$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa File: b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa (raw, json) Hash identifier: MxOO3hz7TOJ48NHlWtnu755EGzlE2ApDpZQ6Z5X9IzU= Subject key identifier: C4:E3:7A:DB:E0:13:4F:18:3A:E5:43:50:90:65:E4:65:A7:51:2A:48 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F432858495D896E0E42A27AABC4F16D00 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 0 IP address blocks: 192.58.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:6e:0e:42:a2:7a:ab:c4:f1:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=c85e58d8-2125-4587-b7d9-3c0bc9ea1074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:bd:09:80:f9:5d:8f:0f:cf:d5:9c:32:eb: 81:90:e7:74:20:2f:19:f1:0d:ee:5a:1c:18:4e:ae: 7e:79:9e:42:4a:70:d4:b0:e1:0a:89:ea:53:20:32: 19:a3:d3:a6:a6:a6:95:1f:01:20:53:1e:87:bd:5b: ee:b5:6f:5a:1b:b1:0a:e4:10:5a:8d:c8:7e:da:0a: b9:a9:40:c9:44:9e:6a:95:1f:a9:c4:36:a8:56:6e: 54:7d:5b:6b:52:cb:60:06:fe:68:7f:37:31:0e:79: e0:ff:ba:1f:38:9a:f4:b3:4a:98:e6:93:ae:ae:a1: 9f:ae:72:1f:e6:58:00:c8:58:fa:9e:4a:e9:5a:d6: 23:ac:bc:1d:7a:e9:d4:b0:10:e0:9a:ab:a6:b0:8a: 45:89:2e:fa:9e:9e:f5:ee:76:60:d0:cc:48:70:06: b4:59:09:3e:80:ae:ef:ed:d7:b2:e7:14:0e:ac:c7: d1:6f:3c:f0:2d:04:ec:f8:c4:1e:1f:b5:69:d0:41: e2:d7:04:dc:32:f3:f0:79:81:fc:a2:65:6a:c7:64: 52:96:91:8d:17:87:5a:05:5c:dd:eb:ad:75:37:2d: 07:9e:d7:c3:fe:00:74:5e:18:c5:03:61:62:8c:53: a4:4e:c1:38:a9:1c:a7:ff:4b:26:7b:c9:09:94:52: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E3:7A:DB:E0:13:4F:18:3A:E5:43:50:90:65:E4:65:A7:51:2A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:58:4a:a4:7b:c9:d6:a9:8d:7c:a3:d4:5f:e3:fa:8b:d7:a3: 23:41:a9:25:a7:0e:ed:69:ac:f9:2b:ce:8c:e2:15:4c:fe:4a: 38:cd:66:3c:f4:d9:4f:23:ee:b0:80:9c:13:40:58:76:db:8d: 01:8c:66:41:8f:07:5f:56:5c:58:b0:e5:84:9e:7d:28:e6:7e: 8a:c0:9b:6b:d3:c8:cf:74:2b:56:a9:79:f2:75:d9:bd:83:6b: 93:c2:70:c6:81:53:d0:8e:36:32:6f:77:d7:1e:11:1e:b4:e0: 46:de:70:1b:51:5f:32:98:b6:2e:19:4c:7f:93:58:69:73:67: 9f:40:1a:da:fc:80:cd:0e:ab:0d:4b:28:64:cc:7d:44:d6:e0: 51:d3:d9:c2:fa:97:a2:38:46:69:ff:a1:ae:54:97:3c:ca:f6: 12:5c:a7:a1:4a:d3:30:1f:06:00:d1:76:c3:4c:02:0d:09:0b: 43:b8:6b:61:a3:a7:3e:30:97:f7:5b:c6:82:ba:f4:b4:77:5f: 6d:ad:0e:64:44:80:9e:5d:61:29:63:de:10:d2:66:59:10:3b: c5:69:c4:f4:0d:c2:20:87:80:ba:90:8a:e1:6a:65:a6:b6:74: c7:4f:bf:a0:ac:d2:7b:e7:1c:93:21:0d:23:8f:e5:69:22:0b: 50:26:1a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiW4OQqJ6q8TxbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk Yzg1ZTU4ZDgtMjEyNS00NTg3LWI3ZDktM2MwYmM5ZWExMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL+9CYD5XY8Pz9WcMuuBkOd0IC8Z8Q3uWhwY Tq5+eZ5CSnDUsOEKiepTIDIZo9OmpqaVHwEgUx6HvVvutW9aG7EK5BBajch+2gq5 qUDJRJ5qlR+pxDaoVm5UfVtrUstgBv5ofzcxDnng/7ofOJr0s0qY5pOurqGfrnIf 5lgAyFj6nkrpWtYjrLwdeunUsBDgmqumsIpFiS76np717nZg0MxIcAa0WQk+gK7v 7dey5xQOrMfRbzzwLQTs+MQeH7Vp0EHi1wTcMvPweYH8omVqx2RSlpGNF4daBVzd 6611Ny0HntfD/gB0XhjFA2FijFOkTsE4qRyn/0sme8kJlFIWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTjetvgE08YOuVDUJBl5GWnUSpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYjhiOWY0OTgtNGJjMC0z YzNlLWIyMDMtYTdmYzY2ODBhNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1YSqR7ydapjXyj1F/j+ovXoyNBqSWnDu1prPkrzoziFUz+SjjNZjz0 2U8j7rCAnBNAWHbbjQGMZkGPB19WXFiw5YSefSjmforAm2vTyM90K1apefJ12b2D a5PCcMaBU9CONjJvd9ceER604EbecBtRXzKYti4ZTH+TWGlzZ59AGtr8gM0Oqw1L KGTMfUTW4FHT2cL6l6I4Rmn/oa5UlzzK9hJcp6FK0zAfBgDRdsNMAg0JC0O4a2Gj pz4wl/dbxoK69LR3X22tDmREgJ5dYSlj3hDSZlkQO8VpxPQNwiCHgLqQiuFqZaa2 dMdPv6Cs0nvnHJMhDSOP5WkiC1AmGtk= -----END CERTIFICATE-----Generated at Sat Apr 5 17:52:12 2025 by rpki-client