$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa File: 6c9fb431-548f-3a10-9569-bcae411ab529.roa (raw, json) Hash identifier: N2AGtcoKdPXHERpd2A1hL6fZXpLt39EN7w3c150Szx4= Subject key identifier: E9:87:91:3E:C3:F4:BC:D6:A2:66:F5:1A:1B:3C:DB:DA:A9:F6:4D:F6 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F432858493C092847F47C3DD592C8F800 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 62856 IP address blocks: 192.103.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:28:47:f4:7c:3d:d5:92:c8:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=bfadca27-070d-4e9f-99e4-de558a08289e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:45:95:83:81:43:ce:17:f0:d7:8f:d8:f4: e5:17:4d:08:78:98:85:9b:15:1c:18:a3:3c:38:33: 6f:38:5b:6f:a1:b4:81:e7:77:05:9d:78:02:e8:15: 53:1c:72:2d:de:a8:ae:14:6c:9f:17:5a:fe:c9:92: 02:32:b7:b7:e7:c9:f2:64:e1:41:25:a2:02:8e:e4: 26:ee:c7:64:2b:a7:10:3d:1b:09:6c:80:3b:46:f0: 12:d9:0f:5d:1a:0a:5a:bd:df:8c:03:37:85:60:70: ae:a2:c5:5b:36:95:ae:af:00:4b:e1:16:b5:24:f3: db:73:2e:cc:af:9a:b1:b8:aa:62:cd:40:b2:cf:16: b4:a8:6d:97:ce:99:ce:a3:6f:82:35:53:1b:71:ac: 9b:43:76:40:88:ef:dc:dc:82:1a:35:18:75:a5:6b: 8f:0e:62:74:12:4a:e4:15:4d:c1:22:1c:b5:e9:5d: 51:f4:c9:93:e6:da:84:8d:a6:ba:d5:cf:71:28:31: ba:32:80:b2:f3:55:a0:2c:19:cb:10:e0:f4:f7:e4: ff:f5:1b:7a:07:74:3d:66:2c:8a:30:6b:d8:6d:b0: 96:2c:e3:17:40:a9:dc:d7:dd:11:1b:ad:85:2a:79: 96:90:76:91:03:cb:61:23:c6:73:c5:60:58:53:55: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:87:91:3E:C3:F4:BC:D6:A2:66:F5:1A:1B:3C:DB:DA:A9:F6:4D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 192.103.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a3:fc:b5:d4:e5:00:a2:51:67:6f:b1:eb:4b:e3:6f:21:ea: f5:63:dd:2d:6e:21:bd:3d:10:76:b9:fc:8f:9d:3c:36:e4:53: ac:64:ee:4c:94:5a:09:ee:18:b5:ad:a8:31:67:44:29:cc:38: ee:66:5d:4a:1d:03:e6:a9:7a:e1:55:63:b8:21:7c:d1:be:c3: f7:49:24:c3:68:94:ca:bc:52:05:c1:13:e4:80:49:cb:76:02: 14:2c:15:e9:df:7b:5d:73:c3:06:3e:31:f9:9e:19:29:c9:57: d7:0b:0f:dc:60:9e:8b:d2:f3:47:7c:b4:6f:67:36:1d:fa:a4: 23:86:61:8c:92:d7:43:2c:78:9f:56:dc:c6:e4:45:0f:aa:c2: 25:29:95:73:40:d3:08:8a:60:1a:bf:c8:ed:82:7f:f7:92:b1: fe:c1:1d:82:c7:0e:a8:c4:a3:63:d8:47:04:a5:30:75:11:61: 5f:34:39:35:f9:25:ef:0f:8a:df:80:33:15:7e:da:7e:82:be: 8a:b0:77:c8:ce:68:81:59:b0:35:39:2d:ee:aa:29:b1:80:b5: dd:85:46:6f:f4:5b:7b:35:c8:72:bc:6d:bc:cc:51:13:cd:68: 0c:7b:c0:b3:2b:32:e6:3b:cc:e3:08:bd:f9:c7:67:c8:e4:8a: 44:95:4c:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CShH9Hw91ZLI+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmZhZGNhMjctMDcwZC00ZTlmLTk5ZTQtZGU1NThhMDgyODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOpFlYOBQ84X8NeP2PTlF00IeJiFmxUcGKM8 ODNvOFtvobSB53cFnXgC6BVTHHIt3qiuFGyfF1r+yZICMre358nyZOFBJaICjuQm 7sdkK6cQPRsJbIA7RvAS2Q9dGgpavd+MAzeFYHCuosVbNpWurwBL4Ra1JPPbcy7M r5qxuKpizUCyzxa0qG2XzpnOo2+CNVMbcaybQ3ZAiO/c3IIaNRh1pWuPDmJ0Ekrk FU3BIhy16V1R9MmT5tqEjaa61c9xKDG6MoCy81WgLBnLEOD09+T/9Rt6B3Q9ZiyK MGvYbbCWLOMXQKnc190RG62FKnmWkHaRA8thI8ZzxWBYU1VjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmHkT7D9LzWomb1Ghs829qp9k32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNmM5ZmI0MzEtNTQ4Zi0z YTEwLTk1NjktYmNhZTQxMWFiNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwGd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKj/LXU5QCiUWdvsetL428h6vVj3S1uIb09EHa5/I+dPDbkU6xk7kyU WgnuGLWtqDFnRCnMOO5mXUodA+apeuFVY7ghfNG+w/dJJMNolMq8UgXBE+SASct2 AhQsFenfe11zwwY+MfmeGSnJV9cLD9xgnovS80d8tG9nNh36pCOGYYyS10MseJ9W 3MbkRQ+qwiUplXNA0wiKYBq/yO2Cf/eSsf7BHYLHDqjEo2PYRwSlMHURYV80OTX5 Je8Pit+AMxV+2n6Cvoqwd8jOaIFZsDU5Le6qKbGAtd2FRm/0W3s1yHK8bbzMURPN aAx7wLMrMuY7zOMIvfnHZ8jkikSVTH0= -----END CERTIFICATE-----Generated at Tue Apr 8 18:22:08 2025 by rpki-client