$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/599bc078-5d3b-3144-ac9b-d5cec72f4062.roa File: 599bc078-5d3b-3144-ac9b-d5cec72f4062.roa (raw, json) Hash identifier: NtNCew2FVKYFw9wOSEAKd7AXnb2TiA3Vvzyyr8ceDRc= Subject key identifier: 2E:54:49:0E:BC:E4:BF:F6:85:C4:BB:49:2E:66:51:98:13:CD:9E:C1 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F432858495D8969FB3B6AB0494051FFC0 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/599bc078-5d3b-3144-ac9b-d5cec72f4062.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 0 IP address blocks: 192.67.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:69:fb:3b:6a:b0:49:40:51:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=e4f1742c-0ccd-4f08-9375-33bce4d7ca96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:25:26:06:14:ef:ba:49:a2:3a:c6:07:ab: 73:98:ad:96:1a:33:03:e2:1a:6a:2e:60:cc:ba:50: 98:f2:06:b3:92:e8:de:52:f0:1c:4a:a3:27:86:93: f8:1a:78:1d:8e:42:8e:e2:1e:2d:a4:03:ed:2e:1f: 71:b7:00:dc:1e:d6:bf:67:c1:ad:cf:b1:9c:4e:aa: 31:fa:00:7b:dd:3f:2b:bd:c9:03:a9:99:42:0a:9b: 32:81:1b:1e:d2:a4:f0:57:20:ff:5e:25:98:0e:06: 95:35:9d:ae:04:5b:96:e7:58:0f:5e:bb:14:72:70: 70:9e:72:8e:16:67:28:12:48:8a:06:fa:b8:54:a7: 9d:c4:67:7a:9c:93:e8:89:09:95:6e:2f:c5:61:06: 07:69:19:38:c5:8c:be:34:5e:7b:73:41:01:f1:95: f0:fe:8b:85:60:7b:67:1d:bf:42:eb:f0:41:95:37: 03:3a:e0:f0:ec:82:a7:c6:b3:30:f9:69:de:ba:b4: 0c:65:bb:ad:29:e3:3b:d2:c4:33:9a:c0:47:6e:59: c5:60:ef:05:43:24:e6:91:14:b7:62:40:ab:50:ab: ff:39:bf:d0:52:55:0c:52:28:d2:ad:0c:47:fe:8f: a5:5a:f0:d4:65:07:bc:29:8f:34:e3:9f:e4:d3:c4: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:54:49:0E:BC:E4:BF:F6:85:C4:BB:49:2E:66:51:98:13:CD:9E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/599bc078-5d3b-3144-ac9b-d5cec72f4062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.67.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6d:9f:20:aa:e4:6d:b7:d6:44:24:60:22:18:04:c6:3c:e8: f0:c0:04:9b:4d:db:da:f0:b8:cd:7f:01:8a:80:61:db:c9:5d: 3d:84:6e:1a:3c:fb:5b:70:19:9e:12:fe:3d:94:6e:ea:8f:b3: 88:ec:8f:0c:66:7c:5f:8e:25:1e:a8:51:a5:b0:b4:83:9c:8e: 51:6a:16:ec:56:98:f9:4a:60:6b:6b:3b:42:43:48:e1:5d:eb: c1:b0:77:db:23:e5:23:23:73:2b:49:22:65:9c:24:e8:fc:50: 2e:45:9a:7e:a1:b9:3f:b9:06:29:b9:51:f2:1a:7f:25:e8:0f: 33:16:d4:d0:f7:bf:bf:20:07:8a:02:02:5b:3f:9d:a8:dc:ba: 47:61:16:20:0b:91:d9:c8:c5:dc:d3:b7:2b:50:75:0a:d7:fa: 66:e7:1e:12:fa:ed:21:35:ae:78:0a:7a:fe:4f:f6:37:0c:88: 3f:f4:07:28:f0:38:79:37:87:87:93:ea:22:24:9e:dc:77:06: b9:7a:14:10:32:84:d5:95:68:14:63:09:cb:60:50:cb:d5:fa: 53:a2:a4:fc:87:1e:99:c5:6e:ec:0a:44:fc:cc:cc:bc:6b:e1: 2a:09:6c:39:c2:72:5d:9c:7c:1d:44:57:ed:8b:08:50:b7:4d: 23:a4:69:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWn7O2qwSUBR/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTRmMTc0MmMtMGNjZC00ZjA4LTkzNzUtMzNiY2U0ZDdjYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5slJgYU77pJojrGB6tzmK2WGjMD4hpqLmDM ulCY8gazkujeUvAcSqMnhpP4GngdjkKO4h4tpAPtLh9xtwDcHta/Z8Gtz7GcTqox +gB73T8rvckDqZlCCpsygRse0qTwVyD/XiWYDgaVNZ2uBFuW51gPXrsUcnBwnnKO FmcoEkiKBvq4VKedxGd6nJPoiQmVbi/FYQYHaRk4xYy+NF57c0EB8ZXw/ouFYHtn Hb9C6/BBlTcDOuDw7IKnxrMw+WneurQMZbutKeM70sQzmsBHblnFYO8FQyTmkRS3 YkCrUKv/Ob/QUlUMUijSrQxH/o+lWvDUZQe8KY8045/k08S2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5USQ685L/2hcS7SS5mUZgTzZ7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNTk5YmMwNzgtNWQzYi0z MTQ0LWFjOWItZDVjZWM3MmY0MDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEOuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxtnyCq5G231kQkYCIYBMY86PDABJtN29rwuM1/AYqAYdvJXT2Ebho8 +1twGZ4S/j2UbuqPs4jsjwxmfF+OJR6oUaWwtIOcjlFqFuxWmPlKYGtrO0JDSOFd 68Gwd9sj5SMjcytJImWcJOj8UC5Fmn6huT+5Bim5UfIafyXoDzMW1ND3v78gB4oC Als/najcukdhFiALkdnIxdzTtytQdQrX+mbnHhL67SE1rngKev5P9jcMiD/0Byjw OHk3h4eT6iIkntx3Brl6FBAyhNWVaBRjCctgUMvV+lOipPyHHpnFbuwKRPzMzLxr 4SoJbDnCcl2cfB1EV+2LCFC3TSOkadg= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:47 2025 by rpki-client