$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/350e638e-f9b0-39e9-b359-52ea50ce6dd4.roa File: 350e638e-f9b0-39e9-b359-52ea50ce6dd4.roa (raw, json) Hash identifier: 3MPpTM+Ctf5htI4HkXve+cfSPhTcLNNRXVCaKG7d+aI= Subject key identifier: 32:C0:C2:BE:60:C7:A3:C0:2D:4B:04:E0:38:B7:8D:3F:AE:21:57:3A Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584944693A40E84AB4633A9FF9C0 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/350e638e-f9b0-39e9-b359-52ea50ce6dd4.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 11736 IP address blocks: 192.236.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3a:40:e8:4a:b4:63:3a:9f:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=4e218f9a-195f-44b1-93d4-e55d3805b442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:ac:1b:83:39:d1:5c:52:34:b0:65:48:b7: 91:1d:76:6c:ab:ba:96:b3:5b:e6:9c:c7:62:c3:81: 78:24:d7:68:25:7e:77:d2:e9:c2:6e:11:a4:db:d9: 5d:2b:a2:b2:28:0e:16:40:76:37:b0:79:e6:bd:ea: c9:9f:9e:38:df:03:d9:ad:f2:0e:83:ab:80:6b:7d: ca:49:c2:b4:70:81:ec:e7:81:a0:09:d2:43:ca:39: bc:19:d1:b3:c8:d1:46:04:8d:95:81:bf:9a:89:f9: 66:97:31:77:42:ff:74:84:ad:39:ec:b2:80:0f:23: a5:2f:c1:9b:f9:48:16:c3:ad:09:30:98:96:3d:cd: 0d:a7:f8:ff:15:1c:78:30:f0:91:80:01:1e:50:a4: 9b:65:43:14:fa:8c:d0:59:b0:a9:6a:f1:60:aa:57: 3b:f9:53:bd:da:91:ea:b6:50:1a:ba:77:c6:f0:7f: f8:fc:e8:88:4c:0b:c9:f0:9c:44:cc:66:c9:7f:cd: c5:e4:c2:36:11:c4:e8:5b:aa:5c:a6:7c:ca:9d:57: 1f:a6:17:90:1d:ca:f3:a9:a5:67:0f:b5:ba:34:0d: 55:16:01:82:66:ac:db:06:53:d5:b6:98:2c:e4:f9: 40:b1:7a:97:66:11:24:d4:78:2b:44:b7:fc:c3:95: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C0:C2:BE:60:C7:A3:C0:2D:4B:04:E0:38:B7:8D:3F:AE:21:57:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/350e638e-f9b0-39e9-b359-52ea50ce6dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 192.236.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5a:94:67:2f:92:53:98:b8:e6:eb:7a:f3:9f:fd:e1:3b:17: a2:04:5e:2f:4b:54:e7:09:2a:c2:c7:65:4d:0e:4a:98:0d:df: 5d:17:a2:b4:9c:35:6f:8d:06:60:e4:49:45:a9:d1:0f:a7:a6: fe:43:b0:23:45:99:e5:1e:8c:7b:8a:af:e4:96:f0:14:d0:27: 8b:3a:cf:d9:61:16:8e:7f:cc:ba:19:f2:78:ff:19:a7:38:67: b6:8b:72:24:ae:aa:94:98:c7:7f:92:3d:91:a3:36:91:07:e1: e9:83:59:fe:3e:c6:10:4d:c7:4e:2b:d4:be:8a:fd:f9:d6:23: 50:b4:a6:27:74:81:c3:03:69:cf:36:ce:ea:db:d0:7d:57:c9: e5:90:9c:72:5b:c1:85:5e:82:38:ba:bb:f2:92:99:fc:09:4f: 6f:9b:3c:15:5a:79:27:97:f6:f9:bb:1f:cd:6a:4c:ea:ea:4b: a1:f2:9b:5a:93:ee:bf:2b:65:d3:c0:04:16:91:78:ac:0e:25: 50:9b:d4:bc:c5:58:e6:85:85:b1:1f:7a:e6:df:da:01:7a:c9: 8e:57:9f:64:14:8a:ba:ac:d0:f5:c6:74:fa:94:df:c1:ec:8e: 82:de:7f:af:b6:0a:49:75:a8:89:63:fe:6b:db:fb:8c:ef:4a: 41:8e:d5:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTpA6Eq0Yzqf+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NGUyMThmOWEtMTk1Zi00NGIxLTkzZDQtZTU1ZDM4MDViNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBusG4M50VxSNLBlSLeRHXZsq7qWs1vmnMdi w4F4JNdoJX530unCbhGk29ldK6KyKA4WQHY3sHnmverJn5443wPZrfIOg6uAa33K ScK0cIHs54GgCdJDyjm8GdGzyNFGBI2Vgb+aiflmlzF3Qv90hK057LKADyOlL8Gb +UgWw60JMJiWPc0Np/j/FRx4MPCRgAEeUKSbZUMU+ozQWbCpavFgqlc7+VO92pHq tlAaunfG8H/4/OiITAvJ8JxEzGbJf83F5MI2EcToW6pcpnzKnVcfpheQHcrzqaVn D7W6NA1VFgGCZqzbBlPVtpgs5PlAsXqXZhEk1HgrRLf8w5Wy7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLAwr5gx6PALUsE4Di3jT+uIVc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvMzUwZTYzOGUtZjliMC0z OWU5LWIzNTktNTJlYTUwY2U2ZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwOwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9alGcvklOYuObrevOf/eE7F6IEXi9LVOcJKsLHZU0OSpgN310XorSc NW+NBmDkSUWp0Q+npv5DsCNFmeUejHuKr+SW8BTQJ4s6z9lhFo5/zLoZ8nj/Gac4 Z7aLciSuqpSYx3+SPZGjNpEH4emDWf4+xhBNx04r1L6K/fnWI1C0pid0gcMDac82 zurb0H1XyeWQnHJbwYVegji6u/KSmfwJT2+bPBVaeSeX9vm7H81qTOrqS6Hym1qT 7r8rZdPABBaReKwOJVCb1LzFWOaFhbEfeubf2gF6yY5Xn2QUirqs0PXGdPqU38Hs joLef6+2Ckl1qIlj/mvb+4zvSkGO1eY= -----END CERTIFICATE-----Generated at Thu Apr 17 02:31:33 2025 by rpki-client