$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa File: dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa (raw, json) Hash identifier: +44PLwzVhN2EzYPjRAMDCvMV+yKj5C/cuZOhufhBZrU= Subject key identifier: 11:A1:1F:F4:40:17:CF:7C:E9:F1:04:17:AD:82:AF:C3:F5:5B:E6:4D Certificate issuer: /CN=4f7673d9-8cbe-46cb-ad6c-660142f77eaf Certificate serial: 010D0C9F4328584944693E0BD9C22ED843519E00 Authority key identifier: 17:BB:6A:F5:E0:38:02:63:D7:11:32:C9:57:E9:08:8C:25:21:32:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 63180 IP address blocks: 192.55.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3e:0b:d9:c2:2e:d8:43:51:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f7673d9-8cbe-46cb-ad6c-660142f77eaf Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=8d693903-9ca2-4e36-9c87-e7d015ef2554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:69:54:5b:8d:f9:ff:c6:41:3f:34:47:e5:24: 18:49:6c:4b:87:54:07:8c:34:bd:c2:02:d4:b5:4e: 23:50:f5:80:a1:21:4d:bc:7e:df:8c:0b:a3:93:31: 13:ed:34:bd:52:0d:fc:c6:7e:50:c0:ec:21:f5:97: cc:d7:b1:62:35:22:cc:b5:cc:96:a1:a9:db:67:e4: 82:0f:77:c2:0b:7f:a5:dc:bd:ca:58:31:d4:f9:f4: 06:4a:71:60:84:08:58:3e:af:86:57:60:d0:4a:30: 3f:34:cd:dc:50:81:bb:58:b5:8b:89:fe:13:82:c2: d6:bd:16:3e:01:56:80:7d:12:ae:3f:b1:fc:f3:91: 27:25:3a:e7:6d:11:e0:ea:eb:71:9b:c7:49:47:e9: ba:1b:cf:e8:bb:61:60:78:3e:ac:61:5a:a6:18:1d: d5:a2:da:d1:c1:35:45:65:88:ba:6d:18:6a:6e:da: 21:ee:fd:8b:e2:6e:2e:b2:e9:db:1e:35:85:1a:8e: c1:f2:99:89:94:f4:52:26:eb:10:89:02:1a:8b:23: 83:dd:96:3d:e9:5e:c9:7a:6b:e9:fd:3e:51:8f:03: 66:8f:a7:01:36:ff:0a:3b:f3:32:d5:d5:cf:72:58: 98:a8:2c:0d:c3:94:b4:c9:64:59:fa:d7:de:48:6d: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A1:1F:F4:40:17:CF:7C:E9:F1:04:17:AD:82:AF:C3:F5:5B:E6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.crl X509v3 Authority Key Identifier: keyid:17:BB:6A:F5:E0:38:02:63:D7:11:32:C9:57:E9:08:8C:25:21:32:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer sbgp-ipAddrBlock: critical IPv4: 192.55.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:de:a3:b4:f4:85:e4:5f:6c:67:23:7c:bd:c1:46:e0:9a:28: 0d:1e:ff:57:62:1e:d1:a9:8f:b3:22:c2:f8:f6:e4:c7:0e:6e: c8:9f:c3:a9:e0:a1:a2:54:1c:ba:2b:f2:44:d6:a3:be:06:83: 74:2f:62:0e:21:99:a5:6e:eb:aa:26:af:41:b0:f8:b5:b1:cb: 5c:7a:d1:a1:f0:4c:cd:73:dd:bd:d1:19:d2:f7:d6:a8:fe:28: a3:c0:aa:a3:e2:a8:c5:67:37:64:ed:dd:f0:af:85:91:23:6e: 88:0e:1a:c9:c9:44:ed:c6:f1:8a:da:bf:e9:d0:1f:ad:3e:1f: 98:e2:5c:c9:9b:9c:6b:9e:ab:17:e5:97:52:66:cb:ee:63:3e: 23:bc:32:b3:5c:7c:ca:7c:5c:7e:b4:f8:db:c5:16:68:3c:cd: 20:d8:d8:19:43:20:67:88:95:a6:0a:93:d0:f2:b2:a5:d8:09: 58:e5:38:f2:3e:52:f0:e6:c0:25:1d:1d:42:2c:1d:93:66:d6: fe:4d:48:66:43:19:c1:14:94:b4:06:0a:21:c5:4f:fc:53:3f: 74:87:54:76:85:16:52:13:a1:9b:a1:2f:cb:0d:58:fa:80:5e: ec:1f:4a:12:ce:04:e4:b6:44:21:f4:84:b2:72:48:f3:c2:7e: 66:4b:91:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT4L2cIu2ENRngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY3NjczZDktOGNiZS00NmNiLWFkNmMtNjYwMTQyZjc3 ZWFmMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk OGQ2OTM5MDMtOWNhMi00ZTM2LTljODctZTdkMDE1ZWYyNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGlUW435/8ZBPzRH5SQYSWxLh1QHjDS9wgLU tU4jUPWAoSFNvH7fjAujkzET7TS9Ug38xn5QwOwh9ZfM17FiNSLMtcyWoanbZ+SC D3fCC3+l3L3KWDHU+fQGSnFghAhYPq+GV2DQSjA/NM3cUIG7WLWLif4TgsLWvRY+ AVaAfRKuP7H885EnJTrnbRHg6utxm8dJR+m6G8/ou2FgeD6sYVqmGB3VotrRwTVF ZYi6bRhqbtoh7v2L4m4usunbHjWFGo7B8pmJlPRSJusQiQIaiyOD3ZY96V7Jemvp /T5RjwNmj6cBNv8KO/My1dXPcliYqCwNw5S0yWRZ+tfeSG3MyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGhH/RAF8986fEEF62Cr8P1W+ZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80Zjc2 NzNkOS04Y2JlLTQ2Y2ItYWQ2Yy02NjAxNDJmNzdlYWYvZGJhYTJkYmYtMGY3Zi0z ZGIxLWJjNDgtNWU5YTNjYjlhZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGY3NjczZDktOGNiZS00NmNiLWFk NmMtNjYwMTQyZjc3ZWFmLzRmNzY3M2Q5LThjYmUtNDZjYi1hZDZjLTY2MDE0MmY3 N2VhZi5jcmwwHwYDVR0jBBgwFoAUF7tq9eA4AmPXETLJV+kIjCUhMhIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80Zjc2NzNkOS04Y2JlLTQ2Y2ItYWQ2Yy02NjAx NDJmNzdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPeo7T0heRfbGcjfL3BRuCaKA0e/1diHtGpj7Miwvj25McObsifw6ng oaJUHLor8kTWo74Gg3QvYg4hmaVu66omr0Gw+LWxy1x60aHwTM1z3b3RGdL31qj+ KKPAqqPiqMVnN2Tt3fCvhZEjbogOGsnJRO3G8Yrav+nQH60+H5jiXMmbnGueqxfl l1Jmy+5jPiO8MrNcfMp8XH60+NvFFmg8zSDY2BlDIGeIlaYKk9DysqXYCVjlOPI+ UvDmwCUdHUIsHZNm1v5NSGZDGcEUlLQGCiHFT/xTP3SHVHaFFlIToZuhL8sNWPqA XuwfShLOBOS2RCH0hLJySPPCfmZLkXU= -----END CERTIFICATE-----Generated at Sat Apr 12 10:08:19 2025 by rpki-client