$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa File: aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa (raw, json) Hash identifier: XBRpYqeYrMxAulFKBIKSGtbV6oCwszIpSJ7vaKHaTko= Subject key identifier: 57:1C:ED:08:0B:2A:81:98:65:72:86:F9:99:00:98:4C:E8:CF:D8:B8 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F432858495D89697C6A65331DB36BC880 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 0 IP address blocks: 192.58.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:69:7c:6a:65:33:1d:b3:6b:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=9363e1b4-dd68-4865-9811-b9471f702110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:0f:36:d5:64:db:d2:eb:bb:71:73:f3:3f: e7:38:79:5d:ec:36:d3:a6:3f:7b:3f:2d:10:35:f5: af:4c:02:dc:f5:d1:b5:a4:96:c4:48:94:3c:50:17: b2:a9:bc:d3:b0:c3:c1:1f:c2:c1:4d:3c:19:60:04: 64:59:45:1b:a1:af:ff:a2:3f:75:4d:fc:98:8d:0a: 78:bf:dc:0f:ca:b5:85:4e:52:39:6d:c0:50:86:b9: 15:d4:fc:97:20:94:85:9e:ed:9a:5a:9b:43:ca:af: 19:fb:9b:18:65:26:77:f1:89:a9:2d:5e:9c:bf:7d: 0b:d6:7c:a8:26:95:c6:ab:ff:d9:a7:a2:e2:8c:fa: 9e:cc:c3:3e:54:04:f0:64:e1:1e:42:5d:07:4f:d9: 0f:75:7c:be:c0:af:a1:ed:8f:df:1e:76:3b:af:9e: c5:6c:4a:8f:e3:03:11:63:07:ce:e3:53:ed:48:01: ac:94:4c:e7:77:7e:d9:57:4d:ec:37:b5:14:b0:c4: b3:35:db:bf:25:47:59:74:2f:fc:17:14:7d:fc:0d: 97:83:8c:73:d2:52:e2:cf:b4:e9:a1:ef:ea:c0:75: c5:45:d2:f8:92:e6:4a:1a:c4:d0:87:a5:4b:a6:43: d3:61:87:93:0a:d5:05:98:d9:95:cd:a9:ae:06:21: d7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1C:ED:08:0B:2A:81:98:65:72:86:F9:99:00:98:4C:E8:CF:D8:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8b:b7:c7:7f:0a:56:1e:f4:5b:50:0f:0f:71:ac:c4:77:04: 98:56:cd:f8:55:44:9c:f3:e0:6e:27:43:55:07:93:ea:5c:6f: d6:6b:dc:99:a6:75:80:6f:fb:3f:8a:c2:8c:96:fa:e3:e1:a9: 52:7e:fe:09:f4:7b:3b:62:03:5f:1e:13:53:21:51:d6:5e:01: 54:7f:99:d0:ac:9f:d9:6f:a3:32:bb:91:45:dd:29:46:94:cf: 26:ca:4b:b6:4c:51:34:66:14:0d:88:96:7d:81:53:71:9f:49: f1:c7:a5:1b:67:22:20:78:73:9d:7f:61:ce:86:f3:95:81:04: 51:05:84:d2:74:21:44:f4:43:94:7e:4c:94:3c:a3:56:e5:56: 84:a0:f4:b9:38:8f:8d:cc:d9:6d:20:2e:5e:88:c5:65:48:7e: 26:b0:dd:4f:6f:a6:57:79:c5:0c:a1:1c:9c:b9:46:ae:d1:38: bc:f0:6b:20:36:8a:d6:2e:2c:63:5b:e1:5e:31:3d:4b:56:ac: 86:aa:59:45:f6:cf:76:fd:df:2e:48:69:aa:59:dc:ee:53:cb: 3f:ed:1b:39:10:01:7f:48:c0:18:7b:5c:6f:e3:a2:f0:cd:30: 17:14:d4:24:93:e7:01:65:d5:d7:6a:4b:ee:62:ec:4a:12:ff: df:a1:84:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWl8amUzHbNryIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTM2M2UxYjQtZGQ2OC00ODY1LTk4MTEtYjk0NzFmNzAyMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaIPNtVk29Lru3Fz8z/nOHld7DbTpj97Py0Q NfWvTALc9dG1pJbESJQ8UBeyqbzTsMPBH8LBTTwZYARkWUUboa//oj91TfyYjQp4 v9wPyrWFTlI5bcBQhrkV1PyXIJSFnu2aWptDyq8Z+5sYZSZ38YmpLV6cv30L1nyo JpXGq//Zp6LijPqezMM+VATwZOEeQl0HT9kPdXy+wK+h7Y/fHnY7r57FbEqP4wMR YwfO41PtSAGslEznd37ZV03sN7UUsMSzNdu/JUdZdC/8FxR9/A2Xg4xz0lLiz7Tp oe/qwHXFRdL4kuZKGsTQh6VLpkPTYYeTCtUFmNmVzamuBiHXJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcc7QgLKoGYZXKG+ZkAmEzoz9i4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYWFhMTVlNTktZDVhMC0z ZDI0LThiMGEtN2MzZTE3OGI0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyLt8d/ClYe9FtQDw9xrMR3BJhWzfhVRJzz4G4nQ1UHk+pcb9Zr3Jmm dYBv+z+KwoyW+uPhqVJ+/gn0eztiA18eE1MhUdZeAVR/mdCsn9lvozK7kUXdKUaU zybKS7ZMUTRmFA2Iln2BU3GfSfHHpRtnIiB4c51/Yc6G85WBBFEFhNJ0IUT0Q5R+ TJQ8o1blVoSg9Lk4j43M2W0gLl6IxWVIfiaw3U9vpld5xQyhHJy5Rq7ROLzwayA2 itYuLGNb4V4xPUtWrIaqWUX2z3b93y5IaapZ3O5Tyz/tGzkQAX9IwBh7XG/jovDN MBcU1CST5wFl1ddqS+5i7EoS/9+hhHo= -----END CERTIFICATE-----Generated at Sat Apr 5 17:52:07 2025 by rpki-client