$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/649e92de-96e1-3fec-ae03-07e41bf16b02.roa File: 649e92de-96e1-3fec-ae03-07e41bf16b02.roa (raw, json) Hash identifier: QEzv9NMqCh10xT68jvuVIhpTPxxZwj4Cf34dsHtm+To= Subject key identifier: EB:26:1C:91:A4:8E:54:BB:09:A8:87:C6:CA:97:26:1A:02:65:04:13 Certificate issuer: /CN=76a56abb-5176-43f9-be40-cbfb456a1767 Certificate serial: 010D0C9F432858493C0938A80218EB8DF2835620 Authority key identifier: 85:90:EE:99:BB:D6:87:04:C0:65:07:1F:FC:AA:8E:5F:63:44:4B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/649e92de-96e1-3fec-ae03-07e41bf16b02.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 44071 IP address blocks: 192.43.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/76a56abb-5176-43f9-be40-cbfb456a1767.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/76a56abb-5176-43f9-be40-cbfb456a1767.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:38:a8:02:18:eb:8d:f2:83:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a56abb-5176-43f9-be40-cbfb456a1767 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=7f295d16-3298-4db9-ad6c-cad1f7b9ae8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:79:0f:96:d3:e6:33:38:fc:d7:59:15:76:ed: 5b:f9:60:76:0c:c6:21:ba:54:02:7d:95:d9:68:5b: b8:bd:55:35:59:b1:cd:71:ca:73:49:42:6c:5f:0a: cd:f5:6a:45:47:4e:78:ea:d6:41:2b:40:a6:fb:e9: 23:50:7f:9a:21:97:c0:fa:1b:6d:d2:10:a1:87:29: 4d:3a:41:c9:6f:1f:12:f0:34:a8:78:55:da:3b:03: 7a:05:e9:44:c4:06:ce:c2:1f:05:c6:5d:ee:ac:24: af:c7:66:e6:7d:09:cc:87:80:a9:90:64:ee:8b:b5: 6b:36:ee:d1:1b:20:dc:78:b9:27:93:c8:3e:d0:ec: 51:bd:bd:d8:cc:02:af:9c:1d:9b:fb:92:e3:a0:24: 42:2e:24:62:22:b3:7b:9b:f8:85:29:eb:b4:96:d0: 13:55:cb:1d:25:92:f9:0b:5b:7b:b3:50:03:9b:01: 17:f8:f5:79:eb:68:84:48:00:dc:03:ca:37:d3:93: a2:cf:64:ba:b6:3f:c0:34:ec:c2:3c:57:3d:61:25: e8:c6:7a:f4:ed:8e:fe:b3:37:85:b3:68:2b:96:05: 67:f3:8a:90:2f:aa:ae:e0:a5:9b:a6:81:8c:e9:e6: 9e:89:1f:cd:74:36:2b:bf:d8:a2:23:17:90:a9:1f: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:26:1C:91:A4:8E:54:BB:09:A8:87:C6:CA:97:26:1A:02:65:04:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/649e92de-96e1-3fec-ae03-07e41bf16b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/76a56abb-5176-43f9-be40-cbfb456a1767.crl X509v3 Authority Key Identifier: keyid:85:90:EE:99:BB:D6:87:04:C0:65:07:1F:FC:AA:8E:5F:63:44:4B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767.cer sbgp-ipAddrBlock: critical IPv4: 192.43.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8b:6c:4b:30:39:5c:bf:0f:60:84:5e:63:6d:1e:b6:e7:25: f7:e8:5e:c4:3a:26:97:7a:3b:1a:60:71:cf:02:5e:43:aa:21: 56:1f:7b:66:ff:13:ad:04:e7:b6:17:0c:3f:52:16:78:ee:df: 8e:f4:cb:a3:6f:a4:6d:33:78:be:28:27:ad:0d:60:cd:81:38: 88:a3:48:12:f1:0f:d9:be:f4:00:56:65:a1:89:50:5d:82:36: a2:a4:27:90:ad:2a:2d:a4:31:b7:03:0b:54:88:3b:b1:52:ff: 6b:34:a7:f3:da:5f:5e:89:18:4a:e9:d1:bd:5a:db:bc:12:cb: 75:b3:8b:9c:f4:7b:58:53:f4:db:71:5e:d6:8e:b8:9f:24:8c: 83:04:05:1f:38:df:c7:52:3a:19:c1:b7:13:28:c4:16:d2:cc: bc:dd:e3:cd:bd:97:0e:80:2f:b7:ec:cf:88:88:c8:27:dc:c8: 8f:6b:d7:9d:b8:96:6d:59:b9:cd:ac:c8:9c:a6:aa:79:e4:d3: 3a:da:d6:4d:99:15:24:03:15:9f:9d:6c:b7:b8:a3:77:a6:2b: 25:50:fb:f8:1d:4f:f2:d4:ad:61:05:18:8a:ce:ba:51:e7:23: 2d:27:ff:c9:41:e0:d7:dd:1a:2d:7b:29:11:55:d1:6e:af:e5: e7:c9:02:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTioAhjrjfKDViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZhNTZhYmItNTE3Ni00M2Y5LWJlNDAtY2JmYjQ1NmEx NzY3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk N2YyOTVkMTYtMzI5OC00ZGI5LWFkNmMtY2FkMWY3YjlhZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHkPltPmMzj811kVdu1b+WB2DMYhulQCfZXZ aFu4vVU1WbHNccpzSUJsXwrN9WpFR0546tZBK0Cm++kjUH+aIZfA+htt0hChhylN OkHJbx8S8DSoeFXaOwN6BelExAbOwh8Fxl3urCSvx2bmfQnMh4CpkGTui7VrNu7R GyDceLknk8g+0OxRvb3YzAKvnB2b+5LjoCRCLiRiIrN7m/iFKeu0ltATVcsdJZL5 C1t7s1ADmwEX+PV562iESADcA8o305Oiz2S6tj/ANOzCPFc9YSXoxnr07Y7+szeF s2grlgVn84qQL6qu4KWbpoGM6eaeiR/NdDYrv9iiIxeQqR89JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsmHJGkjlS7CaiHxsqXJhoCZQQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NmE1 NmFiYi01MTc2LTQzZjktYmU0MC1jYmZiNDU2YTE3NjcvNjQ5ZTkyZGUtOTZlMS0z ZmVjLWFlMDMtMDdlNDFiZjE2YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzZhNTZhYmItNTE3Ni00M2Y5LWJl NDAtY2JmYjQ1NmExNzY3Lzc2YTU2YWJiLTUxNzYtNDNmOS1iZTQwLWNiZmI0NTZh MTc2Ny5jcmwwHwYDVR0jBBgwFoAUhZDumbvWhwTAZQcf/KqOX2NES6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NmE1NmFiYi01MTc2LTQzZjktYmU0MC1jYmZi NDU2YTE3NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECLbEswOVy/D2CEXmNtHrbnJffoXsQ6Jpd6Oxpgcc8CXkOqIVYfe2b/ E60E57YXDD9SFnju3470y6NvpG0zeL4oJ60NYM2BOIijSBLxD9m+9ABWZaGJUF2C NqKkJ5CtKi2kMbcDC1SIO7FS/2s0p/PaX16JGErp0b1a27wSy3Wzi5z0e1hT9Ntx XtaOuJ8kjIMEBR8438dSOhnBtxMoxBbSzLzd4829lw6AL7fsz4iIyCfcyI9r1524 lm1Zuc2syJymqnnk0zra1k2ZFSQDFZ+dbLe4o3emKyVQ+/gdT/LUrWEFGIrOulHn Iy0n/8lB4NfdGi17KRFV0W6v5efJAhg= -----END CERTIFICATE-----Generated at Mon Apr 21 05:57:52 2025 by rpki-client