$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa File: acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa (raw, json) Hash identifier: Z+8lxswfxpVrfbJQmVV63lzbwADUuMuNvc+smx02OHk= Subject key identifier: 64:C9:79:79:3A:A3:CE:18:2A:13:5C:B1:9A:A5:4D:0A:FC:CE:F6:58 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F43285848E2D11612FE2441DA21F41300 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 192.161.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:16:12:fe:24:41:da:21:f4:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=e93c50ea-80d6-4965-aaea-7e0b65af4ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f4:9e:e9:05:67:fa:c2:b5:a5:de:0d:ce:d0: 6e:2c:9e:2d:4d:0a:57:17:5c:ef:90:22:6b:be:01: 7b:13:76:60:ba:71:3c:ca:0a:55:6b:66:0b:f5:76: 7b:1e:47:18:0f:df:91:95:d4:ed:67:a0:0f:68:1f: e0:f6:74:ed:9f:2a:94:ae:78:ae:0f:6b:43:6d:13: 33:e6:91:f5:89:09:21:3f:4b:82:ce:71:50:ca:ee: ef:e1:d2:56:0e:ab:c5:0c:bc:35:5d:95:99:14:11: 26:3a:4f:97:a0:9e:4d:82:60:e3:ad:45:ab:ca:35: 41:07:e1:0d:9e:a6:e9:86:1e:a8:e3:54:cf:00:0b: 9c:91:be:af:ff:07:c7:9d:5f:d6:b4:64:b4:92:9b: e2:57:ba:f7:a3:7d:83:d5:4a:6b:0a:d4:9e:98:41: e0:f1:f2:97:8d:13:c5:63:63:8c:99:a2:f8:2f:93: e6:2e:eb:50:c1:79:11:aa:c6:ef:bc:28:86:80:3f: a5:43:9b:25:18:ad:0d:e8:98:43:22:e9:72:16:9b: 4f:c9:c3:e3:07:2e:f7:5e:d8:f3:bb:9a:e6:98:7c: bd:b6:96:99:00:46:b7:b2:75:88:48:fe:93:9a:d6: 34:3b:d5:88:22:90:09:ec:88:9b:98:f8:f5:49:6c: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C9:79:79:3A:A3:CE:18:2A:13:5C:B1:9A:A5:4D:0A:FC:CE:F6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:aa:a5:3e:11:8f:e9:54:b9:e5:a5:e8:cf:95:4d:df:6a:dd: b6:df:f8:4b:24:03:5d:c9:92:66:4a:89:9a:b9:f4:65:22:45: bb:68:c2:c9:99:26:9d:83:5f:e4:0d:4a:48:16:d1:e7:b9:27: fa:69:dd:49:b6:8a:6e:d0:41:39:9c:8d:57:70:db:b0:af:57: 9b:81:3f:63:5e:ae:ae:93:44:1b:2b:38:0d:36:1c:24:31:1a: f5:69:62:f6:52:12:fe:04:9f:a5:9d:fb:88:27:cc:cc:51:8f: 70:45:ff:00:70:1d:cc:51:b4:bc:aa:38:b3:74:24:86:8a:95: d5:e7:fb:e8:72:d8:22:28:5e:c8:c9:3a:24:2a:70:55:da:c3: 7a:be:cb:95:d9:94:2d:1b:80:c2:86:72:9b:4b:ea:d5:c9:cb: ba:4e:a4:7a:a2:a8:e8:e5:c7:71:cd:6c:1b:56:51:46:02:2f: 6a:2d:63:10:0b:8f:b2:9d:f3:d2:99:8d:20:f3:61:db:57:47: 70:dd:1b:c2:64:0f:83:9d:56:8f:b8:1f:03:5c:e3:a7:a8:01: cf:d8:ad:b1:18:6d:e2:a4:6d:88:2d:6f:fd:6f:c1:bb:9b:c0: ee:1f:94:2b:03:b1:1e:13:c8:91:69:ed:72:72:0a:3c:97:52: 7c:f2:34:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RYS/iRB2iH0EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTkzYzUwZWEtODBkNi00OTY1LWFhZWEtN2UwYjY1YWY0ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PSe6QVn+sK1pd4NztBuLJ4tTQpXF1zvkCJr vgF7E3ZgunE8ygpVa2YL9XZ7HkcYD9+RldTtZ6APaB/g9nTtnyqUrniuD2tDbRMz 5pH1iQkhP0uCznFQyu7v4dJWDqvFDLw1XZWZFBEmOk+XoJ5NgmDjrUWryjVBB+EN nqbphh6o41TPAAuckb6v/wfHnV/WtGS0kpviV7r3o32D1UprCtSemEHg8fKXjRPF Y2OMmaL4L5PmLutQwXkRqsbvvCiGgD+lQ5slGK0N6JhDIulyFptPycPjBy73Xtjz u5rmmHy9tpaZAEa3snWISP6TmtY0O9WIIpAJ7IibmPj1SWx/cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTJeXk6o84YKhNcsZqlTQr8zvZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvYWNlYzZhMjgtMzNkMy0z MmE4LWFhM2EtOWZlMjE2YzA5ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2qpT4Rj+lUueWl6M+VTd9q3bbf+EskA13JkmZKiZq59GUiRbtowsmZ Jp2DX+QNSkgW0ee5J/pp3Um2im7QQTmcjVdw27CvV5uBP2Nerq6TRBsrOA02HCQx GvVpYvZSEv4En6Wd+4gnzMxRj3BF/wBwHcxRtLyqOLN0JIaKldXn++hy2CIoXsjJ OiQqcFXaw3q+y5XZlC0bgMKGcptL6tXJy7pOpHqiqOjlx3HNbBtWUUYCL2otYxAL j7Kd89KZjSDzYdtXR3DdG8JkD4OdVo+4HwNc46eoAc/YrbEYbeKkbYgtb/1vwbub wO4flCsDsR4TyJFp7XJyCjyXUnzyNCs= -----END CERTIFICATE-----Generated at Fri Apr 4 23:43:08 2025 by rpki-client