$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa File: 3b4f080a-93ea-356c-9216-559219ab2f01.roa (raw, json) Hash identifier: zizUVDgo704PFI0Zzc1qtuGYMRqRFS4s7J00i8td47U= Subject key identifier: 1B:A8:CA:27:9B:91:81:0F:52:73:06:65:34:AB:EA:C7:87:B9:CF:50 Certificate issuer: /CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Certificate serial: 010D0C9F432858494303EEDAC3B3A8D993F3B500 Authority key identifier: 01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 8075 IP address blocks: 192.12.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:ee:da:c3:b3:a8:d9:93:f3:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=a0417be0-0e36-4a39-8fbb-705d6b4034af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:84:11:df:d5:99:6c:22:ac:b2:dc:81:17: 72:1c:52:44:59:da:a1:6b:3b:71:27:21:38:3b:f5: 84:04:ad:a9:dc:6c:99:b6:c7:60:8e:3a:3a:49:27: 35:39:2d:f8:cc:61:cd:db:1d:bf:08:e7:6d:8e:5f: 74:e3:23:af:09:d8:74:df:ba:a6:78:16:c6:a7:85: 29:4d:3f:57:47:97:69:67:c7:bc:91:ba:48:a7:41: c1:9f:8e:ce:a6:9d:73:b6:81:3a:0d:f9:0c:41:cc: d2:53:ac:32:43:b2:e5:fc:99:07:d7:1e:18:21:23: b1:a3:d9:43:57:3d:91:8a:7b:63:fc:23:bc:ec:ec: 70:9e:46:f4:6a:6a:5b:0f:12:d0:ed:6a:0b:9d:d3: d0:ef:c0:1b:6d:92:3b:2f:b9:5c:c5:ed:ca:f5:34: ad:5a:48:c9:63:47:e4:c9:da:53:4e:c8:15:f3:63: f6:a1:31:27:52:28:cf:20:e5:a3:45:07:96:7c:2a: 14:fd:f9:97:71:53:a5:b9:3d:dd:7f:66:64:5a:1b: 51:73:34:5c:65:8a:0c:a4:ee:7d:72:9a:d0:b8:6f: 2e:de:0f:47:4e:76:aa:62:03:fb:6d:c2:8e:90:2b: 90:ba:16:db:d7:40:33:e3:48:f7:3e:55:09:02:4f: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A8:CA:27:9B:91:81:0F:52:73:06:65:34:AB:EA:C7:87:B9:CF:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl X509v3 Authority Key Identifier: keyid:01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:82:52:f6:6b:c7:eb:53:ae:99:ea:c7:cf:b0:52:9d:fe:87: 9f:4a:68:34:a0:f2:5c:a6:4a:36:18:d2:06:08:cf:66:39:15: 23:77:10:2d:23:13:de:1e:58:5d:41:ec:44:35:ee:c0:95:9c: ff:15:6d:ec:4e:80:97:fe:3b:b3:84:6b:c3:fc:93:c6:28:51: aa:fa:19:77:3f:0f:d4:27:4e:44:37:fb:cb:02:69:93:81:6c: 08:4b:20:44:37:58:87:3d:77:86:1a:0d:2d:2b:f4:db:8e:aa: d9:8f:fa:71:6a:96:6c:23:cd:83:6b:ff:d7:04:04:a7:0a:76: fe:06:0f:28:d7:d5:e2:99:e9:70:c1:2a:59:52:36:eb:17:0b: ca:25:2a:31:0d:de:77:e6:b0:00:cd:ef:0d:5f:b6:76:45:90: 1e:dd:1b:eb:11:19:52:e8:95:a0:20:2a:6a:b9:72:f5:17:2c: 2a:d8:1e:52:4f:2f:86:13:cf:65:82:1b:aa:be:6f:cf:65:4a: ea:c7:4c:4e:0c:e6:1f:a8:09:50:a4:47:31:c6:5d:22:36:cf: 0e:33:6b:c8:e1:65:ee:59:07:de:5d:d0:a0:e1:c5:5c:be:10: 76:6c:0f:11:a0:1d:a6:48:b6:74:70:c9:5a:2b:2e:a4:2e:e4: f0:a3:0d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA+7aw7Oo2ZPztQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhmYmY4YjItZDJiYy00ZWQ4LWJkNTctMmE1ZTQzYTMw ZjNhMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk YTA0MTdiZTAtMGUzNi00YTM5LThmYmItNzA1ZDZiNDAzNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppyEEd/VmWwirLLcgRdyHFJEWdqhaztxJyE4 O/WEBK2p3GyZtsdgjjo6SSc1OS34zGHN2x2/COdtjl904yOvCdh037qmeBbGp4Up TT9XR5dpZ8e8kbpIp0HBn47Opp1ztoE6DfkMQczSU6wyQ7Ll/JkH1x4YISOxo9lD Vz2Rintj/CO87Oxwnkb0ampbDxLQ7WoLndPQ78AbbZI7L7lcxe3K9TStWkjJY0fk ydpTTsgV82P2oTEnUijPIOWjRQeWfCoU/fmXcVOluT3df2ZkWhtRczRcZYoMpO59 cprQuG8u3g9HTnaqYgP7bcKOkCuQuhbb10Az40j3PlUJAk8P0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuoyiebkYEPUnMGZTSr6seHuc9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGZi ZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVlNDNhMzBmM2EvM2I0ZjA4MGEtOTNlYS0z NTZjLTkyMTYtNTU5MjE5YWIyZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhmYmY4YjItZDJiYy00ZWQ4LWJk NTctMmE1ZTQzYTMwZjNhL2Q4ZmJmOGIyLWQyYmMtNGVkOC1iZDU3LTJhNWU0M2Ez MGYzYS5jcmwwHwYDVR0jBBgwFoAUAamV2enW0oeEHc6Nh2edpM3R/tQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGZiZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVl NDNhMzBmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKCUvZrx+tTrpnqx8+wUp3+h59KaDSg8lymSjYY0gYIz2Y5FSN3EC0j E94eWF1B7EQ17sCVnP8VbexOgJf+O7OEa8P8k8YoUar6GXc/D9QnTkQ3+8sCaZOB bAhLIEQ3WIc9d4YaDS0r9NuOqtmP+nFqlmwjzYNr/9cEBKcKdv4GDyjX1eKZ6XDB KllSNusXC8olKjEN3nfmsADN7w1ftnZFkB7dG+sRGVLolaAgKmq5cvUXLCrYHlJP L4YTz2WCG6q+b89lSurHTE4M5h+oCVCkRzHGXSI2zw4za8jhZe5ZB95d0KDhxVy+ EHZsDxGgHaZItnRwyVorLqQu5PCjDTQ= -----END CERTIFICATE-----Generated at Thu Apr 3 04:38:40 2025 by rpki-client