$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/5e1da7f9-f38c-3fee-a2ce-f217907851ba.roa File: 5e1da7f9-f38c-3fee-a2ce-f217907851ba.roa (raw, json) Hash identifier: FZGbGGk6XyTcYumZXHhEsWDgoM5aG/JfKSTigZqCXHc= Subject key identifier: 06:14:33:57:2D:91:A1:C6:D6:6C:17:F9:36:73:89:74:45:91:FD:50 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F43285848BA563F61A9E4E838D46BB240 Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/5e1da7f9-f38c-3fee-a2ce-f217907851ba.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 7018 IP address blocks: 192.100.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:3f:61:a9:e4:e8:38:d4:6b:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=573c7be7-02ed-4880-971d-27418bb2cae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:52:3c:64:28:1b:75:90:3b:2a:8b:0f:b2:b7: 4a:60:98:c2:88:1f:39:93:7f:0f:eb:d0:a3:90:a2: 9b:62:4f:68:b7:5b:5f:38:bd:1d:5f:bb:77:33:f6: ea:10:cd:eb:61:5e:fe:40:6b:48:e6:60:af:ad:2b: ac:df:63:15:35:a2:91:b8:f1:69:18:c9:a5:78:d6: 45:21:29:e5:04:91:c3:6c:00:a7:9c:e1:d0:b7:16: 18:e5:43:d0:8d:61:82:49:f3:da:77:4c:28:f7:e3: e9:f8:8e:26:b6:14:24:68:66:71:ce:b3:91:92:67: 41:2c:f3:2b:b1:f3:22:88:1e:78:f4:01:3a:ca:1d: bd:ed:d9:7f:e4:42:a0:dd:85:37:14:20:0d:7b:fd: e8:88:0b:88:72:3d:46:d5:68:97:05:f2:23:96:e4: 72:8e:55:60:12:a6:85:df:79:2f:59:64:47:f4:e4: bb:11:73:63:71:bc:07:7d:32:9e:b7:11:96:26:e8: 08:2d:97:c3:f8:a4:38:b6:03:e3:14:36:cf:35:7c: b1:6c:5d:6b:e9:80:0b:c0:88:6c:ec:06:1f:08:be: 58:9d:ee:a0:61:7e:62:38:f3:cd:2e:71:8f:64:a7: bd:ee:0c:bb:d4:6b:42:b4:76:40:ff:66:eb:e8:9f: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:14:33:57:2D:91:A1:C6:D6:6C:17:F9:36:73:89:74:45:91:FD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/5e1da7f9-f38c-3fee-a2ce-f217907851ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: 192.100.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:18:27:7a:b1:f5:0a:e3:96:ac:16:3a:3a:78:e0:c1:25:14: 46:d5:a1:ad:f2:ed:4b:31:48:02:90:4f:b9:37:b5:6d:66:95: b3:1d:09:d7:a0:57:89:9b:e1:e8:39:75:4b:dc:55:0f:d1:89: 70:25:7c:ae:c5:a6:2b:f1:c6:7b:17:f8:4d:a6:dc:4d:c5:e6: 35:8d:1e:0e:84:c8:74:96:02:c1:be:b3:e5:77:f1:3d:77:d3: 72:8e:7a:12:27:d5:c7:81:62:9a:35:f7:e5:9a:b8:07:58:4c: fc:fb:0e:3d:be:44:03:4b:c5:d0:c9:f8:e2:c5:18:ce:40:7a: 9c:d6:16:2f:2c:63:ca:49:18:b7:de:42:04:bb:e3:b1:ef:97: 7d:9a:e8:65:e2:bb:4b:19:7f:98:b1:4f:2c:80:11:64:af:7d: f0:2a:34:84:68:4c:7a:71:74:67:4b:41:39:10:82:bd:34:91: 05:82:6d:6c:3a:16:59:cd:9c:1e:f8:d6:6c:0e:08:49:8b:a1: 31:ae:dc:b6:69:41:bd:6d:24:fb:60:6d:0e:71:e0:ce:96:d9: 44:7d:5f:ce:26:c3:6d:54:f4:db:d2:4c:2b:32:91:93:eb:10: 85:d6:f1:f1:93:0d:57:b0:87:8d:d5:6b:7b:9a:c6:76:f7:78: 2f:2a:eb:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6Vj9hqeToONRrskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk NTczYzdiZTctMDJlZC00ODgwLTk3MWQtMjc0MThiYjJjYWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1I8ZCgbdZA7KosPsrdKYJjCiB85k38P69Cj kKKbYk9ot1tfOL0dX7t3M/bqEM3rYV7+QGtI5mCvrSus32MVNaKRuPFpGMmleNZF ISnlBJHDbACnnOHQtxYY5UPQjWGCSfPad0wo9+Pp+I4mthQkaGZxzrORkmdBLPMr sfMiiB549AE6yh297dl/5EKg3YU3FCANe/3oiAuIcj1G1WiXBfIjluRyjlVgEqaF 33kvWWRH9OS7EXNjcbwHfTKetxGWJugILZfD+KQ4tgPjFDbPNXyxbF1r6YALwIhs 7AYfCL5Yne6gYX5iOPPNLnGPZKe97gy71GtCtHZA/2br6J+jdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYUM1ctkaHG1mwX+TZziXRFkf1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvNWUxZGE3ZjktZjM4Yy0z ZmVlLWEyY2UtZjIxNzkwNzg1MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUYJ3qx9QrjlqwWOjp44MElFEbVoa3y7UsxSAKQT7k3tW1mlbMdCdeg V4mb4eg5dUvcVQ/RiXAlfK7FpivxxnsX+E2m3E3F5jWNHg6EyHSWAsG+s+V38T13 03KOehIn1ceBYpo19+WauAdYTPz7Dj2+RANLxdDJ+OLFGM5AepzWFi8sY8pJGLfe QgS747Hvl32a6GXiu0sZf5ixTyyAEWSvffAqNIRoTHpxdGdLQTkQgr00kQWCbWw6 FlnNnB741mwOCEmLoTGu3LZpQb1tJPtgbQ5x4M6W2UR9X84mw21U9NvSTCsykZPr EIXW8fGTDVewh43Va3uaxnb3eC8q60c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:34 2025 by rpki-client