$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/dbfd6d41-d2c9-32c2-9407-1167bf7d0baa.roa File: dbfd6d41-d2c9-32c2-9407-1167bf7d0baa.roa (raw, json) Hash identifier: 4sPmZ64ez2bd8y0hJarH02oF+2mNqLj3bG416f2HEDo= Subject key identifier: 5E:31:E1:66:6A:59:C2:A2:8A:E8:B8:AB:B7:B6:AC:C6:1D:52:30:AF Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F43285848E16BE874EC44744637F25080 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/dbfd6d41-d2c9-32c2-9407-1167bf7d0baa.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 1403 IP address blocks: 192.222.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e8:74:ec:44:74:46:37:f2:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=2e91c980-2501-4e01-bd24-6c8b6e09c3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:0b:57:2a:db:09:5b:46:d1:f8:25:dd:25: 0b:b7:c1:7f:ed:a4:af:74:bd:97:27:fe:da:c3:dd: 00:a5:96:9d:e7:0d:1c:60:43:69:68:47:ee:c7:bf: 91:e2:7f:0a:a9:b7:e9:05:60:f3:c9:39:84:d3:e4: 1f:99:e5:91:b0:44:01:3b:9b:f7:99:8c:b4:5b:c3: 2d:fe:31:3a:2c:68:66:c2:22:f8:c7:ed:1f:38:4e: ae:e5:22:fe:4e:88:c2:0a:d0:6a:d1:7a:4f:38:a1: 84:aa:c9:a8:b2:8d:36:6f:25:a5:95:18:2d:44:20: d8:79:b9:7f:70:ab:3c:54:ec:f1:27:2c:12:ec:4a: cd:eb:d9:a2:7b:2e:4c:2e:06:db:38:1b:bb:19:ef: 8e:c0:e9:69:37:f6:7a:e5:29:65:15:90:26:dc:16: a2:e9:d4:d3:1a:35:f5:38:71:cf:6a:39:95:ab:1c: c8:f7:7d:23:91:9a:8b:34:ea:d1:32:b4:4b:9e:86: 8a:fd:64:29:36:a8:bb:93:20:6b:80:93:0f:01:ce: e5:67:39:96:85:93:b6:ee:d7:a2:13:99:43:2a:62: 7f:bb:1c:d3:34:2c:6c:67:48:97:5b:ea:27:37:a9: 03:41:19:79:49:09:02:54:d4:97:fb:db:ed:57:17: 2a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:31:E1:66:6A:59:C2:A2:8A:E8:B8:AB:B7:B6:AC:C6:1D:52:30:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/dbfd6d41-d2c9-32c2-9407-1167bf7d0baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 192.222.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:33:b4:b6:10:3b:32:f4:84:df:47:0f:16:c3:f0:71:65:bf: e6:e2:26:39:b4:f1:47:50:46:56:c6:c3:27:86:72:b7:d4:70: a3:72:8d:f6:67:4c:9c:00:87:bc:bd:2e:e9:e8:9f:30:62:30: 92:36:02:5d:e9:33:1e:ab:b7:6b:de:02:52:1b:5e:1f:63:61: d0:83:59:10:f3:26:64:f2:1a:bd:89:6f:4c:cf:ea:b1:aa:90: 59:e1:eb:15:95:1c:e1:fd:50:c6:63:1c:c1:10:ff:36:e1:a6: 37:db:ab:2e:6a:b2:89:ed:20:27:12:b7:59:01:2f:aa:72:af: 8e:6e:f5:5e:cb:f9:bf:66:11:3f:c8:cd:23:d2:7b:bd:ca:24: e7:ef:65:ad:0c:8c:69:5b:20:80:c5:bc:b5:22:63:ba:7d:9e: a5:2a:ea:9d:0a:83:60:78:7f:15:df:d5:de:e5:ec:73:5e:a2: 20:02:62:d1:78:f2:b7:12:49:b3:47:bb:40:86:e6:34:cb:f9: 6e:3d:c5:78:32:93:eb:ad:50:94:e6:f3:d0:09:b0:38:b1:a2: da:6f:00:9c:f8:56:ea:00:2c:2d:e0:7b:82:0b:94:10:cb:0a: dd:4d:13:46:d3:dd:0e:d9:5f:56:98:cd:99:b5:fc:d7:a7:73: 09:49:d7:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+h07ER0RjfyUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MmU5MWM5ODAtMjUwMS00ZTAxLWJkMjQtNmM4YjZlMDljM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtsLVyrbCVtG0fgl3SULt8F/7aSvdL2XJ/7a w90ApZad5w0cYENpaEfux7+R4n8KqbfpBWDzyTmE0+QfmeWRsEQBO5v3mYy0W8Mt /jE6LGhmwiL4x+0fOE6u5SL+TojCCtBq0XpPOKGEqsmoso02byWllRgtRCDYebl/ cKs8VOzxJywS7ErN69miey5MLgbbOBu7Ge+OwOlpN/Z65SllFZAm3Bai6dTTGjX1 OHHPajmVqxzI930jkZqLNOrRMrRLnoaK/WQpNqi7kyBrgJMPAc7lZzmWhZO27tei E5lDKmJ/uxzTNCxsZ0iXW+onN6kDQRl5SQkCVNSX+9vtVxcqvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4x4WZqWcKiiui4q7e2rMYdUjCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvZGJmZDZkNDEtZDJjOS0z MmMyLTk0MDctMTE2N2JmN2QwYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwN6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoztLYQOzL0hN9HDxbD8HFlv+biJjm08UdQRlbGwyeGcrfUcKNyjfZn TJwAh7y9LunonzBiMJI2Al3pMx6rt2veAlIbXh9jYdCDWRDzJmTyGr2Jb0zP6rGq kFnh6xWVHOH9UMZjHMEQ/zbhpjfbqy5qsontICcSt1kBL6pyr45u9V7L+b9mET/I zSPSe73KJOfvZa0MjGlbIIDFvLUiY7p9nqUq6p0Kg2B4fxXf1d7l7HNeoiACYtF4 8rcSSbNHu0CG5jTL+W49xXgyk+utUJTm89AJsDixotpvAJz4VuoALC3ge4ILlBDL Ct1NE0bT3Q7ZX1aYzZm1/NencwlJ15w= -----END CERTIFICATE-----Generated at Wed Apr 16 20:54:52 2025 by rpki-client