$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa File: 56888ec3-91ad-304f-a1c5-2db34a218a54.roa (raw, json) Hash identifier: mH8GLOftpHQMLFb+jJTkP8IujyBPgWKjoFPltt8F0R0= Subject key identifier: AD:01:B7:EA:4E:32:57:96:D6:E9:95:52:2E:9A:91:DB:25:79:45:01 Certificate issuer: /CN=d3878a5b-a112-41cb-867c-f6fae3f22d52 Certificate serial: 010D0C9F4328584908816E1B54FC57F3C9338B80 Authority key identifier: 7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 54172 IP address blocks: 192.154.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6e:1b:54:fc:57:f3:c9:33:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3878a5b-a112-41cb-867c-f6fae3f22d52 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=25e9932b-3c2e-4943-a908-c73bb2eca15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:df:e0:bb:a5:cc:2b:ce:a9:87:0a:b8:b8:6c: 5a:fd:33:7c:22:05:84:be:72:c9:97:d7:2c:a8:ca: bf:a8:34:cd:9e:fd:32:7a:10:03:fe:4c:1c:6b:dc: b9:df:41:a0:0f:ef:ec:a1:95:87:17:17:57:ec:82: b0:a4:be:04:7a:7e:d8:2a:5a:89:60:8c:ca:e2:4e: ff:bf:92:2b:39:e6:19:9f:e0:ad:b8:b3:16:e1:7d: 4b:21:ac:1e:c8:16:fe:4b:d3:64:d2:6e:c4:00:23: 9d:04:94:84:88:0b:35:47:8c:d2:1c:16:a0:03:51: 69:f8:2d:83:41:5c:e9:be:c8:fd:1f:77:b6:cc:47: a5:67:7a:00:fe:d3:42:1f:4d:bf:62:75:22:1d:0f: 58:c5:66:34:c9:9b:57:4a:9b:09:05:7b:17:12:19: 5a:8d:b3:bc:e2:96:6e:48:87:ae:0f:96:a2:8c:6f: 70:ce:91:8d:a4:65:4f:42:11:16:6a:f4:e7:e9:94: 6e:2c:dd:ef:98:b6:b7:ff:09:ea:b1:ad:7e:0b:f5: 49:6c:0a:f4:e5:b7:9c:80:c4:5e:07:65:c9:1b:02: c9:3b:6d:76:49:38:f9:20:87:96:57:36:76:eb:8d: 1a:97:fc:4b:49:66:16:d1:50:10:4d:76:db:26:16: a5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:01:B7:EA:4E:32:57:96:D6:E9:95:52:2E:9A:91:DB:25:79:45:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.crl X509v3 Authority Key Identifier: keyid:7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer sbgp-ipAddrBlock: critical IPv4: 192.154.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c9:e3:19:33:4c:57:d3:74:29:35:9c:4f:7c:53:8e:98:26: c6:d1:2c:ee:8f:50:00:e0:49:6b:bf:89:86:5c:cd:93:e7:8f: 2d:29:23:62:11:5f:4b:53:13:22:41:25:6d:73:14:a5:67:7c: f9:ae:d8:d3:59:1e:8e:ae:28:17:72:6c:7e:df:35:b1:e4:b2: 5b:2f:dd:b0:5c:e6:3d:39:d9:7d:e8:cf:41:f6:d0:dd:c6:e5: 4a:75:97:b6:84:e7:8a:b0:20:72:59:96:d2:c3:6e:14:cd:04: e0:2f:9a:9c:d0:a7:29:5d:d0:2e:cc:cf:87:af:88:a3:8b:6e: 7f:8d:4e:93:bc:58:84:99:41:0e:55:3c:d4:49:0f:51:07:a8: ec:cd:c8:fe:07:c2:d7:0b:b8:c0:23:7b:66:2b:10:5c:73:12: 83:4e:21:51:7e:7c:ca:f2:4a:7e:ec:76:62:11:f4:77:6f:a9: 92:ba:47:f1:1d:c9:d9:2c:91:6a:c9:1b:d3:b3:d9:fd:98:f3: 35:ab:e6:d4:0a:e2:00:7c:b1:4f:da:d0:76:f8:26:7d:c1:e2: 75:18:c0:c8:0a:f9:4e:4b:1e:01:40:57:ad:67:18:7c:05:c5: f7:36:cf:8b:38:b7:21:5f:73:f1:a5:e4:f0:27:0e:1a:db:2c: a4:c9:0b:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgW4bVPxX88kzi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM4NzhhNWItYTExMi00MWNiLTg2N2MtZjZmYWUzZjIy ZDUyMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MjVlOTkzMmItM2MyZS00OTQzLWE5MDgtYzczYmIyZWNhMTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht/gu6XMK86phwq4uGxa/TN8IgWEvnLJl9cs qMq/qDTNnv0yehAD/kwca9y530GgD+/soZWHFxdX7IKwpL4Een7YKlqJYIzK4k7/ v5IrOeYZn+CtuLMW4X1LIaweyBb+S9Nk0m7EACOdBJSEiAs1R4zSHBagA1Fp+C2D QVzpvsj9H3e2zEelZ3oA/tNCH02/YnUiHQ9YxWY0yZtXSpsJBXsXEhlajbO84pZu SIeuD5aijG9wzpGNpGVPQhEWavTn6ZRuLN3vmLa3/wnqsa1+C/VJbAr05becgMRe B2XJGwLJO212STj5IIeWVzZ2640al/xLSWYW0VAQTXbbJhal3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0Bt+pOMleW1umVUi6akdsleUUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMzg3 OGE1Yi1hMTEyLTQxY2ItODY3Yy1mNmZhZTNmMjJkNTIvNTY4ODhlYzMtOTFhZC0z MDRmLWExYzUtMmRiMzRhMjE4YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDM4NzhhNWItYTExMi00MWNiLTg2 N2MtZjZmYWUzZjIyZDUyL2QzODc4YTViLWExMTItNDFjYi04NjdjLWY2ZmFlM2Yy MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUe/OrUI5E4vxQ8oRDKcZm8ILqTqEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMzg3OGE1Yi1hMTEyLTQxY2ItODY3Yy1mNmZh ZTNmMjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJoNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbJ4xkzTFfTdCk1nE98U46YJsbRLO6PUADgSWu/iYZczZPnjy0pI2IR X0tTEyJBJW1zFKVnfPmu2NNZHo6uKBdybH7fNbHkslsv3bBc5j052X3oz0H20N3G 5Up1l7aE54qwIHJZltLDbhTNBOAvmpzQpyld0C7Mz4eviKOLbn+NTpO8WISZQQ5V PNRJD1EHqOzNyP4HwtcLuMAje2YrEFxzEoNOIVF+fMrySn7sdmIR9HdvqZK6R/Ed ydkskWrJG9Oz2f2Y8zWr5tQK4gB8sU/a0Hb4Jn3B4nUYwMgK+U5LHgFAV61nGHwF xfc2z4s4tyFfc/Gl5PAnDhrbLKTJC20= -----END CERTIFICATE-----Generated at Fri Apr 4 19:13:46 2025 by rpki-client