$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa File: eae45858-8801-3371-b8aa-053a42b2e3ee.roa (raw, json) Hash identifier: 8v4DicP56FD2R9LAMr3wR9+kcvcRZdzzJHthsbHhlzY= Subject key identifier: 33:F1:D0:33:10:AF:82:61:EA:EF:0F:D4:26:7C:C8:56:01:72:7E:D2 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F432858495D896E3DF8EDF6FCA2897A80 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 3477 IP address blocks: 192.58.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:6e:3d:f8:ed:f6:fc:a2:89:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=66427551-8f32-48f7-a748-394c2ea56664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:51:66:4b:f1:a0:9c:b1:91:6a:2b:fd:25: 82:27:91:29:57:73:ed:e6:71:20:51:31:7f:6f:0c: 3d:5e:94:61:54:47:df:72:3f:bf:ed:eb:6e:6c:da: 0e:b8:1c:e4:16:cd:5d:ee:53:44:55:fe:38:56:77: dd:e4:f1:47:f8:1c:55:cc:47:1d:31:15:e7:88:df: 03:da:3e:d4:d4:f3:97:8f:c7:55:f2:86:f6:82:17: 9f:2d:d1:66:00:95:82:8d:90:02:9d:30:49:e2:28: 99:e0:7b:43:ed:4b:fa:aa:b9:b7:63:14:71:58:4e: f1:d6:18:02:74:4d:e3:7b:26:05:3e:dd:51:7f:5c: c8:81:f6:c3:ca:f9:02:bc:81:a3:ee:7a:81:6a:8a: e3:73:e1:8b:6e:78:b9:cb:85:fa:db:b7:54:dd:bd: 4c:d6:27:60:0d:8a:ad:b8:63:13:f6:db:85:d5:80: dc:28:d7:e6:31:eb:95:45:a8:f6:28:90:56:40:45: 36:c8:8b:58:08:2f:52:f4:52:d5:ae:b9:ca:2b:ca: 27:d3:f6:5a:73:3c:c4:3c:ec:97:ee:de:b6:b6:cd: ee:fd:6c:c1:8b:6a:a2:72:41:15:9c:0b:18:9c:2f: 2b:91:d2:d2:27:27:06:37:8f:4a:e8:ad:79:9b:d9: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F1:D0:33:10:AF:82:61:EA:EF:0F:D4:26:7C:C8:56:01:72:7E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c3:47:6d:79:75:02:b7:63:67:15:01:80:0e:37:61:1e:94: 43:f1:67:27:56:dc:15:00:2e:2b:78:d8:79:5f:1d:71:35:48: 82:54:d5:2e:4f:1a:21:ba:90:d0:97:97:d9:34:48:c2:73:75: 9b:25:a9:64:f0:20:46:7f:f3:13:16:94:c4:97:40:a9:eb:c5: 29:8b:e6:89:89:13:19:a6:eb:18:1b:cf:af:b8:9c:6a:e7:6e: eb:68:0a:aa:ac:eb:e4:96:f2:98:47:d2:9a:b1:9a:a9:97:b6: 50:34:ad:cf:f5:8c:70:24:12:3e:80:5c:76:1a:36:b0:6d:a8: 3e:a8:02:76:f1:6c:13:59:b8:92:72:c2:0d:c7:4b:79:b3:de: 73:57:54:fc:89:ef:9e:49:22:08:af:86:12:99:d2:2d:9f:7d: 17:0b:41:7a:a3:cc:23:51:6c:12:a0:61:4b:e8:30:f3:cd:db: c5:65:05:1b:e4:22:29:b1:a1:32:21:18:69:00:ec:d6:60:72: 45:d7:d5:06:f0:2e:d2:e6:92:40:bc:8d:ed:f1:ca:e5:5f:35: 5b:55:18:57:00:36:52:24:da:00:6d:0e:17:82:89:57:61:d2: 44:e2:db:6a:d3:9b:95:8e:ed:a3:e6:25:00:19:38:bd:b4:f7: bb:08:06:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiW49+O32/KKJeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjY0Mjc1NTEtOGYzMi00OGY3LWE3NDgtMzk0YzJlYTU2NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP9RZkvxoJyxkWor/SWCJ5EpV3Pt5nEgUTF/ bww9XpRhVEffcj+/7etubNoOuBzkFs1d7lNEVf44Vnfd5PFH+BxVzEcdMRXniN8D 2j7U1POXj8dV8ob2ghefLdFmAJWCjZACnTBJ4iiZ4HtD7Uv6qrm3YxRxWE7x1hgC dE3jeyYFPt1Rf1zIgfbDyvkCvIGj7nqBaorjc+GLbni5y4X627dU3b1M1idgDYqt uGMT9tuF1YDcKNfmMeuVRaj2KJBWQEU2yItYCC9S9FLVrrnKK8on0/ZaczzEPOyX 7t62ts3u/WzBi2qickEVnAsYnC8rkdLSJycGN49K6K15m9mJvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPx0DMQr4Jh6u8P1CZ8yFYBcn7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvZWFlNDU4NTgtODgwMS0z MzcxLWI4YWEtMDUzYTQyYjJlM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHDR215dQK3Y2cVAYAON2EelEPxZydW3BUALit42HlfHXE1SIJU1S5P GiG6kNCXl9k0SMJzdZslqWTwIEZ/8xMWlMSXQKnrxSmL5omJExmm6xgbz6+4nGrn butoCqqs6+SW8phH0pqxmqmXtlA0rc/1jHAkEj6AXHYaNrBtqD6oAnbxbBNZuJJy wg3HS3mz3nNXVPyJ755JIgivhhKZ0i2ffRcLQXqjzCNRbBKgYUvoMPPN28VlBRvk IimxoTIhGGkA7NZgckXX1QbwLtLmkkC8je3xyuVfNVtVGFcANlIk2gBtDheCiVdh 0kTi22rTm5WO7aPmJQAZOL2097sIBpk= -----END CERTIFICATE-----Generated at Sat Apr 5 03:45:28 2025 by rpki-client