$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa File: 30475b02-3cc2-316f-9252-ebff747b45f7.roa (raw, json) Hash identifier: fnHeS0unCMuw72qFteU+W5PgsEwZJpHxJ7DJldCzFHE= Subject key identifier: DB:CA:93:38:91:66:37:5A:0D:44:5D:A0:06:4B:91:48:35:D8:71:9F Certificate issuer: /CN=5ca7850e-2959-40e8-b387-e6608ae33eb4 Certificate serial: 010D0C9F43285848B4C0D0422A42B9491384D900 Authority key identifier: CB:47:20:0C:4C:DF:73:99:48:CE:89:D1:2B:A6:03:13:87:3E:13:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 27167 IP address blocks: 192.190.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/5ca7850e-2959-40e8-b387-e6608ae33eb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/5ca7850e-2959-40e8-b387-e6608ae33eb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d0:42:2a:42:b9:49:13:84:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ca7850e-2959-40e8-b387-e6608ae33eb4 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=92fba7ba-dbba-481e-a3fd-028019408485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:91:26:1b:f2:8f:38:03:32:34:bf:69:86: 3f:30:97:6d:7c:0f:52:89:d6:3d:15:bb:19:41:6d: 86:b2:57:36:9c:7c:ba:e9:18:97:a7:d2:92:34:2f: 98:de:96:67:f9:b5:82:77:0e:8e:7d:a8:d5:39:30: b7:b5:10:a6:16:ed:23:5c:d7:c5:80:16:ee:de:7b: 3e:a6:e4:5f:6a:1e:ac:d4:f4:a6:f8:55:d5:0f:7f: 20:14:f8:ef:cb:cd:10:5c:e7:50:86:be:7e:b0:77: 5d:be:8c:41:10:76:cd:8e:00:28:5c:7b:07:6d:09: 64:9a:e8:d4:0e:50:81:4d:11:a7:25:e0:e7:68:e0: b0:ed:b4:9c:7f:0a:d7:38:fe:ee:3a:b7:3a:f6:e5: 5b:88:3e:f6:4b:3a:30:a6:25:91:73:1e:98:53:b4: 15:33:f3:05:71:92:f0:7b:ec:4c:13:df:d6:68:c1: 8c:bc:75:fc:3f:4a:c9:3f:66:09:eb:08:85:54:ec: 16:c9:87:ab:6a:b5:f4:d9:62:c1:46:e4:14:d3:86: 32:89:32:c5:de:d7:ce:db:a7:44:42:3d:ac:44:8f: 5f:d9:09:b7:f3:b7:ef:43:73:6f:07:f3:b3:dc:23: 15:f2:7a:0a:33:c5:c4:84:09:2b:60:21:1a:94:59: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CA:93:38:91:66:37:5A:0D:44:5D:A0:06:4B:91:48:35:D8:71:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/5ca7850e-2959-40e8-b387-e6608ae33eb4.crl X509v3 Authority Key Identifier: keyid:CB:47:20:0C:4C:DF:73:99:48:CE:89:D1:2B:A6:03:13:87:3E:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4.cer sbgp-ipAddrBlock: critical IPv4: 192.190.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1e:ee:db:06:96:fa:fe:85:32:df:cf:e9:eb:51:a4:68:98: c0:e6:7e:52:32:32:8e:5c:b6:5c:4d:58:28:f5:f9:4d:d9:77: be:18:ad:2e:e8:b4:73:ce:6a:08:04:38:cb:d4:f5:16:dc:fa: 25:4a:4f:28:ee:9a:b5:f4:7c:e0:33:df:ee:94:69:df:26:5c: ce:9f:7e:a5:44:5c:2c:f6:d5:a4:3f:46:8b:23:1f:a7:cd:33: 55:5b:ac:92:56:71:55:57:4f:1d:e7:a1:2d:aa:fc:53:0c:5a: e7:c6:2b:96:24:1b:e5:7a:2d:c2:49:cd:a9:23:34:c3:5b:a5: 55:d8:95:a3:be:37:34:81:d4:d9:43:3c:ee:b3:3f:01:6a:b8: d7:8e:31:d3:86:ee:1e:62:f6:c1:42:74:65:f1:e5:cf:8d:92: b1:a3:bd:e5:92:0b:c1:44:b0:46:16:03:6c:31:d6:2c:91:8c: 73:d9:08:61:e4:0f:29:ea:16:f3:06:9f:97:f2:d8:9f:8a:69: af:4c:1e:a9:45:6b:b6:40:0e:ee:6a:99:2d:e3:87:d0:33:f5: 7b:b1:06:0b:d2:ad:18:b8:5b:86:73:93:35:43:75:7a:34:f9: c0:b7:0c:bc:3a:37:57:dc:26:6e:f5:81:d9:11:95:94:1f:b9: 7e:db:56:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNBCKkK5SROE2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhNzg1MGUtMjk1OS00MGU4LWIzODctZTY2MDhhZTMz ZWI0MB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk OTJmYmE3YmEtZGJiYS00ODFlLWEzZmQtMDI4MDE5NDA4NDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh2RJhvyjzgDMjS/aYY/MJdtfA9SidY9FbsZ QW2Gslc2nHy66RiXp9KSNC+Y3pZn+bWCdw6OfajVOTC3tRCmFu0jXNfFgBbu3ns+ puRfah6s1PSm+FXVD38gFPjvy80QXOdQhr5+sHddvoxBEHbNjgAoXHsHbQlkmujU DlCBTRGnJeDnaOCw7bScfwrXOP7uOrc69uVbiD72SzowpiWRcx6YU7QVM/MFcZLw e+xME9/WaMGMvHX8P0rJP2YJ6wiFVOwWyYerarX02WLBRuQU04YyiTLF3tfO26dE Qj2sRI9f2Qm387fvQ3NvB/Oz3CMV8noKM8XEhAkrYCEalFldMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvKkziRZjdaDURdoAZLkUg12HGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81Y2E3 ODUwZS0yOTU5LTQwZTgtYjM4Ny1lNjYwOGFlMzNlYjQvMzA0NzViMDItM2NjMi0z MTZmLTkyNTItZWJmZjc0N2I0NWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWNhNzg1MGUtMjk1OS00MGU4LWIz ODctZTY2MDhhZTMzZWI0LzVjYTc4NTBlLTI5NTktNDBlOC1iMzg3LWU2NjA4YWUz M2ViNC5jcmwwHwYDVR0jBBgwFoAUy0cgDEzfc5lIzonRK6YDE4c+Ey8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81Y2E3ODUwZS0yOTU5LTQwZTgtYjM4Ny1lNjYw OGFlMzNlYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0e7tsGlvr+hTLfz+nrUaRomMDmflIyMo5ctlxNWCj1+U3Zd74YrS7o tHPOaggEOMvU9Rbc+iVKTyjumrX0fOAz3+6Uad8mXM6ffqVEXCz21aQ/RosjH6fN M1VbrJJWcVVXTx3noS2q/FMMWufGK5YkG+V6LcJJzakjNMNbpVXYlaO+NzSB1NlD PO6zPwFquNeOMdOG7h5i9sFCdGXx5c+NkrGjveWSC8FEsEYWA2wx1iyRjHPZCGHk DynqFvMGn5fy2J+Kaa9MHqlFa7ZADu5qmS3jh9Az9XuxBgvSrRi4W4ZzkzVDdXo0 +cC3DLw6N1fcJm71gdkRlZQfuX7bVtI= -----END CERTIFICATE-----Generated at Mon Apr 7 08:24:40 2025 by rpki-client