$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa File: 89cb74d1-7e77-329d-a801-eadfe71b0df2.roa (raw, json) Hash identifier: HAeLJtE+RHdhnaXgvLI8e7kIKiwuyS7Sv8OUKTR8fFY= Subject key identifier: 81:42:CD:E2:C4:19:D6:19:26:64:70:3A:83:8A:E6:68:89:99:3C:52 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56C66B0619D792F6230E80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 141.193.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c6:6b:06:19:d7:92:f6:23:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=3b184be9-f81f-47f0-b6ac-d5ee3eb4f22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:ac:d8:c1:97:02:d4:ea:19:d3:ff:0f:cd: 23:78:96:c2:f6:87:e3:a3:0d:9e:cb:34:a1:e4:1b: f8:f8:68:93:a2:17:81:85:3a:7c:0b:d1:bd:55:80: dd:98:52:b7:00:b9:e2:7f:e5:a9:42:6d:fa:9d:3a: a9:ec:c0:ac:2c:08:1a:b9:2c:42:bb:de:2e:c3:ba: 8e:52:29:80:9b:84:1c:1a:de:49:42:3b:f7:d4:68: cd:36:69:36:41:63:1f:e2:47:d6:92:67:be:a4:68: d3:46:d5:a6:2a:23:85:85:81:44:ef:f3:b8:31:d0: ca:f7:18:49:09:e4:30:4f:35:51:a5:30:bd:c2:a2: 96:2d:6f:cb:bc:f6:05:d1:5b:72:5c:3e:1b:de:e5: 8c:1f:53:7b:de:b1:02:21:25:0e:42:ba:e5:1c:cc: 42:5b:d5:de:4a:ca:0e:98:0a:2b:5e:66:49:23:84: e5:d1:be:2f:5d:9c:3f:83:bc:0a:d1:50:5d:5e:c8: 50:5b:b8:29:07:5e:e6:eb:40:4d:76:16:f0:8e:11: 17:62:eb:87:e2:b2:06:bd:a4:35:41:df:3c:6d:c3: 74:c8:31:d9:f3:0b:92:4f:57:79:c1:8e:c3:3a:7c: 5d:e9:d1:04:02:74:cb:8d:0e:71:19:50:66:46:ff: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:42:CD:E2:C4:19:D6:19:26:64:70:3A:83:8A:E6:68:89:99:3C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 141.193.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e9:11:96:05:af:75:8a:a0:e1:9b:e9:35:f8:fa:47:4d:dd: 3a:a6:cd:9e:dc:0d:26:70:d6:09:68:cb:93:e6:92:a8:09:b6: 57:33:fe:43:95:d1:a1:3f:29:51:9b:a5:d6:e3:6b:5a:85:e1: 33:52:a1:ce:53:9e:be:3e:27:24:62:e5:21:6b:22:d2:cd:f2: 69:ed:9d:29:da:be:bb:fd:b2:ef:bb:43:9a:7e:61:d3:2c:22: 1a:4d:2e:a8:9a:54:0d:65:91:99:8f:f0:ae:b3:b9:1f:cc:2e: ff:62:df:eb:71:c5:2c:94:fd:04:a9:e9:37:2e:9f:4a:f8:82: d8:50:92:9b:97:00:82:6f:d2:2f:be:2a:f3:2e:67:38:11:5e: f8:fd:85:94:c6:8e:82:ed:c7:08:94:3b:e5:71:79:cc:05:e1: 0c:69:9a:0b:7a:5a:05:e4:67:68:15:68:bb:04:09:79:88:37: fc:c0:99:37:7d:85:cb:fe:fa:c7:ba:a3:9f:df:5d:1d:bb:b0: f1:b0:81:f5:dd:26:48:91:b9:d0:a5:29:cd:69:58:ec:06:8d: 71:d1:b0:25:85:89:c3:d8:71:4a:d3:6e:68:88:b3:a6:9f:95: fc:63:09:35:35:b0:88:e7:9a:11:9c:7c:a4:90:e5:80:1f:43: 61:a0:b6:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsZrBhnXkvYjDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2IxODRiZTktZjgxZi00N2YwLWI2YWMtZDVlZTNlYjRmMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4qs2MGXAtTqGdP/D80jeJbC9ofjow2eyzSh 5Bv4+GiToheBhTp8C9G9VYDdmFK3ALnif+WpQm36nTqp7MCsLAgauSxCu94uw7qO UimAm4QcGt5JQjv31GjNNmk2QWMf4kfWkme+pGjTRtWmKiOFhYFE7/O4MdDK9xhJ CeQwTzVRpTC9wqKWLW/LvPYF0VtyXD4b3uWMH1N73rECISUOQrrlHMxCW9XeSsoO mAorXmZJI4Tl0b4vXZw/g7wK0VBdXshQW7gpB17m60BNdhbwjhEXYuuH4rIGvaQ1 Qd88bcN0yDHZ8wuST1d5wY7DOnxd6dEEAnTLjQ5xGVBmRv9ODQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFCzeLEGdYZJmRwOoOK5miJmTxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvODljYjc0ZDEtN2U3Ny0z MjlkLWE4MDEtZWFkZmU3MWIwZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfpEZYFr3WKoOGb6TX4+kdN3TqmzZ7cDSZw1gloy5PmkqgJtlcz/kOV 0aE/KVGbpdbja1qF4TNSoc5Tnr4+JyRi5SFrItLN8mntnSnavrv9su+7Q5p+YdMs IhpNLqiaVA1lkZmP8K6zuR/MLv9i3+txxSyU/QSp6Tcun0r4gthQkpuXAIJv0i++ KvMuZzgRXvj9hZTGjoLtxwiUO+VxecwF4Qxpmgt6WgXkZ2gVaLsECXmIN/zAmTd9 hcv++se6o5/fXR27sPGwgfXdJkiRudClKc1pWOwGjXHRsCWFicPYcUrTbmiIs6af lfxjCTU1sIjnmhGcfKSQ5YAfQ2GgtoY= -----END CERTIFICATE-----Generated at Fri Apr 4 19:47:27 2025 by rpki-client