$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa File: 42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa (raw, json) Hash identifier: HTEs4PxgPdDLAtLrCCAkrubivImdvrd0SQQ+YhkSdyg= Subject key identifier: 31:74:0B:83:94:D4:3E:80:55:ED:DA:3D:8C:BF:62:F5:05:4E:00:06 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FFDB27FE9C3BDD8074FDB000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa Signing time: Tue 25 Feb 2025 11:39:35 +0000 ROA not before: Tue 25 Feb 2025 11:39:35 +0000 ROA not after: Mon 26 May 2025 10:39:35 +0000 asID: 30036 IP address blocks: 192.119.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:db:27:fe:9c:3b:dd:80:74:fd:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 25 11:39:35 2025 GMT Not After : May 26 10:39:35 2025 GMT Subject: CN=7e590cbd-e838-4f3d-9e93-24857030aebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:a2:5a:6a:aa:13:37:6c:45:b8:f8:1c:70: 3a:37:7f:05:8e:d1:9c:1c:0f:ae:ec:a0:52:7a:a6: 23:ae:64:e2:79:70:8b:f3:40:fc:c8:c6:d5:8e:30: ae:ea:b0:bb:88:06:84:9e:91:b7:50:55:fc:30:81: 8f:d5:ab:d5:bf:29:65:61:d2:3a:5b:67:bc:ee:af: bb:2c:66:23:76:01:97:13:8c:f7:ae:58:dc:eb:7f: c5:3f:c3:14:eb:b0:c5:89:15:af:a8:f8:3d:61:fb: 59:12:d2:a6:9b:1e:c4:2b:bb:77:f0:b1:ce:59:e2: ad:79:53:e1:75:1d:7d:3e:be:cc:20:aa:b0:f5:5b: 5d:31:b5:e8:79:7a:87:e8:ff:60:21:90:21:dc:b3: c5:c0:d7:a3:86:36:a8:05:3f:3f:ed:40:6c:ea:0e: 68:5f:17:ac:09:0f:97:53:23:f7:46:a9:4f:77:d0: cb:54:26:0a:1c:84:02:53:09:21:a0:e1:3e:ff:9b: eb:43:53:d0:fb:07:0f:cf:96:cc:19:73:dd:c8:1d: da:c9:07:3a:fe:14:2c:a5:9c:0e:c4:8b:1e:6f:06: 56:d0:0f:74:d6:5b:7d:32:18:a1:40:a7:c8:ad:89: e7:c4:8c:60:fb:4d:b8:b5:58:34:c7:5e:39:8e:77: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:74:0B:83:94:D4:3E:80:55:ED:DA:3D:8C:BF:62:F5:05:4E:00:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:02:a1:88:d5:31:0b:cc:b2:c3:cb:20:5f:3e:99:fb:8c:e1: b9:b2:a6:d0:8a:18:a2:18:ad:05:7c:42:d3:14:fb:c0:9f:ea: 1e:0a:a6:1d:ea:4d:68:0c:9f:27:c3:ef:26:14:56:ba:0d:f3: c5:e2:28:97:7f:fc:46:4d:fd:83:1b:ae:82:49:8b:98:5c:ae: 5b:eb:4b:ce:f7:e1:ab:6e:14:aa:a4:e9:30:ab:4a:2d:7f:46: dd:07:26:95:34:64:01:46:98:24:39:ac:1d:ff:75:f4:41:77: 30:47:90:30:d8:08:64:81:ac:f9:b8:68:c4:ca:5c:32:a6:59: 19:de:98:3a:ba:e1:41:a0:7c:34:a4:f5:cf:8e:5c:a0:ac:04: 07:b8:15:74:60:6c:30:07:9f:91:6e:2f:5d:e3:99:0e:ea:b7: c0:65:0d:71:f2:75:cf:f5:ea:88:8c:72:4a:7a:e0:30:a4:3c: 81:06:d2:35:17:57:39:df:b8:17:79:32:73:09:51:b4:ee:fb: 3a:51:57:5f:b2:ed:92:97:a6:ed:9a:b9:df:35:27:56:9c:9e: e9:be:89:12:ab:e4:41:60:0e:7d:aa:d5:bf:0f:19:75:9b:71: 71:fe:bb:53:f6:fb:fb:2b:90:9b:9b:ea:3a:a6:ba:7b:8a:a6: 51:81:65:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/2yf+nDvdgHT9sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNTExMzkzNVoXDTI1MDUyNjEwMzkzNVowLzEtMCsGA1UEAxMk N2U1OTBjYmQtZTgzOC00ZjNkLTllOTMtMjQ4NTcwMzBhZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NWiWmqqEzdsRbj4HHA6N38FjtGcHA+u7KBS eqYjrmTieXCL80D8yMbVjjCu6rC7iAaEnpG3UFX8MIGP1avVvyllYdI6W2e87q+7 LGYjdgGXE4z3rljc63/FP8MU67DFiRWvqPg9YftZEtKmmx7EK7t38LHOWeKteVPh dR19Pr7MIKqw9VtdMbXoeXqH6P9gIZAh3LPFwNejhjaoBT8/7UBs6g5oXxesCQ+X UyP3RqlPd9DLVCYKHIQCUwkhoOE+/5vrQ1PQ+wcPz5bMGXPdyB3ayQc6/hQspZwO xIsebwZW0A901lt9MhihQKfIrYnnxIxg+024tVg0x145jncq6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF0C4OU1D6AVe3aPYy/YvUFTgAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDJkNjQzYjYtN2ZkNS0z OTI5LWEzOGQtMzA3ZjNiNmZkODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYCoYjVMQvMssPLIF8+mfuM4bmyptCKGKIYrQV8QtMU+8Cf6h4Kph3q TWgMnyfD7yYUVroN88XiKJd//EZN/YMbroJJi5hcrlvrS8734atuFKqk6TCrSi1/ Rt0HJpU0ZAFGmCQ5rB3/dfRBdzBHkDDYCGSBrPm4aMTKXDKmWRnemDq64UGgfDSk 9c+OXKCsBAe4FXRgbDAHn5FuL13jmQ7qt8BlDXHydc/16oiMckp64DCkPIEG0jUX VznfuBd5MnMJUbTu+zpRV1+y7ZKXpu2aud81J1acnum+iRKr5EFgDn2q1b8PGXWb cXH+u1P2+/srkJub6jqmunuKplGBZbU= -----END CERTIFICATE-----Generated at Sat Apr 12 15:16:33 2025 by rpki-client