$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa File: da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa (raw, json) Hash identifier: ncFuK21jvGwsVL6lA1wmZFA22C+U71S7arDMsa/kNBU= Subject key identifier: 73:D6:52:89:60:2E:25:EA:9E:F9:3D:1E:B7:B7:FF:F4:26:D2:74:DC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FFD39D54D1569710FA394400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa Signing time: Tue 25 Feb 2025 11:24:24 +0000 ROA not before: Tue 25 Feb 2025 11:24:24 +0000 ROA not after: Mon 26 May 2025 10:24:24 +0000 asID: 30036 IP address blocks: 192.119.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:d3:9d:54:d1:56:97:10:fa:39:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 25 11:24:24 2025 GMT Not After : May 26 10:24:24 2025 GMT Subject: CN=21bb280a-100e-4e3a-b306-d0c3e75e233a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:5d:de:70:21:6f:84:2c:88:f5:be:d9:b4: d3:7b:ad:c4:55:3a:91:3a:a6:ed:0f:6d:e0:18:7b: 1c:a4:36:32:37:bb:23:d2:82:43:02:c1:a5:3f:7b: 68:6d:3a:63:83:02:63:0e:54:31:dd:46:e4:03:91: b9:dc:60:04:44:4b:98:d3:30:2f:e1:6a:44:db:95: c3:1b:03:a7:38:ec:86:6c:65:17:e1:e8:e1:a3:e6: 6d:c5:86:eb:54:76:ce:94:f2:8d:d8:18:58:46:0d: 1e:56:74:61:58:c0:f6:b1:2f:46:9d:40:01:72:96: 3d:ad:d5:6a:ec:b8:75:ab:cc:a3:7b:38:d7:12:5d: 85:67:4d:49:72:8c:f0:70:f6:09:3b:ea:47:64:70: 9e:8e:eb:6a:fc:50:4c:5b:80:46:aa:d7:05:df:14: e5:88:93:35:52:d7:ea:83:be:d6:88:ce:c6:8c:04: 07:43:3c:27:44:b7:f9:00:cb:13:1b:27:25:e0:c3: ff:ae:92:ef:aa:01:bd:b1:50:eb:d8:b7:52:40:16: 8a:44:b7:37:4c:78:58:f7:43:9a:da:03:07:b5:ff: 45:ec:83:ec:fe:50:5e:25:e9:2c:b1:00:78:80:19: d5:2b:c6:36:89:bc:82:a9:ae:75:9f:4d:f3:b5:31: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D6:52:89:60:2E:25:EA:9E:F9:3D:1E:B7:B7:FF:F4:26:D2:74:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:67:69:94:73:74:d7:af:b3:98:21:54:99:12:c8:6a:38:68: e8:b9:9c:fc:71:64:ae:42:0b:67:39:c8:07:d0:d3:49:08:8b: 8a:2a:51:3f:c0:83:1c:21:2c:73:53:7b:65:02:91:9f:4f:0a: bb:fd:33:30:91:c5:db:a5:2f:31:38:c2:20:5c:c6:00:d8:66: 7f:09:4e:45:40:ed:fb:d8:a7:13:16:89:dc:82:5d:7e:07:98: 1a:ac:a8:7f:5b:24:7c:f4:99:7c:91:24:65:b0:59:b0:82:a8: 85:27:e9:55:51:88:04:ea:20:86:74:ed:a1:34:8a:b2:e5:e0: d9:19:fe:3c:f5:58:5c:c2:9a:e8:d8:79:28:cf:89:bc:02:c6: b8:be:f9:f8:34:0a:9c:b1:b6:f3:97:12:3f:c2:66:ba:2c:96: f5:76:40:68:b4:5c:4f:6c:a5:89:8f:b0:98:98:87:a5:a7:75: bc:72:d2:80:26:11:12:c5:ed:6e:b8:12:62:19:15:e1:8e:9d: 44:62:34:33:12:c2:37:3c:f6:0a:6b:b2:44:b0:cd:8c:05:66: e9:a8:00:4d:47:73:66:fe:85:93:cf:9c:2b:cc:90:7f:6a:6f: 56:7d:5e:c4:41:f2:b4:50:84:a0:7e:0d:dc:d4:61:fb:a4:6d: 0e:de:92:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/051U0VaXEPo5RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNTExMjQyNFoXDTI1MDUyNjEwMjQyNFowLzEtMCsGA1UEAxMk MjFiYjI4MGEtMTAwZS00ZTNhLWIzMDYtZDBjM2U3NWUyMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYJd3nAhb4QsiPW+2bTTe63EVTqROqbtD23g GHscpDYyN7sj0oJDAsGlP3tobTpjgwJjDlQx3UbkA5G53GAEREuY0zAv4WpE25XD GwOnOOyGbGUX4ejho+ZtxYbrVHbOlPKN2BhYRg0eVnRhWMD2sS9GnUABcpY9rdVq 7Lh1q8yjezjXEl2FZ01JcozwcPYJO+pHZHCejutq/FBMW4BGqtcF3xTliJM1Utfq g77WiM7GjAQHQzwnRLf5AMsTGycl4MP/rpLvqgG9sVDr2LdSQBaKRLc3THhY90Oa 2gMHtf9F7IPs/lBeJekssQB4gBnVK8Y2ibyCqa51n03ztTEmBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPWUolgLiXqnvk9Hre3//Qm0nTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGE5Y2NiYmQtYjFhOS0z MDNiLWIyOWMtODI5ZWFhYTFhZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpnaZRzdNevs5ghVJkSyGo4aOi5nPxxZK5CC2c5yAfQ00kIi4oqUT/A gxwhLHNTe2UCkZ9PCrv9MzCRxdulLzE4wiBcxgDYZn8JTkVA7fvYpxMWidyCXX4H mBqsqH9bJHz0mXyRJGWwWbCCqIUn6VVRiATqIIZ07aE0irLl4NkZ/jz1WFzCmujY eSjPibwCxri++fg0CpyxtvOXEj/CZroslvV2QGi0XE9spYmPsJiYh6Wndbxy0oAm ERLF7W64EmIZFeGOnURiNDMSwjc89gprskSwzYwFZumoAE1Hc2b+hZPPnCvMkH9q b1Z9XsRB8rRQhKB+DdzUYfukbQ7ekjU= -----END CERTIFICATE-----Generated at Tue Apr 8 23:51:16 2025 by rpki-client