$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/91a392ad-4f56-3d13-89cf-a95fc1cf573c.roa File: 91a392ad-4f56-3d13-89cf-a95fc1cf573c.roa (raw, json) Hash identifier: yJEfmgeyQ1eV7zksfyFe7j0JGf+KCrtMo4YCpePIrlI= Subject key identifier: 72:B6:7B:37:3D:D1:4E:30:5E:68:BD:A4:65:EC:4D:25:72:B3:80:16 Certificate issuer: /CN=4da678cc-bb39-4893-b12b-7aba94870822 Certificate serial: 010D0C9F432858491246B7711F361A7DB0E0C880 Authority key identifier: 0C:09:6F:58:87:96:6C:6C:51:5B:79:F0:1C:5F:D9:CF:29:E1:6C:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/91a392ad-4f56-3d13-89cf-a95fc1cf573c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397554 IP address blocks: 192.52.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/4da678cc-bb39-4893-b12b-7aba94870822.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/4da678cc-bb39-4893-b12b-7aba94870822.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b7:71:1f:36:1a:7d:b0:e0:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da678cc-bb39-4893-b12b-7aba94870822 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=0878b595-431f-47a1-86a3-20b4073f41b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:0d:67:81:04:bd:57:ae:e8:fe:58:db:ec: aa:f4:93:e3:1d:8b:aa:d0:0f:1c:58:c5:16:1a:51: dd:4f:ce:b8:ab:4b:90:64:ba:07:e1:35:79:2e:49: ad:b4:55:a7:03:24:8d:49:a4:43:e5:3e:5d:2d:f2: 05:b7:4c:5e:bc:fb:9f:fb:04:56:13:aa:eb:77:83: cc:f3:00:3a:4a:29:bc:71:b1:f5:8f:04:22:26:6c: a2:5a:df:2e:6f:86:69:2d:68:4f:03:73:56:d2:41: 59:01:46:65:46:c7:51:84:4a:ba:fb:65:47:9e:60: 9f:4e:c9:44:2e:67:b8:a1:6e:44:b2:b1:06:f9:68: 44:3c:e2:86:6a:6b:18:9f:ef:55:d2:61:e0:30:d7: 52:3e:80:48:5e:2d:d2:8c:88:cf:26:f0:5a:7a:cf: 7e:9e:7a:7c:8a:6f:84:28:a2:59:00:7a:11:36:aa: a2:f1:43:b9:4b:c3:46:1f:eb:ff:74:1f:d8:ad:d1: a0:3d:c2:70:a1:47:17:a1:63:61:22:d6:6b:d5:57: 89:52:46:09:fa:e8:41:1d:38:cb:2f:0c:76:3a:d2: c8:77:66:73:54:f8:67:12:79:ee:c3:a0:0e:19:ae: 8b:b5:7b:40:0d:be:5f:16:f9:cf:2e:21:7f:8f:0c: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B6:7B:37:3D:D1:4E:30:5E:68:BD:A4:65:EC:4D:25:72:B3:80:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/91a392ad-4f56-3d13-89cf-a95fc1cf573c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/4da678cc-bb39-4893-b12b-7aba94870822.crl X509v3 Authority Key Identifier: keyid:0C:09:6F:58:87:96:6C:6C:51:5B:79:F0:1C:5F:D9:CF:29:E1:6C:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822.cer sbgp-ipAddrBlock: critical IPv4: 192.52.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ef:fa:37:a6:a4:53:9d:df:9f:1b:7e:33:2c:85:6e:e2:e6: a9:ac:18:98:01:6e:52:82:19:75:c5:e7:ca:20:da:59:28:18: 2f:70:d7:77:3b:05:fa:ed:1f:a2:66:23:d1:bf:e8:00:b5:12: 75:3b:4b:b5:4b:88:65:cd:c2:a0:3f:8b:f1:92:cf:ca:1f:59: 4c:ba:c7:d1:76:34:e2:33:03:a1:16:d5:bb:b6:5f:eb:1b:40: 4a:47:bc:8a:67:00:de:e4:02:9e:7e:3a:e8:37:7a:9f:fc:27: ae:16:7a:35:fc:d9:2a:98:fd:6d:7c:0f:98:45:83:87:ff:9a: fd:46:d9:ce:29:eb:f9:76:95:02:4c:49:69:40:c0:c1:35:e3: fa:f8:29:74:a3:f0:50:31:12:ba:80:a2:10:c0:d6:c9:20:45: 23:89:8e:34:b9:28:60:37:aa:37:f9:53:3c:23:b4:fd:bc:1a: ad:11:3d:67:d8:0c:e3:34:78:65:47:5a:2f:da:4b:06:0b:c5: 5a:c5:5a:35:bf:a4:33:07:4a:bd:8c:9b:89:5f:29:cf:2b:2d: e6:24:d6:1a:61:92:81:42:53:c4:c9:73:38:ed:40:76:b5:30: 88:ea:36:8c:9c:16:39:6c:60:b4:37:67:8c:75:bf:88:73:4a: 2d:4c:fa:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrdxHzYafbDgyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRhNjc4Y2MtYmIzOS00ODkzLWIxMmItN2FiYTk0ODcw ODIyMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDg3OGI1OTUtNDMxZi00N2ExLTg2YTMtMjBiNDA3M2Y0MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWINZ4EEvVeu6P5Y2+yq9JPjHYuq0A8cWMUW GlHdT864q0uQZLoH4TV5LkmttFWnAySNSaRD5T5dLfIFt0xevPuf+wRWE6rrd4PM 8wA6Sim8cbH1jwQiJmyiWt8ub4ZpLWhPA3NW0kFZAUZlRsdRhEq6+2VHnmCfTslE Lme4oW5EsrEG+WhEPOKGamsYn+9V0mHgMNdSPoBIXi3SjIjPJvBaes9+nnp8im+E KKJZAHoRNqqi8UO5S8NGH+v/dB/YrdGgPcJwoUcXoWNhItZr1VeJUkYJ+uhBHTjL Lwx2OtLId2ZzVPhnEnnuw6AOGa6LtXtADb5fFvnPLiF/jwwcKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK2ezc90U4wXmi9pGXsTSVys4AWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZGE2 NzhjYy1iYjM5LTQ4OTMtYjEyYi03YWJhOTQ4NzA4MjIvOTFhMzkyYWQtNGY1Ni0z ZDEzLTg5Y2YtYTk1ZmMxY2Y1NzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGRhNjc4Y2MtYmIzOS00ODkzLWIx MmItN2FiYTk0ODcwODIyLzRkYTY3OGNjLWJiMzktNDg5My1iMTJiLTdhYmE5NDg3 MDgyMi5jcmwwHwYDVR0jBBgwFoAUDAlvWIeWbGxRW3nwHF/ZzynhbN4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80ZGE2NzhjYy1iYjM5LTQ4OTMtYjEyYi03YWJh OTQ4NzA4MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDT6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfv+jempFOd358bfjMshW7i5qmsGJgBblKCGXXF58og2lkoGC9w13c7 BfrtH6JmI9G/6AC1EnU7S7VLiGXNwqA/i/GSz8ofWUy6x9F2NOIzA6EW1bu2X+sb QEpHvIpnAN7kAp5+Oug3ep/8J64WejX82SqY/W18D5hFg4f/mv1G2c4p6/l2lQJM SWlAwME14/r4KXSj8FAxErqAohDA1skgRSOJjjS5KGA3qjf5UzwjtP28Gq0RPWfY DOM0eGVHWi/aSwYLxVrFWjW/pDMHSr2Mm4lfKc8rLeYk1hphkoFCU8TJczjtQHa1 MIjqNoycFjlsYLQ3Z4x1v4hzSi1M+kQ= -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:44 2025 by rpki-client