$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa File: 249ec9c1-aae0-3b16-a897-6f80b435a876.roa (raw, json) Hash identifier: IVf2Fj1m66W8MTWtILka1Mu09cjy4QlJkDnqwnt2XwQ= Subject key identifier: 0F:4D:E4:25:B4:08:D9:19:15:4E:2C:9F:45:BD:71:D7:26:B8:56:F5 Certificate issuer: /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1 Certificate serial: 010D0C9F43285848A29B44965E0DCD6A546CE380 Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 16509 IP address blocks: 192.0.55.0/24 maxlen: 24 192.0.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:44:96:5e:0d:cd:6a:54:6c:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=6c15b51a-e449-4178-941b-cd737531bcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:be:01:f2:54:3f:4a:d9:cf:5d:26:43:7f: 48:26:0b:ce:e4:a6:85:07:0e:2d:52:05:98:29:b8: 52:29:8b:82:96:d4:e6:d5:c9:53:64:7e:7c:e1:0f: 16:dc:5b:0f:2b:6c:5f:41:62:05:a9:78:30:da:5a: 54:39:1a:c7:ea:53:b2:da:28:9e:64:42:33:07:4b: 21:4b:03:b5:76:05:29:84:fa:46:77:d9:6e:b2:35: f0:4b:89:94:9c:6e:4c:a3:7c:02:8b:4a:37:e3:b4: 51:6a:4e:e9:9d:df:bf:7a:9b:d7:1a:7c:be:4d:34: 39:9b:9d:74:3c:ed:fd:25:2d:70:cd:43:a6:27:5a: d0:af:79:ae:f7:ea:33:b0:c1:b9:c6:61:41:78:49: 13:73:7c:83:8c:59:f4:06:7d:d3:8b:34:10:61:f3: 5b:96:0a:a8:bf:d8:0e:77:ce:f7:f6:6c:00:09:55: f3:72:cb:4d:f7:0c:ec:8b:cf:87:6a:cb:f6:00:52: 31:44:a1:d2:2d:8d:44:78:c2:d6:c7:96:e0:b2:52: 5f:32:50:ab:a0:76:9d:2a:3e:d7:27:0c:e2:85:35: 2f:c8:43:7b:d9:bc:11:0a:58:dd:6c:2f:25:00:e4: 33:85:42:44:7b:fd:f5:a3:1b:86:2d:b7:1f:f5:b9: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4D:E4:25:B4:08:D9:19:15:4E:2C:9F:45:BD:71:D7:26:B8:56:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl X509v3 Authority Key Identifier: keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer sbgp-ipAddrBlock: critical IPv4: 192.0.55.0/24 192.0.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0e:62:c9:bc:0b:6d:63:0f:9a:93:0d:a3:ce:e2:52:0a:14: 45:08:aa:83:a1:bb:b9:fb:27:f1:3d:5d:e2:71:1e:e0:82:9f: 62:b7:27:fd:ac:c1:25:63:18:c8:67:c1:6e:c8:a1:9a:1c:e5: 89:4e:26:5d:ac:bd:48:f9:95:a5:97:3a:38:bd:08:c9:bd:ac: dd:11:31:6b:f8:73:1e:31:d8:1c:dd:a5:7e:75:1f:e2:32:5a: da:e6:6a:49:08:f0:2e:7b:68:42:8a:2e:7b:b5:c5:a5:79:f0: d3:a8:eb:71:55:b7:cf:64:b5:ce:0a:bc:15:c9:22:8a:83:6a: ed:c4:84:5b:11:37:5c:0d:98:5f:ed:37:4f:40:13:d2:75:2b: 9e:65:84:49:31:c6:0a:b6:2b:8b:c5:8f:4c:60:72:14:0b:6c: cf:14:ba:1c:d3:ee:5e:b0:cc:60:00:ae:fb:18:37:48:ec:ac: 6b:4b:f4:d1:7b:93:9f:b2:7f:ea:a0:28:83:5f:3d:8a:37:77: 9e:c1:da:7a:09:2c:96:50:49:e1:76:26:96:09:59:47:2d:b8: 7a:e6:2a:41:40:6d:d2:3a:9f:fc:e4:e3:05:42:3a:d5:d7:9b: 3d:9f:3d:da:14:a1:2c:d0:f8:6a:f4:4a:d7:7d:4d:bb:91:ee: 19:89:ee:64 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiim0SWXg3NalRs44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxOGJmZTktNTY0My00ODhhLWE5Y2QtMzljYjc4Y2Fk ZmExMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NmMxNWI1MWEtZTQ0OS00MTc4LTk0MWItY2Q3Mzc1MzFiY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDW+AfJUP0rZz10mQ39IJgvO5KaFBw4tUgWY KbhSKYuCltTm1clTZH584Q8W3FsPK2xfQWIFqXgw2lpUORrH6lOy2iieZEIzB0sh SwO1dgUphPpGd9lusjXwS4mUnG5Mo3wCi0o347RRak7pnd+/epvXGny+TTQ5m510 PO39JS1wzUOmJ1rQr3mu9+ozsMG5xmFBeEkTc3yDjFn0Bn3TizQQYfNblgqov9gO d8739mwACVXzcstN9wzsi8+Hasv2AFIxRKHSLY1EeMLWx5bgslJfMlCroHadKj7X JwzihTUvyEN72bwRCljdbC8lAOQzhUJEe/31oxuGLbcf9bm31wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA9N5CW0CNkZFU4sn0W9cdcmuFb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4 YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNiNzhjYWRmYTEvMjQ5ZWM5YzEtYWFlMC0z YjE2LWE4OTctNmY4MGI0MzVhODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAxOGJmZTktNTY0My00ODhhLWE5 Y2QtMzljYjc4Y2FkZmExLzQwMThiZmU5LTU2NDMtNDg4YS1hOWNkLTM5Y2I3OGNh ZGZhMS5jcmwwHwYDVR0jBBgwFoAU92gYKDUvn3LcLDIzRMtSiNLHGm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNi NzhjYWRmYTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwAA3AwQA wAA+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGUOYsm8C21jD5qTDaPO4lIKFEUIqoOhu7n7J/E9XeJxHuCC n2K3J/2swSVjGMhnwW7IoZoc5YlOJl2svUj5laWXOji9CMm9rN0RMWv4cx4x2Bzd pX51H+IyWtrmakkI8C57aEKKLnu1xaV58NOo63FVt89ktc4KvBXJIoqDau3EhFsR N1wNmF/tN09AE9J1K55lhEkxxgq2K4vFj0xgchQLbM8UuhzT7l6wzGAArvsYN0js rGtL9NF7k5+yf+qgKINfPYo3d57B2noJLJZQSeF2JpYJWUctuHrmKkFAbdI6n/zk 4wVCOtXXmz2fPdoUoSzQ+Gr0Std9TbuR7hmJ7mQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:37 2025 by rpki-client