$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/2e65219f-29ff-3573-8d5a-86fb730a80a5.roa File: 2e65219f-29ff-3573-8d5a-86fb730a80a5.roa (raw, json) Hash identifier: 09VhPQhm1j6EncZhaAqSP0K58I/D128PKEz+i5ycNxQ= Subject key identifier: 7A:2A:12:13:F4:28:99:E4:02:A7:86:32:97:19:14:36:60:44:68:16 Certificate issuer: /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81 Certificate serial: 010D0C9F43285848E16BE02C2FD1DEB4E7BFEA40 Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/2e65219f-29ff-3573-8d5a-86fb730a80a5.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 62695 IP address blocks: 192.154.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e0:2c:2f:d1:de:b4:e7:bf:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=6a7d2200-03af-4c53-9ae3-24b98ea90f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:97:3d:0e:d8:e7:62:8f:38:61:10:5a:a0:35: b1:c0:dd:87:05:ab:e8:ac:58:44:c6:37:a0:49:31: 1a:cb:85:28:34:18:87:a7:21:72:04:ab:b3:2c:a2: f7:8d:8b:84:37:67:0c:28:e8:ef:b9:40:7e:21:2a: 6f:e5:d1:69:b4:55:d9:bb:a5:f5:90:09:15:14:ea: 60:b9:38:0f:9d:c4:49:41:c1:e8:d0:63:ae:14:98: a3:57:66:17:ed:73:12:bc:5c:d1:0d:65:83:d1:96: 6c:d0:fe:c9:ba:65:e7:ef:17:89:9e:53:91:db:56: e5:21:fe:7e:e0:c0:5d:4d:a4:bf:3a:6c:5c:95:23: a6:b6:48:79:f2:1b:f3:b0:e2:af:1f:65:99:0e:d0: 37:d3:de:18:2a:05:83:e8:e1:de:5f:3a:87:39:8e: 53:aa:30:12:f0:21:2d:e9:15:da:02:11:84:29:b0: e9:1c:95:35:69:13:b5:51:47:43:e4:c4:78:58:89: 09:98:21:38:36:f7:bc:d8:a5:5c:b1:27:4f:9c:91: e2:3b:5e:ba:2b:6b:96:d0:af:f2:8f:c6:16:a3:47: 64:99:ed:2f:ea:2d:65:13:02:b9:9a:83:da:f7:db: 5f:b6:19:9d:9e:03:9f:4f:0e:ad:7b:68:99:00:ab: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2A:12:13:F4:28:99:E4:02:A7:86:32:97:19:14:36:60:44:68:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/2e65219f-29ff-3573-8d5a-86fb730a80a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl X509v3 Authority Key Identifier: keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer sbgp-ipAddrBlock: critical IPv4: 192.154.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ff:8c:43:c3:a6:e3:e8:8b:d9:d2:24:e5:10:dc:66:fa:2c: af:75:48:2a:55:bc:ca:f1:21:84:8b:08:c5:40:25:29:b2:69: 74:bb:ec:8d:30:b7:cd:42:2c:18:0a:6b:ce:f1:dd:01:91:aa: 2f:b4:60:1e:83:0c:ea:9a:6e:15:07:47:c3:7a:97:ed:12:64: 46:3f:10:7e:b6:07:dd:7e:e0:61:00:e2:93:14:e4:65:78:cf: 88:38:45:40:e2:a8:b6:fd:0d:22:bf:42:e2:d4:cc:8f:be:d5: 5b:d4:94:73:a2:ed:ef:ba:04:87:7f:c7:4a:83:01:4b:49:2c: ce:67:4a:19:c2:d1:25:9e:5e:14:ff:6c:61:c5:84:16:22:82: f3:e9:f0:25:79:29:ab:ec:a2:ab:70:c6:42:74:1c:b6:39:4b: 30:b5:3c:a0:27:09:91:0c:90:21:8c:23:8c:79:a3:e4:42:be: 23:4e:09:10:06:c2:6b:8e:5e:bf:cc:1a:28:65:0d:e3:c7:48: 48:c2:8e:99:5e:cc:d3:af:17:67:f8:60:4e:ea:0b:cc:e7:c3: b3:9e:2b:03:ba:38:9b:f3:c6:aa:b3:16:76:21:dc:55:27:a9: eb:57:1a:8e:a0:5a:76:bd:59:eb:b9:40:2d:e3:7c:36:70:19: dc:f3:93:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+AsL9HetOe/6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFhYmQ0ZDItZDAwNy00N2NlLWFlYjEtMDk4ZjlkYjJj YzgxMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NmE3ZDIyMDAtMDNhZi00YzUzLTlhZTMtMjRiOThlYTkwZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jc9DtjnYo84YRBaoDWxwN2HBavorFhExjeg STEay4UoNBiHpyFyBKuzLKL3jYuEN2cMKOjvuUB+ISpv5dFptFXZu6X1kAkVFOpg uTgPncRJQcHo0GOuFJijV2YX7XMSvFzRDWWD0ZZs0P7JumXn7xeJnlOR21blIf5+ 4MBdTaS/OmxclSOmtkh58hvzsOKvH2WZDtA3094YKgWD6OHeXzqHOY5TqjAS8CEt 6RXaAhGEKbDpHJU1aRO1UUdD5MR4WIkJmCE4Nve82KVcsSdPnJHiO166K2uW0K/y j8YWo0dkme0v6i1lEwK5moPa99tfthmdngOfTw6te2iZAKsuhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoqEhP0KJnkAqeGMpcZFDZgRGgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFi ZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThmOWRiMmNjODEvMmU2NTIxOWYtMjlmZi0z NTczLThkNWEtODZmYjczMGE4MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmFhYmQ0ZDItZDAwNy00N2NlLWFl YjEtMDk4ZjlkYjJjYzgxL2ZhYWJkNGQyLWQwMDctNDdjZS1hZWIxLTA5OGY5ZGIy Y2M4MS5jcmwwHwYDVR0jBBgwFoAUxUfVTESwcD5oVY8GruvS/C3QaawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFiZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThm OWRiMmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr/jEPDpuPoi9nSJOUQ3Gb6LK91SCpVvMrxIYSLCMVAJSmyaXS77I0w t81CLBgKa87x3QGRqi+0YB6DDOqabhUHR8N6l+0SZEY/EH62B91+4GEA4pMU5GV4 z4g4RUDiqLb9DSK/QuLUzI++1VvUlHOi7e+6BId/x0qDAUtJLM5nShnC0SWeXhT/ bGHFhBYigvPp8CV5KavsoqtwxkJ0HLY5SzC1PKAnCZEMkCGMI4x5o+RCviNOCRAG wmuOXr/MGihlDePHSEjCjplezNOvF2f4YE7qC8znw7OeKwO6OJvzxqqzFnYh3FUn qetXGo6gWna9Weu5QC3jfDZwGdzzkz4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:32 2025 by rpki-client