$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa File: 97f6a99c-5994-36e5-96af-33d5a5e18816.roa (raw, json) Hash identifier: QVOhPqD6/BSwmU16Vy2XmUSxFS3f5VU9kYLhqif8G08= Subject key identifier: 4B:4E:A1:83:E1:1B:16:91:D8:4A:25:4E:9A:5B:D5:B6:B1:BF:87:5C Certificate issuer: /CN=798448e2-55be-4c24-8014-28c2c70dfc84 Certificate serial: 010D0C9F4328584913AC1E6CB1D931A1B10AEA00 Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 36601 IP address blocks: 192.109.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1e:6c:b1:d9:31:a1:b1:0a:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=d758434b-cf6a-4ba0-98b2-6e24abb085f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1f:2b:ae:ac:34:58:34:9b:e7:b5:ed:53:50: 00:15:2b:74:ec:a4:ee:58:51:15:b5:0d:ef:16:f4: 37:9f:df:88:d0:a5:70:08:1a:ab:38:8a:4a:c6:50: b0:3f:dc:55:13:c0:aa:17:92:38:08:44:e1:ba:fb: 19:14:07:f6:ad:1a:25:c0:99:c9:e0:d8:3b:f2:47: 65:bd:7f:1d:80:75:e7:30:60:72:5d:f0:e6:21:d4: 0a:20:97:eb:75:a1:ae:67:74:90:ff:8a:6e:4d:54: c1:ca:8b:00:bf:0a:b1:96:5a:84:b7:b9:2c:cd:67: 2a:85:3d:2a:09:0f:28:8b:de:72:7e:72:2f:58:ef: 69:89:91:c4:d6:60:74:81:01:65:19:09:85:33:4a: e7:b5:ab:d4:97:fa:67:89:ab:e6:b7:a2:09:b5:cd: f3:20:11:d7:76:13:bb:59:42:f5:98:1e:5e:75:6c: 81:34:d3:b5:4f:44:11:a6:19:0e:cd:b5:9c:19:86: 19:4e:7c:17:db:55:5e:8c:8f:85:71:e2:15:61:08: 86:22:30:97:37:37:0d:02:66:25:73:ec:99:b0:fb: 98:9d:e4:aa:6c:b3:3e:e2:69:25:71:e5:d8:ad:8e: 1c:98:8b:15:93:67:9e:cf:45:f2:b8:45:a4:6d:18: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:A1:83:E1:1B:16:91:D8:4A:25:4E:9A:5B:D5:B6:B1:BF:87:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl X509v3 Authority Key Identifier: keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer sbgp-ipAddrBlock: critical IPv4: 192.109.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:38:71:c3:19:ea:b9:81:64:69:54:b4:58:a9:b1:6c:ac:4f: 9f:50:5e:a8:4c:2a:31:f7:5d:cb:a4:31:67:f1:a0:72:c2:a2: db:d6:c7:14:ed:9e:85:9b:2e:44:e3:60:f4:fd:d8:88:ec:dd: c3:19:a5:64:49:fc:78:e1:77:a1:7c:95:53:47:05:69:62:a1: 0a:ce:53:59:30:64:12:be:1a:31:2f:71:8f:b3:bf:3a:c8:fd: b5:4a:da:39:10:a5:19:bb:8d:20:8b:f5:de:f9:a7:4b:7e:8f: c2:0b:74:a0:d8:a1:4f:77:17:9f:81:82:7a:d1:4c:90:31:84: a9:7d:85:c2:5f:87:85:41:30:89:ee:e7:db:e2:94:54:47:67: f8:93:53:74:1d:13:79:77:b9:a9:45:5b:cc:63:44:22:00:40: c9:cd:87:be:76:42:1d:09:80:b7:77:38:b3:5f:75:36:cd:f9: 3e:13:4e:90:70:3f:58:12:6a:04:45:bc:2d:bf:13:c9:2d:66: 80:31:e9:ba:98:02:e7:fa:b7:94:96:6f:29:d3:98:5a:52:48: 05:c7:78:96:ae:73:ef:77:66:31:81:5e:ca:ae:2e:78:51:ed: 28:82:5a:c6:91:f5:cd:5d:e5:8f:ef:36:68:1a:29:f8:43:6b: 8c:ef:59:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB5ssdkxobEK6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRm Yzg0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDc1ODQzNGItY2Y2YS00YmEwLTk4YjItNmUyNGFiYjA4NWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh8rrqw0WDSb57XtU1AAFSt07KTuWFEVtQ3v FvQ3n9+I0KVwCBqrOIpKxlCwP9xVE8CqF5I4CEThuvsZFAf2rRolwJnJ4Ng78kdl vX8dgHXnMGByXfDmIdQKIJfrdaGuZ3SQ/4puTVTByosAvwqxllqEt7kszWcqhT0q CQ8oi95yfnIvWO9piZHE1mB0gQFlGQmFM0rntavUl/pniavmt6IJtc3zIBHXdhO7 WUL1mB5edWyBNNO1T0QRphkOzbWcGYYZTnwX21VejI+FceIVYQiGIjCXNzcNAmYl c+yZsPuYneSqbLM+4mklceXYrY4cmIsVk2eez0XyuEWkbRir6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtOoYPhGxaR2EolTppb1baxv4dcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0 NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvOTdmNmE5OWMtNTk5NC0z NmU1LTk2YWYtMzNkNWE1ZTE4ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4NDQ4ZTItNTViZS00YzI0LTgw MTQtMjhjMmM3MGRmYzg0Lzc5ODQ0OGUyLTU1YmUtNGMyNC04MDE0LTI4YzJjNzBk ZmM4NC5jcmwwHwYDVR0jBBgwFoAUxnAlXTl95w0lcgGnK73rcoTS1tcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMy YzcwZGZjODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwG1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA04ccMZ6rmBZGlUtFipsWysT59QXqhMKjH3XcukMWfxoHLCotvWxxTt noWbLkTjYPT92Ijs3cMZpWRJ/Hjhd6F8lVNHBWlioQrOU1kwZBK+GjEvcY+zvzrI /bVK2jkQpRm7jSCL9d75p0t+j8ILdKDYoU93F5+BgnrRTJAxhKl9hcJfh4VBMInu 59vilFRHZ/iTU3QdE3l3ualFW8xjRCIAQMnNh752Qh0JgLd3OLNfdTbN+T4TTpBw P1gSagRFvC2/E8ktZoAx6bqYAuf6t5SWbynTmFpSSAXHeJauc+93ZjGBXsquLnhR 7SiCWsaR9c1d5Y/vNmgaKfhDa4zvWQo= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:07 2025 by rpki-client