$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa File: 3004d2b4-bece-3042-9132-e897abee7f3a.roa (raw, json) Hash identifier: iywRWlJRNYD3hEB+OSz3TBVGchHmwFVJA2jiPV0bcLA= Subject key identifier: 26:88:DA:4C:CA:6D:13:EC:43:DC:74:9E:A3:78:6C:99:1A:3F:F1:C6 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584953C414D9F6B527C94E2D6140 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 0 IP address blocks: 192.35.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:14:d9:f6:b5:27:c9:4e:2d:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=02644c49-6626-442f-bea5-1508be4cea27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:ee:97:df:09:6c:32:16:5f:49:d4:3c:96: ff:8f:69:87:52:a3:3a:0f:5d:17:fd:a2:ca:b8:5e: 6d:b2:78:b7:5c:36:67:ff:37:d4:68:98:64:45:21: af:25:38:6d:1e:ce:09:81:00:31:15:73:bc:1d:2d: 5a:04:e9:7c:d1:cc:1f:0e:0d:de:a0:31:42:20:5b: ba:b4:8e:33:62:58:de:ab:bb:44:03:c5:f0:d5:41: 41:4e:a0:a9:26:1d:ec:dd:03:4a:89:1f:0c:5b:c9: be:52:14:b3:11:cf:95:2a:5e:3a:a1:f4:61:03:59: d5:49:2f:65:56:50:0f:e9:5e:b1:78:72:f9:66:52: f3:4c:d0:66:b4:0e:ff:57:7c:a0:68:fb:fc:da:7a: 76:8e:48:97:9c:ff:67:bb:22:11:ee:59:30:fd:fe: 6c:64:a2:a3:2c:cb:08:b0:ee:1d:27:d8:49:94:52: c8:d0:98:d3:97:99:cb:80:fd:ec:9a:a0:a2:6a:c6: d2:fb:a8:1e:8e:6b:e7:69:32:f0:3e:82:15:56:4a: b9:b7:ad:61:df:0f:d2:40:23:40:72:c3:b3:3d:5b: d8:4e:c6:8d:e2:95:ab:30:c5:d2:a3:f2:5f:2a:ed: bc:a8:e2:63:32:d1:8c:ba:45:ab:ec:8b:c3:ec:63: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:88:DA:4C:CA:6D:13:EC:43:DC:74:9E:A3:78:6C:99:1A:3F:F1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.35.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1f:af:fa:06:a1:7b:31:60:7a:33:8f:41:94:c3:36:99:97: f1:0f:d6:26:c6:67:55:6f:94:4b:50:ed:36:5e:cd:88:c3:98: 71:0c:38:49:2d:55:d3:89:ee:0d:e7:5c:40:59:8b:09:89:43: 54:d4:61:e0:e7:1a:70:37:82:e0:d3:a8:5b:0b:9c:7a:dd:db: 5d:a5:7e:b4:76:46:a0:00:3b:bb:3e:b1:a6:52:27:79:9a:eb: 61:03:bb:34:8c:16:bd:27:db:15:04:57:21:4e:84:6b:27:69: e2:d3:13:e3:b6:6a:53:ea:e0:08:af:e0:79:83:0a:d9:ba:72: e3:93:dd:4b:33:90:ac:64:2e:0f:65:ea:97:ff:6c:ba:0a:19: 18:6f:ab:d6:60:68:12:3d:dc:d3:95:c1:73:66:81:1e:57:9f: 5f:45:9e:e6:c3:b0:92:e7:97:c8:fb:dc:43:a4:0f:47:ea:ab: 15:76:4b:c7:14:67:60:08:0a:42:00:98:f9:58:47:5d:12:76: 7c:cd:c4:b7:38:dd:fd:b9:9a:a6:10:2d:c3:bf:3e:08:6a:b2: 8f:3d:5f:04:59:24:26:6b:d1:a2:18:fa:cd:96:f3:49:b9:7b: fc:09:e8:aa:d8:17:c8:2c:b0:43:e6:61:d5:b6:65:98:5c:d5: 39:ff:28:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBTZ9rUnyU4tYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDI2NDRjNDktNjYyNi00NDJmLWJlYTUtMTUwOGJlNGNlYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLvul98JbDIWX0nUPJb/j2mHUqM6D10X/aLK uF5tsni3XDZn/zfUaJhkRSGvJThtHs4JgQAxFXO8HS1aBOl80cwfDg3eoDFCIFu6 tI4zYljeq7tEA8Xw1UFBTqCpJh3s3QNKiR8MW8m+UhSzEc+VKl46ofRhA1nVSS9l VlAP6V6xeHL5ZlLzTNBmtA7/V3ygaPv82np2jkiXnP9nuyIR7lkw/f5sZKKjLMsI sO4dJ9hJlFLI0JjTl5nLgP3smqCiasbS+6gejmvnaTLwPoIVVkq5t61h3w/SQCNA csOzPVvYTsaN4pWrMMXSo/JfKu28qOJjMtGMukWr7IvD7GMvFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaI2kzKbRPsQ9x0nqN4bJkaP/HGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMzAwNGQyYjQtYmVjZS0z MDQyLTkxMzItZTg5N2FiZWU3ZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFofr/oGoXsxYHozj0GUwzaZl/EP1ibGZ1VvlEtQ7TZezYjDmHEMOEkt VdOJ7g3nXEBZiwmJQ1TUYeDnGnA3guDTqFsLnHrd212lfrR2RqAAO7s+saZSJ3ma 62EDuzSMFr0n2xUEVyFOhGsnaeLTE+O2alPq4Aiv4HmDCtm6cuOT3UszkKxkLg9l 6pf/bLoKGRhvq9ZgaBI93NOVwXNmgR5Xn19FnubDsJLnl8j73EOkD0fqqxV2S8cU Z2AICkIAmPlYR10SdnzNxLc43f25mqYQLcO/Pghqso89XwRZJCZr0aIY+s2W80m5 e/wJ6KrYF8gssEPmYdW2ZZhc1Tn/KJI= -----END CERTIFICATE-----Generated at Wed Apr 9 06:34:47 2025 by rpki-client