$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa File: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (raw, json) Hash identifier: rMLs6+ToHt7hzvZzr4ZkonUWZNhCE7cSVrsZgpNsfeY= Subject key identifier: 4A:BC:65:3A:00:6F:4C:95:10:5E:F4:04:40:EA:B8:41:8F:16:5C:15 Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F432858491D717FA44CBD32881EE29E80 Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 53423 IP address blocks: 192.171.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7f:a4:4c:bd:32:88:1e:e2:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=bb445b08-759f-4caa-88cb-93a26798d8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e7:ed:cc:4c:97:d2:92:da:0a:a5:3d:f5:17: 28:80:31:8c:3e:90:72:7e:33:34:02:c1:e6:3c:d9: 7e:b7:f0:81:a8:06:c8:74:e6:ff:84:fd:a4:d1:0a: b5:86:5a:0d:8e:78:c4:05:22:31:53:5c:73:ab:53: 50:43:62:00:b0:b8:21:24:19:7e:32:60:5c:a3:b0: a6:ed:54:8b:85:89:f0:2c:1c:5e:89:ea:9f:d3:d4: 79:7b:ee:b5:2b:74:be:a7:cf:5c:a0:77:84:29:3b: 56:8b:54:3b:e2:f1:b3:e3:86:3c:33:66:6f:2e:11: 9e:d6:af:e1:e6:84:49:88:a9:da:62:94:87:c6:ba: 37:a8:a4:fa:f3:12:29:97:01:b3:b7:be:53:8b:c9: cc:2d:1d:48:e0:a1:c6:7a:4e:40:df:ea:8c:be:b1: 8d:b8:20:81:64:94:92:55:c0:90:35:17:8c:ba:71: fa:f8:25:26:03:c0:07:42:60:b9:ad:59:22:75:0d: d5:08:86:49:6a:d3:42:b0:c4:27:cd:ef:ab:b7:97: 8f:79:55:64:da:de:8b:75:33:27:17:1a:1a:57:0c: cb:8d:27:e1:da:b4:ea:81:ed:4b:2e:0d:f4:d0:12: 8d:d8:92:b0:6a:93:c8:f2:73:96:ee:dc:5a:0d:2c: 55:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BC:65:3A:00:6F:4C:95:10:5E:F4:04:40:EA:B8:41:8F:16:5C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: 192.171.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9d:50:a4:4c:73:3d:5c:71:1a:ef:f0:7d:02:27:ab:7a:28: fa:7b:bf:66:3b:8c:02:56:f7:2a:63:d3:b5:43:82:bb:b8:01: d5:b2:94:13:c7:7b:32:cb:6a:04:39:0e:66:4d:15:3b:2d:c8: e3:58:fc:8f:c7:19:20:54:fe:59:64:c8:39:dc:30:47:e4:2a: 7c:d4:78:7a:9a:c6:3c:0e:a1:28:e4:e7:d1:ac:62:4b:6a:e8: 51:6b:4d:27:25:80:19:e2:a9:1a:ab:67:f2:a8:6f:3d:06:80: 3a:e3:ca:2c:0c:f6:cd:7a:04:4a:c5:d1:d0:5b:a2:79:c9:4b: d8:e8:b6:b8:65:fc:74:40:54:42:fd:a9:9a:e7:86:69:68:82: 38:18:c9:08:df:e8:af:c1:eb:d1:7f:67:74:16:d5:92:d0:ad: b5:3c:91:f7:d2:95:31:bc:b4:9b:f7:0c:ff:18:44:50:37:8d: 58:26:9e:1e:73:00:01:a1:10:88:23:88:f4:50:9e:6d:6d:01: 7c:b7:ce:73:60:2e:c6:b8:e0:d9:59:b8:2d:43:2d:a6:3c:fe: 41:c3:87:64:41:e7:2e:16:4d:3d:c8:0b:8d:71:3c:4b:89:52: cc:52:bd:4a:71:71:ac:4e:e8:36:80:ee:6e:7e:58:07:b5:d8: c8:2c:2c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcX+kTL0yiB7inoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YmI0NDViMDgtNzU5Zi00Y2FhLTg4Y2ItOTNhMjY3OThkOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuftzEyX0pLaCqU99RcogDGMPpByfjM0AsHm PNl+t/CBqAbIdOb/hP2k0Qq1hloNjnjEBSIxU1xzq1NQQ2IAsLghJBl+MmBco7Cm 7VSLhYnwLBxeieqf09R5e+61K3S+p89coHeEKTtWi1Q74vGz44Y8M2ZvLhGe1q/h 5oRJiKnaYpSHxro3qKT68xIplwGzt75Ti8nMLR1I4KHGek5A3+qMvrGNuCCBZJSS VcCQNReMunH6+CUmA8AHQmC5rVkidQ3VCIZJatNCsMQnze+rt5ePeVVk2t6LdTMn FxoaVwzLjSfh2rTqge1LLg300BKN2JKwapPI8nOW7txaDSxVawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq8ZToAb0yVEF70BEDquEGPFlwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvMjYxMmRjMDItMzAzNi0z Y2VkLWJhMmMtOGUxYzA0YTJiMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHedUKRMcz1ccRrv8H0CJ6t6KPp7v2Y7jAJW9ypj07VDgru4AdWylBPH ezLLagQ5DmZNFTstyONY/I/HGSBU/llkyDncMEfkKnzUeHqaxjwOoSjk59GsYktq 6FFrTSclgBniqRqrZ/Kobz0GgDrjyiwM9s16BErF0dBbonnJS9jotrhl/HRAVEL9 qZrnhmlogjgYyQjf6K/B69F/Z3QW1ZLQrbU8kffSlTG8tJv3DP8YRFA3jVgmnh5z AAGhEIgjiPRQnm1tAXy3znNgLsa44NlZuC1DLaY8/kHDh2RB5y4WTT3IC41xPEuJ UsxSvUpxcaxO6DaA7m5+WAe12MgsLPI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:12 2025 by rpki-client