$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa File: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (raw, json) Hash identifier: 5DZ44htpCienvXGnYlO05LFQPSB3dO6cexxaJnLjeXg= Subject key identifier: 07:E5:44:88:80:3C:7C:6A:1D:50:A8:A3:C7:DF:0E:06:76:42:1D:41 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F43285848B4C0D4BEE41805E472109880 Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 21976 IP address blocks: 192.51.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d4:be:e4:18:05:e4:72:10:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=430a4bb2-78fb-4791-a563-c1728da03c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:46:64:ab:29:3d:dd:07:ba:7f:65:e7:e9: e0:b7:2c:77:28:48:f9:48:e6:76:0c:8d:e2:0a:21: cc:60:5a:a4:23:0a:63:be:80:cc:c3:d8:be:97:8d: e2:de:44:85:ad:94:c0:8c:07:66:b5:e6:09:9b:1c: b4:30:29:b0:6c:dd:f9:e0:2e:16:13:47:93:48:2a: 80:5a:3c:33:d7:78:86:8b:09:01:ee:5b:d2:27:b5: a4:2b:22:f5:09:9c:99:fc:56:da:44:1f:d2:d1:9f: 64:24:4f:3c:e9:5b:5c:f8:e9:b4:6b:c4:8e:37:ea: c4:7c:2d:66:e1:7d:6a:87:a0:f0:d8:53:a5:aa:ac: a8:c5:8c:68:0b:9d:77:cd:4f:4c:df:ec:ad:26:11: 44:aa:83:ae:c2:72:3d:ce:91:ca:12:ba:b0:a4:40: 9a:cb:36:91:02:88:8f:7d:98:a0:d8:b9:de:a9:d8: 64:76:b4:69:68:98:c2:ec:cf:bb:06:5d:2e:cc:df: 89:29:70:5b:ea:12:ee:3d:d5:37:aa:d0:93:7e:21: a1:27:aa:cf:9d:52:49:74:a0:8a:94:73:3d:22:51: df:29:f3:d5:06:65:5b:ba:41:98:0e:90:b4:ff:23: 4e:4a:a4:ec:46:60:10:60:bd:47:37:f4:2f:93:81: ed:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E5:44:88:80:3C:7C:6A:1D:50:A8:A3:C7:DF:0E:06:76:42:1D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: 192.51.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:15:4b:21:4e:e5:69:45:05:94:4a:3b:98:b2:8b:3d:83:da: 37:b8:30:89:15:44:e7:16:f3:d0:91:22:10:be:db:e3:8d:30: 90:5a:2e:36:d2:23:53:5f:f7:08:17:39:e5:09:95:79:83:9c: 40:20:82:8b:2b:4a:de:48:6f:3c:4f:63:17:63:a2:bf:45:ed: ff:15:79:3f:d7:db:f7:11:2e:87:4f:c7:5e:4e:21:8a:9d:20: b1:ee:4c:08:73:29:df:94:45:70:c7:00:79:58:ca:0e:4a:25: 9e:df:fb:72:ce:ae:37:18:a6:6f:9a:e6:e6:b4:4c:a4:33:67: 9a:e8:77:5e:f9:15:db:26:05:9d:82:dd:cc:5f:5b:42:2a:bb: 4e:75:3a:ed:14:86:bc:8e:ec:52:05:ca:e8:39:1e:29:6a:ea: 16:af:8c:af:60:21:6f:aa:81:40:8f:f2:80:4d:a5:53:45:19: 33:17:af:98:84:b3:61:ba:47:6a:9a:81:e2:9e:f7:d3:61:65: fa:ce:9b:27:9b:ef:5c:17:d1:a8:04:a5:b6:26:6c:af:eb:e2: 4b:b2:56:56:f9:84:04:01:25:54:e3:a0:cd:75:49:77:9c:dc: 64:62:3c:97:19:c5:8d:74:11:d2:46:a2:3a:44:3d:a2:9d:a8: fd:f3:d3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNS+5BgF5HIQmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NDMwYTRiYjItNzhmYi00NzkxLWE1NjMtYzE3MjhkYTAzYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMpGZKspPd0Hun9l5+ngtyx3KEj5SOZ2DI3i CiHMYFqkIwpjvoDMw9i+l43i3kSFrZTAjAdmteYJmxy0MCmwbN354C4WE0eTSCqA Wjwz13iGiwkB7lvSJ7WkKyL1CZyZ/FbaRB/S0Z9kJE886Vtc+Om0a8SON+rEfC1m 4X1qh6Dw2FOlqqyoxYxoC513zU9M3+ytJhFEqoOuwnI9zpHKErqwpECayzaRAoiP fZig2LneqdhkdrRpaJjC7M+7Bl0uzN+JKXBb6hLuPdU3qtCTfiGhJ6rPnVJJdKCK lHM9IlHfKfPVBmVbukGYDpC0/yNOSqTsRmAQYL1HN/Qvk4HtfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAflRIiAPHxqHVCoo8ffDgZ2Qh1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvOWE4ZDk2ODUtNDM5My0z ZjA0LTg5OGItMWIwNzVhNGI2YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIVSyFO5WlFBZRKO5iyiz2D2je4MIkVROcW89CRIhC+2+ONMJBaLjbS I1Nf9wgXOeUJlXmDnEAggosrSt5IbzxPYxdjor9F7f8VeT/X2/cRLodPx15OIYqd ILHuTAhzKd+URXDHAHlYyg5KJZ7f+3LOrjcYpm+a5ua0TKQzZ5rod175FdsmBZ2C 3cxfW0Iqu051Ou0UhryO7FIFyug5Hilq6havjK9gIW+qgUCP8oBNpVNFGTMXr5iE s2G6R2qageKe99NhZfrOmyeb71wX0agEpbYmbK/r4kuyVlb5hAQBJVTjoM11SXec 3GRiPJcZxY10EdJGojpEPaKdqP3z00Q= -----END CERTIFICATE-----Generated at Fri Apr 4 20:02:02 2025 by rpki-client