$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa File: cf073435-3e42-3d47-9b1a-352d76f1337b.roa (raw, json) Hash identifier: hvcw4lXbZXhu4gg4VqnB4oJMlpuGzMja8vlrKBh15aM= Subject key identifier: 29:12:C3:03:2C:71:10:A8:7F:AA:64:66:41:70:C7:B2:EE:42:AB:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FFD3CE5FDA3AEE7A6883E0C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa Signing time: Tue 25 Feb 2025 11:24:47 +0000 ROA not before: Tue 25 Feb 2025 11:24:47 +0000 ROA not after: Mon 26 May 2025 10:24:47 +0000 asID: 30036 IP address blocks: 192.119.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:d3:ce:5f:da:3a:ee:7a:68:83:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 25 11:24:47 2025 GMT Not After : May 26 10:24:47 2025 GMT Subject: CN=09002ecb-2a2f-4355-8880-705f3ad4a5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8a:0b:ad:22:3b:cb:19:c6:4c:1b:31:79:ab: 86:fa:4e:53:cf:ab:dd:7e:83:a9:3c:24:ca:6b:71: 42:36:aa:f9:61:af:fd:62:72:e5:40:c3:64:59:ae: d2:dd:d8:8b:ba:ca:1b:4f:ff:41:d6:3c:2e:52:96: 83:ab:31:a4:7e:f9:f6:00:20:e9:7f:d3:22:f6:59: f8:28:e4:73:b0:67:e3:77:25:24:ca:1d:24:fe:f5: 3d:c8:02:34:f1:e9:8a:99:30:d1:63:e4:cb:0d:91: c9:64:6e:b4:7c:ee:a8:f9:19:1b:e6:ed:09:65:c3: 0f:b4:fd:9e:c3:d4:86:4e:cc:a0:d1:d4:da:31:b1: 21:bb:2c:7c:89:c3:92:3b:d1:ad:cc:61:f5:30:a4: 5d:67:60:93:3b:55:13:6b:c6:d8:0a:fc:f5:da:6a: 59:52:99:f6:89:6c:66:3c:98:7d:b6:3a:13:70:bb: 6d:67:07:bd:0f:b4:33:20:8e:00:ec:d8:50:4f:ff: 12:6b:94:a3:bd:a4:98:62:19:90:7d:45:3d:d9:31: 3d:6e:ad:56:c2:54:90:68:6a:e3:f7:3b:5a:ca:9a: 73:0c:5f:71:82:18:ba:26:b5:ac:9b:47:20:0c:5d: c6:8b:a8:38:e1:98:36:5c:86:96:66:ce:6e:68:b6: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:C3:03:2C:71:10:A8:7F:AA:64:66:41:70:C7:B2:EE:42:AB:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:80:b9:e9:c4:93:16:91:5b:f7:4b:8d:ed:49:44:16:69:2e: 36:74:f0:cc:db:bb:77:39:d4:88:26:40:bf:c9:6b:bf:4b:16: 59:9b:f1:01:09:ef:2f:9c:f6:f3:67:44:2c:07:a0:c9:a1:99: 9e:d8:80:b5:bc:6e:6b:38:37:49:fa:a5:1b:7f:ed:eb:fa:de: 7d:07:04:90:3d:d8:3f:c1:08:4d:0b:e2:2d:1c:c6:e6:4a:95: 30:0f:b5:8e:ad:eb:38:35:39:d8:b6:32:f7:94:1f:ea:7b:55: 5f:2b:51:63:35:a5:ec:e3:f0:9d:d7:8e:2c:23:a9:eb:17:dd: c6:7d:01:51:aa:ad:22:4f:11:8f:ed:d9:3c:86:e3:c5:c3:62: 65:58:96:50:d9:3d:f3:43:3f:88:21:9c:96:cf:4b:09:ed:09: 66:bb:94:dc:d2:12:09:89:68:e3:7a:e5:9e:09:9a:8d:15:87: a5:96:84:09:dd:2e:bc:eb:42:74:09:3e:2e:5f:92:b9:ec:96: dd:db:f9:36:b2:0a:c3:3c:a7:4f:3d:e1:69:4d:38:39:3c:d3: 68:de:d7:bd:fb:b9:e4:95:a9:3f:7a:a8:24:3a:30:86:f8:c5: 5f:93:1d:fe:a0:79:cb:d6:27:60:5c:4f:c6:63:21:63:aa:5f: f7:51:42:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/085f2jruemiD4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNTExMjQ0N1oXDTI1MDUyNjEwMjQ0N1owLzEtMCsGA1UEAxMk MDkwMDJlY2ItMmEyZi00MzU1LTg4ODAtNzA1ZjNhZDRhNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjooLrSI7yxnGTBsxeauG+k5Tz6vdfoOpPCTK a3FCNqr5Ya/9YnLlQMNkWa7S3diLusobT/9B1jwuUpaDqzGkfvn2ACDpf9Mi9ln4 KORzsGfjdyUkyh0k/vU9yAI08emKmTDRY+TLDZHJZG60fO6o+Rkb5u0JZcMPtP2e w9SGTsyg0dTaMbEhuyx8icOSO9GtzGH1MKRdZ2CTO1UTa8bYCvz12mpZUpn2iWxm PJh9tjoTcLttZwe9D7QzII4A7NhQT/8Sa5SjvaSYYhmQfUU92TE9bq1WwlSQaGrj 9ztayppzDF9xghi6JrWsm0cgDF3Gi6g44Zg2XIaWZs5uaLYJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkSwwMscRCof6pkZkFwx7LuQqvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2YwNzM0MzUtM2U0Mi0z ZDQ3LTliMWEtMzUyZDc2ZjEzMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCAuenEkxaRW/dLje1JRBZpLjZ08Mzbu3c51IgmQL/Ja79LFlmb8QEJ 7y+c9vNnRCwHoMmhmZ7YgLW8bms4N0n6pRt/7ev63n0HBJA92D/BCE0L4i0cxuZK lTAPtY6t6zg1Odi2MveUH+p7VV8rUWM1pezj8J3XjiwjqesX3cZ9AVGqrSJPEY/t 2TyG48XDYmVYllDZPfNDP4ghnJbPSwntCWa7lNzSEgmJaON65Z4Jmo0Vh6WWhAnd LrzrQnQJPi5fkrnslt3b+TayCsM8p0894WlNODk802je1737ueSVqT96qCQ6MIb4 xV+THf6gecvWJ2BcT8ZjIWOqX/dRQpc= -----END CERTIFICATE-----Generated at Wed Apr 9 00:03:40 2025 by rpki-client