$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa File: a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa (raw, json) Hash identifier: o3cSucSUOrEKdWECw/IzCHPrKXXMLwvoW4OnnyqW3ok= Subject key identifier: 6D:0A:6A:0E:79:F2:AF:4E:2A:01:52:4F:2A:EE:D3:0F:F5:C6:6D:8E Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F43285849350EA6DC033F1E5C58C242D0 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 88 IP address blocks: 192.12.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a6:dc:03:3f:1e:5c:58:c2:42:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=bbe7e08f-e9a3-4c51-bd43-c8e2c42c2710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:02:12:0d:25:fc:55:e4:d4:1a:f1:ad:ec: 39:f4:a9:e2:19:71:8b:fd:ba:0d:55:27:8e:70:37: c1:7f:0d:af:56:9b:89:09:f0:6a:66:f9:92:c7:07: d0:0c:1b:ff:72:2f:31:ee:e4:46:86:77:54:6a:8b: 73:57:96:b0:84:74:13:ad:d5:30:35:da:2e:13:d4: 80:7c:2e:8f:9b:4e:b4:22:b3:b5:7d:ce:35:31:cb: 61:80:44:6b:4d:31:02:93:42:30:13:1c:15:ba:3a: 94:8b:49:59:32:6f:c1:93:67:fb:70:75:bb:c5:9a: 2e:d2:23:42:1c:e6:15:c9:96:52:0a:7b:fe:2c:51: 91:d2:18:f3:e2:3c:78:b3:2a:c8:81:37:5e:b3:da: dc:1b:c4:85:e2:af:08:79:91:56:8f:23:3b:ec:32: 4d:ea:75:1b:96:88:90:37:f2:66:aa:2b:91:30:63: c4:5c:8f:58:0e:b4:69:f1:2c:3a:b0:f0:71:da:f5: 16:f8:cb:4c:39:55:68:a9:af:2a:b3:fa:d3:87:0d: e0:b3:c8:c9:d0:e8:8a:12:76:ec:b1:fb:f7:6f:31: 27:cd:3f:08:eb:d4:2c:a4:9b:b5:8a:9c:3f:c1:ce: 8b:ab:d3:e4:c1:d4:18:e0:b9:ea:3e:c2:92:6b:1c: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:6A:0E:79:F2:AF:4E:2A:01:52:4F:2A:EE:D3:0F:F5:C6:6D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 192.12.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:7f:ff:fc:bb:e5:a4:0c:df:12:a8:49:6d:40:01:64:04:9b: 54:20:4d:17:96:55:b6:7c:43:9c:16:ed:c7:18:aa:df:ef:bf: ab:60:bc:87:85:d7:a6:c5:ae:31:42:48:9f:22:b8:c0:92:4b: 48:dc:02:3f:cb:c0:dd:5e:f1:b7:57:b3:f7:79:60:01:74:dd: 33:98:7c:52:44:f7:20:22:68:86:ab:06:44:2f:28:fc:51:cd: 1d:78:68:01:63:1d:39:2a:5f:92:ef:cc:36:9f:f2:51:53:8a: 5b:ba:12:8e:32:9f:c2:22:54:79:a1:12:26:31:54:7a:1f:91: 20:89:5e:cb:f6:8f:dc:45:54:48:16:18:74:4b:62:ff:f2:c2: 2f:7c:fd:ef:40:ef:76:b6:18:4a:2d:64:95:ac:ab:ad:e0:da: 94:19:29:52:27:9c:59:7d:92:2e:1b:26:8c:59:2a:e0:f4:9f: 15:0b:c4:bc:5c:45:e1:23:ea:d7:57:ba:60:86:80:bb:d1:6f: a5:3b:b8:6e:93:c2:d1:eb:15:17:d4:94:2f:2c:d3:e7:07:cd: 72:e8:23:d7:7c:f2:e2:7b:71:74:8d:7e:97:1e:e6:b5:bb:f1: 5b:de:ef:a0:1e:e4:be:5f:91:3b:0c:97:6c:12:30:4e:02:19: cf:bd:dd:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqbcAz8eXFjCQtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YmJlN2UwOGYtZTlhMy00YzUxLWJkNDMtYzhlMmM0MmMyNzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9QCEg0l/FXk1Brxrew59KniGXGL/boNVSeO cDfBfw2vVpuJCfBqZvmSxwfQDBv/ci8x7uRGhndUaotzV5awhHQTrdUwNdouE9SA fC6Pm060IrO1fc41McthgERrTTECk0IwExwVujqUi0lZMm/Bk2f7cHW7xZou0iNC HOYVyZZSCnv+LFGR0hjz4jx4syrIgTdes9rcG8SF4q8IeZFWjyM77DJN6nUbloiQ N/JmqiuRMGPEXI9YDrRp8Sw6sPBx2vUW+MtMOVVoqa8qs/rThw3gs8jJ0OiKEnbs sfv3bzEnzT8I69QspJu1ipw/wc6Lq9PkwdQY4LnqPsKSaxwqyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0Kag558q9OKgFSTyru0w/1xm2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYTcwNDY4ODMtZDllZS0z ZWZlLWJjY2QtY2I2YTAxM2IzYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAw1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKl///y75aQM3xKoSW1AAWQEm1QgTReWVbZ8Q5wW7ccYqt/vv6tgvIeF 16bFrjFCSJ8iuMCSS0jcAj/LwN1e8bdXs/d5YAF03TOYfFJE9yAiaIarBkQvKPxR zR14aAFjHTkqX5LvzDaf8lFTilu6Eo4yn8IiVHmhEiYxVHofkSCJXsv2j9xFVEgW GHRLYv/ywi98/e9A73a2GEotZJWsq63g2pQZKVInnFl9ki4bJoxZKuD0nxULxLxc ReEj6tdXumCGgLvRb6U7uG6TwtHrFRfUlC8s0+cHzXLoI9d88uJ7cXSNfpce5rW7 8Vve76Ae5L5fkTsMl2wSME4CGc+93fQ= -----END CERTIFICATE-----Generated at Fri Apr 11 21:57:11 2025 by rpki-client