65:5d:e3:a1:01:ed:6e:d2:8d:69:8f:ef:40:1e:da:4b: 63:41:64:bd:db:d3:bd:a1:9c:0b:74:35:3b:d9:93:b6:d8:6f: 02:b1:97:b6:ac:68:9c:47:10:42:1d:9d:c0:5d:9e:eb:83:95: 17:88:45:e5:bb:ba:c4:86:3f:cf:17:de:25:ef:c2:57:02:b4: 2f:b0:e5:fb:0d:51:44:b0:fb:32:34:93:cf:c9:28:60:ea:02: 8b:c0:06:19:20:b4:71:fd:45:f8:33:9d:69:81:fa:7b:5e:85: 50:fc:a2:d1:7a:0e:1d:87:ff:78:db:8a:bc:23:e9:9b:70:a7: a1:b1:c4:9b:93:8b:b2:e8:da:6e:74:26:86:27:61:d0:2d:fa: f7:0a:c0:e6:6c:37:5b:df:09:55:95:4d:6e:63:cd:b1:cc:7b: 61:ca:95:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTqOUn1saPhzQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZTVlYWJhZjgtNDFjYy00ODI3LThjNmUtYjZkYzZjNjE2YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnD1JpxObfZoeZ3ECcPcv8KSktkDOK5FWZOq GbVJjAQcojQRjzhVPyykys2cJX3PLPcjE50rYswqTZgVzwqRWdaLm3rHWlUtd5JH tiSkOTyPp5k48WD8y105YmNOTpF1CmholLckyjmAqSA15QZsScvW/ORuDgrngvDw nB2BGrujmZVfqFYMk+RJuM4LhHVMK2g/vdQxNKTxqDw0GD1cdtN17fDkCcrRK0zG jmd7Pa+geJbQ1gDaqUO8vlqex9lW6x70m5iRpJ1SE1aQfbJ3NMtQXuQU5IRwgvhv Ro07ZE1ImJYn+lQpQlUMMo7JlRvFCLm7EXyMEZux4Fjnkrr1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjNGHAbmrSlOe3KKCkvtnemCVQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTNmODUxODEtMTFjMC0z MjZhLTgzMGYtMTRjMWZiNDBjODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXiyUzizbxIuz6Pl1W4M6511qUjhxl/GoXSP4T5VQPrE0hiz+YkiAU5 H6Moyvcp6V0tCIcabrjxaonrKlAOuZSDG72PdH0PUW3vKA6awnoUP4wExLSq05me pklUZV3joQHtbtKNaY/vQB7aS2NBZL3b072hnAt0NTvZk7bYbwKxl7asaJxHEEId ncBdnuuDlReIReW7usSGP88X3iXvwlcCtC+w5fsNUUSw+zI0k8/JKGDqAovABhkg tHH9RfgznWmB+ntehVD8otF6Dh2H/3jbirwj6Ztwp6GxxJuTi7Lo2m50JoYnYdAt +vcKwOZsN1vfCVWVTW5jzbHMe2HKlco= -----END CERTIFICATE-----Generated at Tue Apr 8 10:15:45 2025 by rpki-client