$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa File: ddb3fe35-de01-37de-97b9-af36a60b3a63.roa (raw, json) Hash identifier: v54JIT78WArH/ITkH/8EgmUM34n8BQ25LgyazFSCxWU= Subject key identifier: 7C:22:52:6B:E8:48:CF:89:FA:06:11:58:EC:62:89:19:02:19:FF:6C Certificate issuer: /CN=c682a716-bb81-4916-beba-279628f77a85 Certificate serial: 010D0C9F4328584909E6A53C859C790456032000 Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 192.122.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a5:3c:85:9c:79:04:56:03:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c682a716-bb81-4916-beba-279628f77a85 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=704c2cd8-f673-4f1b-a935-878e458c4f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:9a:65:c2:88:6c:a6:6f:15:45:e2:9c:b1: aa:54:94:75:25:36:5d:31:c2:b3:86:9d:27:02:e5: e3:d9:5c:e8:18:a4:cc:ed:f6:bc:6f:c8:6a:5d:91: b8:ea:70:b7:50:f8:f2:8a:02:18:9f:26:94:91:5e: 69:61:c5:27:f1:69:fe:cb:05:0d:38:48:87:de:2f: 2b:b5:56:a6:b8:87:01:8b:66:d8:46:76:9b:4e:96: 86:8e:2d:1e:2a:59:4c:83:88:0c:7e:33:1e:ac:e3: 93:27:91:92:9c:0b:ee:ad:d4:f4:e5:f1:e9:3a:31: 69:30:d1:25:e3:90:ba:df:84:59:87:6c:4b:98:1c: b7:43:32:a7:f6:58:34:61:f1:2c:d0:2b:25:a4:0e: 03:a9:40:f7:bd:96:80:58:fd:82:d6:23:d6:e9:b8: 4f:0c:dc:fc:3f:ae:a2:df:5a:fb:80:1e:1e:98:ed: 9a:74:3b:49:bd:00:27:92:98:03:e0:c3:3d:d2:bf: ed:ac:59:0b:dc:ec:11:75:81:d0:da:93:5e:54:4e: 2a:a5:de:d6:75:ad:21:3e:0d:09:cc:2d:7b:20:05: 42:a4:98:8e:63:6d:ac:4e:5a:f1:71:cd:7c:70:f7: b3:0d:d6:d5:38:ca:5b:b6:c7:8c:9a:ec:0f:48:1b: 1a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:22:52:6B:E8:48:CF:89:FA:06:11:58:EC:62:89:19:02:19:FF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl X509v3 Authority Key Identifier: keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer sbgp-ipAddrBlock: critical IPv4: 192.122.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:42:85:9e:56:cc:60:92:62:fa:68:9a:19:f1:a2:9a:b0:c6: d0:ec:9a:a1:5c:a6:10:09:eb:b4:29:8c:62:8c:f9:c2:a7:d9: ed:56:31:ab:5d:24:cf:ed:b3:17:c4:f8:ec:cb:c9:dd:86:87: ed:77:50:b9:73:42:76:dc:14:79:de:d0:8a:6b:5a:5c:0c:d5: 49:90:3d:2a:d7:4a:0a:0a:9e:ba:78:c6:3e:b1:a3:19:a7:60: 6a:4b:8d:b7:f7:70:16:ed:f5:55:4b:db:bd:01:b2:48:c8:18: ff:87:3c:77:03:74:76:f9:50:19:e7:30:2d:62:37:52:96:28: 46:cd:3b:19:ba:d5:83:2e:1b:3a:18:21:70:cf:ef:10:40:3d: ef:e4:c2:1b:09:70:bf:9d:08:40:93:8c:42:e5:e5:a2:49:ee: 51:8a:ce:ac:4b:ca:03:0b:91:b8:67:92:78:2c:4f:2a:fd:6b: 7c:04:4c:c7:08:8c:cc:d7:c2:97:ca:82:4b:34:46:04:24:95: fd:50:fd:1e:e4:eb:57:4e:e7:25:14:e3:6f:ec:9c:50:55:93: 9e:0d:63:8a:64:19:a5:73:5f:93:9f:9c:c3:7d:79:e3:58:55: 4f:0a:ff:28:ee:83:2c:7b:d2:70:ba:b1:44:fa:ac:5b:db:be: 7b:fb:7a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qU8hZx5BFYDIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4MmE3MTYtYmI4MS00OTE2LWJlYmEtMjc5NjI4Zjc3 YTg1MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NzA0YzJjZDgtZjY3My00ZjFiLWE5MzUtODc4ZTQ1OGM0ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxqaZcKIbKZvFUXinLGqVJR1JTZdMcKzhp0n AuXj2VzoGKTM7fa8b8hqXZG46nC3UPjyigIYnyaUkV5pYcUn8Wn+ywUNOEiH3i8r tVamuIcBi2bYRnabTpaGji0eKllMg4gMfjMerOOTJ5GSnAvurdT05fHpOjFpMNEl 45C634RZh2xLmBy3QzKn9lg0YfEs0CslpA4DqUD3vZaAWP2C1iPW6bhPDNz8P66i 31r7gB4emO2adDtJvQAnkpgD4MM90r/trFkL3OwRdYHQ2pNeVE4qpd7Wda0hPg0J zC17IAVCpJiOY22sTlrxcc18cPezDdbVOMpbtseMmuwPSBsaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwiUmvoSM+J+gYRWOxiiRkCGf9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNjgy YTcxNi1iYjgxLTQ5MTYtYmViYS0yNzk2MjhmNzdhODUvZGRiM2ZlMzUtZGUwMS0z N2RlLTk3YjktYWYzNmE2MGIzYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzY4MmE3MTYtYmI4MS00OTE2LWJl YmEtMjc5NjI4Zjc3YTg1L2M2ODJhNzE2LWJiODEtNDkxNi1iZWJhLTI3OTYyOGY3 N2E4NS5jcmwwHwYDVR0jBBgwFoAUMTOGMIG2zixDvy3B4mOBI8QH2vUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNjgyYTcxNi1iYjgxLTQ5MTYtYmViYS0yNzk2 MjhmNzdhODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVChZ5WzGCSYvpomhnxopqwxtDsmqFcphAJ67QpjGKM+cKn2e1WMatd JM/tsxfE+OzLyd2Gh+13ULlzQnbcFHne0IprWlwM1UmQPSrXSgoKnrp4xj6xoxmn YGpLjbf3cBbt9VVL270BskjIGP+HPHcDdHb5UBnnMC1iN1KWKEbNOxm61YMuGzoY IXDP7xBAPe/kwhsJcL+dCECTjELl5aJJ7lGKzqxLygMLkbhnkngsTyr9a3wETMcI jMzXwpfKgks0RgQklf1Q/R7k61dO5yUU42/snFBVk54NY4pkGaVzX5OfnMN9eeNY VU8K/yjugyx70nC6sUT6rFvbvnv7ekQ= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:42 2025 by rpki-client