$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/7ac2349a-1c73-32c0-8eb7-c2c3e1e9c7e9.roa File: 7ac2349a-1c73-32c0-8eb7-c2c3e1e9c7e9.roa (raw, json) Hash identifier: U4sxpVvBzqA+qTlX8fAs3FgSr1xXnj5aJrI9RSSndGs= Subject key identifier: 6F:8D:A5:BB:72:33:03:5D:D7:D2:58:62:D2:3B:29:61:0B:9A:09:64 Certificate issuer: /CN=2c03f09b-6404-4b04-b989-df1493d00cbb Certificate serial: 010D0C9F43285848696061654755123974BC3A20 Authority key identifier: 34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/7ac2349a-1c73-32c0-8eb7-c2c3e1e9c7e9.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.230.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:61:65:47:55:12:39:74:bc:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c03f09b-6404-4b04-b989-df1493d00cbb Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=c58dcd27-8d6c-4344-8d23-827c8dd7a75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:5c:f3:2b:57:68:56:9d:12:40:42:ee:27: ad:7c:c6:76:2f:1b:c8:3e:bb:26:2a:af:8f:89:80: ef:01:2f:c7:f0:48:56:66:9b:ae:10:60:dd:3d:4b: 83:a6:12:24:1e:22:04:d0:06:0b:bf:1b:49:e7:11: dc:b5:f5:0d:6d:d4:5e:61:57:63:38:34:5f:eb:1f: b4:be:0b:f0:b6:5d:a5:e7:a2:07:21:67:66:94:3e: 90:34:61:05:93:1f:8c:28:ba:a9:d4:8e:53:ac:11: 02:3a:f2:ca:71:f4:79:72:ce:04:33:c0:a3:ef:2e: 47:3d:e6:bd:7a:4a:a6:c8:42:e3:fb:43:c9:92:7c: 44:6c:bb:3c:88:12:8f:24:44:67:9f:ff:ff:3d:70: ef:cb:cb:65:80:39:06:f4:dc:ce:28:09:90:35:78: 6b:9e:32:af:6c:30:6f:8f:9e:a9:95:aa:6f:ae:93: 2f:14:81:06:55:4f:55:f5:a0:0b:19:8f:5b:9c:7b: a4:7b:a4:58:4a:09:ae:04:b2:59:b6:52:e3:1f:e3: f4:2b:7f:bf:b8:a6:49:e9:98:9f:99:92:66:6b:fa: 1e:db:76:92:40:fa:e9:ef:d7:64:af:60:6b:d9:ac: 16:47:de:93:e7:ee:85:40:c6:de:96:dd:c6:c6:a7: bc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8D:A5:BB:72:33:03:5D:D7:D2:58:62:D2:3B:29:61:0B:9A:09:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/7ac2349a-1c73-32c0-8eb7-c2c3e1e9c7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl X509v3 Authority Key Identifier: keyid:34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer sbgp-ipAddrBlock: critical IPv4: 192.230.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:96:76:36:a5:a7:8d:48:7d:3a:15:f4:d7:e8:89:16:03:88: 18:f8:e7:26:fb:eb:12:52:d3:81:46:54:5f:c6:36:42:41:0b: 38:b1:7f:4b:56:ab:14:64:7e:df:2a:37:39:85:85:aa:03:46: 6f:ea:0b:4d:05:ae:6b:58:64:61:ea:f7:5a:e7:bc:d6:3b:5c: ef:c8:f1:3b:64:43:71:a3:da:b3:1e:c7:b7:12:54:b1:43:0e: a1:cd:34:f0:c4:46:40:13:3a:d4:c0:d7:f7:be:b2:36:80:36: 87:58:4d:15:fa:78:d7:25:2f:d1:b5:f8:19:e2:c0:94:24:77: 0a:a9:8a:53:8a:2e:3e:e5:49:58:1d:fc:92:c8:a8:25:35:6b: 91:b5:a0:88:60:45:f5:8f:14:9e:cc:67:33:de:7d:e8:d8:e2: 43:78:fe:56:51:18:35:f3:01:9b:a5:ca:16:f2:43:3a:73:df: 7d:50:f8:e7:28:a4:f5:dd:57:14:bb:b6:83:a7:6d:94:7d:fd: 2d:91:da:43:2f:a8:8f:a3:35:d1:f3:a1:84:69:a6:fe:1e:a7: 8c:15:04:04:be:0d:16:a2:2c:f7:cd:df:8e:02:4c:b3:f2:71: 78:a3:e1:32:86:2f:29:d7:62:5b:10:49:ea:42:f5:cf:c6:c6: 41:54:4d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGFlR1USOXS8OiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMwM2YwOWItNjQwNC00YjA0LWI5ODktZGYxNDkzZDAw Y2JiMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk YzU4ZGNkMjctOGQ2Yy00MzQ0LThkMjMtODI3YzhkZDdhNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhhc8ytXaFadEkBC7ietfMZ2LxvIPrsmKq+P iYDvAS/H8EhWZpuuEGDdPUuDphIkHiIE0AYLvxtJ5xHctfUNbdReYVdjODRf6x+0 vgvwtl2l56IHIWdmlD6QNGEFkx+MKLqp1I5TrBECOvLKcfR5cs4EM8Cj7y5HPea9 ekqmyELj+0PJknxEbLs8iBKPJERnn///PXDvy8tlgDkG9NzOKAmQNXhrnjKvbDBv j56plapvrpMvFIEGVU9V9aALGY9bnHuke6RYSgmuBLJZtlLjH+P0K3+/uKZJ6Zif mZJma/oe23aSQPrp79dkr2Br2awWR96T5+6FQMbelt3Gxqe8tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+NpbtyMwNd19JYYtI7KWELmglkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYzAz ZjA5Yi02NDA0LTRiMDQtYjk4OS1kZjE0OTNkMDBjYmIvN2FjMjM0OWEtMWM3My0z MmMwLThlYjctYzJjM2UxZTljN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmMwM2YwOWItNjQwNC00YjA0LWI5 ODktZGYxNDkzZDAwY2JiLzJjMDNmMDliLTY0MDQtNGIwNC1iOTg5LWRmMTQ5M2Qw MGNiYi5jcmwwHwYDVR0jBBgwFoAUNNTpryfg84tUOq5Uc1OTMI7ua18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYzAzZjA5Yi02NDA0LTRiMDQtYjk4OS1kZjE0 OTNkMDBjYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwObtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeWdjalp41IfToV9NfoiRYDiBj45yb76xJS04FGVF/GNkJBCzixf0tW qxRkft8qNzmFhaoDRm/qC00FrmtYZGHq91rnvNY7XO/I8TtkQ3Gj2rMex7cSVLFD DqHNNPDERkATOtTA1/e+sjaANodYTRX6eNclL9G1+BniwJQkdwqpilOKLj7lSVgd /JLIqCU1a5G1oIhgRfWPFJ7MZzPefejY4kN4/lZRGDXzAZulyhbyQzpz331Q+Oco pPXdVxS7toOnbZR9/S2R2kMvqI+jNdHzoYRppv4ep4wVBAS+DRaiLPfN344CTLPy cXij4TKGLynXYlsQSepC9c/GxkFUTYY= -----END CERTIFICATE-----Generated at Fri Mar 14 13:34:07 2025 by rpki-client