$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa File: b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa (raw, json) Hash identifier: SUl3tccYMxmYZgF8X2+FtBTIl5RU8uuq9uxWvjOFelQ= Subject key identifier: A1:AA:A8:FE:84:13:4E:D5:30:85:D2:B2:25:85:D6:FF:37:48:29:BF Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848DA70F518B03839194F34F3C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 397422 IP address blocks: 192.95.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f5:18:b0:38:39:19:4f:34:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=034e1082-7e7c-484f-8367-6d7ebfdfe1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:5c:16:6c:6a:b3:d2:06:7e:da:06:47:f1: 22:fa:0f:6d:f1:f5:2b:85:0a:9f:bc:5a:87:c9:19: 94:9f:e0:bc:cd:9e:30:44:b0:d0:b5:53:d1:fb:26: c0:73:c0:7a:dd:8c:2c:9a:17:62:3a:58:85:20:06: 68:d5:a1:5c:09:81:22:12:c4:7f:13:38:b9:02:c5: b7:e7:dc:7c:7c:9c:04:a3:81:46:cf:23:4d:1e:5c: 56:29:38:4e:7d:b3:b6:16:e2:de:0c:ed:08:21:9a: 5a:88:30:1e:57:c9:d3:2a:66:50:d5:e4:1e:a5:15: f7:8c:6a:cb:c4:dd:45:ba:b8:c7:1c:49:1a:91:19: a6:25:62:5e:c9:97:4d:ac:97:dc:e3:a9:21:30:ea: 11:3f:be:8d:d1:9a:61:97:22:41:9e:f4:d3:62:d3: 6d:68:3a:eb:ad:61:4f:ce:c0:4c:30:1a:53:40:7b: 00:c8:1c:4e:e6:0e:6c:b5:57:12:58:ff:55:13:8d: ea:f5:78:d4:ce:58:ef:a6:1c:54:ad:3b:03:cc:24: 04:fc:47:13:c4:c8:4b:73:98:5e:96:27:d6:64:03: 1b:14:96:a8:9e:22:e9:c2:39:86:db:01:ee:30:6a: bf:b7:a3:3d:ed:ab:7c:41:36:31:9c:3a:99:2f:c2: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AA:A8:FE:84:13:4E:D5:30:85:D2:B2:25:85:D6:FF:37:48:29:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 192.95.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:53:74:79:3d:23:9f:d4:be:bc:08:17:e4:81:94:1a:9c:f1: 49:67:01:dc:04:40:d4:d3:a8:bc:ea:13:a2:60:a2:73:6d:4a: 69:f8:de:c0:1b:e4:04:4d:7f:0d:36:a8:e5:b5:21:ba:bf:e6: 49:53:3e:b4:f9:db:87:90:1e:7f:d9:e2:56:fa:02:8e:20:b2: 03:b3:e9:af:a4:b3:bb:fd:b3:8d:23:b0:b8:3a:9c:a0:2a:ae: 4e:61:ac:9f:e8:fe:e2:0e:be:bd:86:07:d0:1b:2a:2d:14:14: a7:dd:2b:3f:2a:2a:56:93:a1:d1:59:db:ba:57:10:fc:75:34: 2b:11:41:02:f5:36:28:4a:3b:13:ec:ed:f7:ea:b5:4d:f6:60: be:a3:66:e3:51:1a:db:7d:9a:d8:64:23:0a:7e:bc:9d:f5:d6: 79:a5:94:f5:33:45:5a:dc:74:68:d3:3a:9d:af:2f:52:59:fa: e5:61:0b:c3:82:9e:35:70:9b:a2:be:68:3a:6e:9a:22:f9:0d: d5:c1:ae:97:2d:1a:cc:68:af:e5:60:2b:69:c2:ea:7f:8d:61: f0:70:65:f0:9e:8a:9c:79:92:3e:d9:39:4b:62:0c:96:a8:83: 9a:83:cc:31:07:2f:5c:24:b3:53:7c:58:f6:76:9e:03:06:71: 49:2b:b3:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPUYsDg5GU8088AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk MDM0ZTEwODItN2U3Yy00ODRmLTgzNjctNmQ3ZWJmZGZlMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9dcFmxqs9IGftoGR/Ei+g9t8fUrhQqfvFqH yRmUn+C8zZ4wRLDQtVPR+ybAc8B63YwsmhdiOliFIAZo1aFcCYEiEsR/Ezi5AsW3 59x8fJwEo4FGzyNNHlxWKThOfbO2FuLeDO0IIZpaiDAeV8nTKmZQ1eQepRX3jGrL xN1FurjHHEkakRmmJWJeyZdNrJfc46khMOoRP76N0ZphlyJBnvTTYtNtaDrrrWFP zsBMMBpTQHsAyBxO5g5stVcSWP9VE43q9XjUzljvphxUrTsDzCQE/EcTxMhLc5he lifWZAMbFJaoniLpwjmG2wHuMGq/t6M97at8QTYxnDqZL8KlkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGqqP6EE07VMIXSsiWF1v83SCm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjdlNTA0YTQtZThiMC0z OGYzLTljY2YtZTcwZmE0OGFjMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFTdHk9I5/UvrwIF+SBlBqc8UlnAdwEQNTTqLzqE6JgonNtSmn43sAb 5ARNfw02qOW1Ibq/5klTPrT524eQHn/Z4lb6Ao4gsgOz6a+ks7v9s40jsLg6nKAq rk5hrJ/o/uIOvr2GB9AbKi0UFKfdKz8qKlaTodFZ27pXEPx1NCsRQQL1NihKOxPs 7ffqtU32YL6jZuNRGtt9mthkIwp+vJ311nmllPUzRVrcdGjTOp2vL1JZ+uVhC8OC njVwm6K+aDpumiL5DdXBrpctGsxor+VgK2nC6n+NYfBwZfCeipx5kj7ZOUtiDJao g5qDzDEHL1wks1N8WPZ2ngMGcUkrs2o= -----END CERTIFICATE-----Generated at Fri Mar 14 08:05:20 2025 by rpki-client