$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa File: 43db4554-4f92-301e-95ab-48747f15d838.roa (raw, json) Hash identifier: Y8FTdSJT4+w7bNazkif5tFwUXKuVdKYhiTFoI6pw3D0= Subject key identifier: F2:8F:06:EF:84:2C:77:68:63:E6:58:4B:96:DB:EB:FC:96:7B:03:F4 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F432858490881632707E6CF38BA1EE720 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.184.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:63:27:07:e6:cf:38:ba:1e:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=9dac6307-e986-4211-a972-14cd03914785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:17:17:94:61:85:4a:52:65:68:ad:27:9c: f7:11:cf:f6:12:af:80:bb:36:ce:5c:07:e9:43:06: b6:92:f8:ae:ca:7e:cd:f7:5d:50:4f:82:4d:95:d3: a6:81:10:c1:cc:ba:bb:12:df:94:d2:0d:ae:df:14: d7:37:f5:c9:1a:8a:32:be:98:c6:a0:b4:36:35:49: 5d:13:ca:5b:31:a9:b6:28:f2:fb:14:2a:56:76:3a: ef:96:98:78:ae:ae:3a:f7:ff:4a:8a:56:64:b7:57: 58:9f:44:c2:57:64:71:79:7f:02:31:63:2a:4b:c5: cc:8c:01:62:2d:7b:cb:96:7f:6a:eb:fc:80:b9:4a: a1:e1:6f:ed:29:5a:86:9d:4f:14:e2:61:0d:21:5d: 8b:50:8d:9b:77:55:59:44:75:a6:e0:96:d5:18:9a: 7c:a2:f0:e4:48:3a:28:11:a9:12:96:67:e2:56:d1: 58:1e:55:02:ba:9e:41:90:43:65:6e:f4:34:7e:ea: 43:86:77:12:a9:57:9b:18:d0:4b:bc:a6:40:5d:09: 3e:a7:a1:e6:e6:68:5c:2e:98:41:be:64:9d:26:55: c1:11:c6:bb:91:bb:99:10:dc:e5:b0:e9:5c:da:31: 6d:89:a6:6f:c8:d5:96:31:c1:2c:90:d0:52:0f:52: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8F:06:EF:84:2C:77:68:63:E6:58:4B:96:DB:EB:FC:96:7B:03:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:71:8c:ff:00:23:4f:60:d0:c6:34:e3:45:7b:91:67:92:49: c3:1e:fb:42:2c:b5:90:cd:fb:c1:18:87:17:72:a3:8e:de:f7: 10:04:b9:f8:dd:0c:df:14:bc:d6:ad:36:36:92:f4:2b:f0:34: d9:ed:0b:92:1b:ce:09:9c:67:2f:de:0f:21:c2:2a:95:bc:33: d8:c0:08:b2:03:3d:63:6a:4d:7d:2a:42:90:3d:08:a0:86:33: 3b:7b:ca:5e:2d:a7:9b:20:c0:f8:53:6d:cb:e9:6b:4f:03:01: 90:63:25:03:5b:1c:7a:52:f4:71:e6:2b:d9:b6:dd:2b:d7:2b: d9:7e:a5:a1:7c:15:e6:e4:e7:5e:2e:55:a2:8b:fe:b0:31:81: 10:90:65:72:a1:13:19:7f:77:78:20:68:c2:dc:18:36:0c:c1: 79:94:fd:75:f0:e5:0c:8d:6b:7f:ec:d2:58:b8:a0:8b:4a:a2: 94:9d:b1:16:cf:21:1f:8b:01:70:0d:54:4e:92:0f:04:f4:b8: 72:9f:83:83:e8:3e:63:b2:ff:6e:8b:1f:ac:09:ab:ba:f0:4f: 9b:22:74:23:35:ab:26:2b:8b:72:6e:dc:6d:de:f2:11:a5:b2: 53:0d:54:45:d3:67:49:78:1b:85:fd:b7:b7:e4:b9:51:f0:01: 3d:84:ec:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWMnB+bPOLoe5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OWRhYzYzMDctZTk4Ni00MjExLWE5NzItMTRjZDAzOTE0Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuAXF5RhhUpSZWitJ5z3Ec/2Eq+AuzbOXAfp Qwa2kviuyn7N911QT4JNldOmgRDBzLq7Et+U0g2u3xTXN/XJGooyvpjGoLQ2NUld E8pbMam2KPL7FCpWdjrvlph4rq469/9KilZkt1dYn0TCV2RxeX8CMWMqS8XMjAFi LXvLln9q6/yAuUqh4W/tKVqGnU8U4mENIV2LUI2bd1VZRHWm4JbVGJp8ovDkSDoo EakSlmfiVtFYHlUCup5BkENlbvQ0fupDhncSqVebGNBLvKZAXQk+p6Hm5mhcLphB vmSdJlXBEca7kbuZENzlsOlc2jFtiaZvyNWWMcEskNBSD1IJywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKPBu+ELHdoY+ZYS5bb6/yWewP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvNDNkYjQ1NTQtNGY5Mi0z MDFlLTk1YWItNDg3NDdmMTVkODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZxjP8AI09g0MY040V7kWeSScMe+0IstZDN+8EYhxdyo47e9xAEufjd DN8UvNatNjaS9CvwNNntC5IbzgmcZy/eDyHCKpW8M9jACLIDPWNqTX0qQpA9CKCG Mzt7yl4tp5sgwPhTbcvpa08DAZBjJQNbHHpS9HHmK9m23SvXK9l+paF8Febk514u VaKL/rAxgRCQZXKhExl/d3ggaMLcGDYMwXmU/XXw5QyNa3/s0li4oItKopSdsRbP IR+LAXANVE6SDwT0uHKfg4PoPmOy/26LH6wJq7rwT5sidCM1qyYri3Ju3G3e8hGl slMNVEXTZ0l4G4X9t7fkuVHwAT2E7EI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:47 2025 by rpki-client