$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/f37b6cb1-4258-3284-b2e2-fb064f924cb5.roa File: f37b6cb1-4258-3284-b2e2-fb064f924cb5.roa (raw, json) Hash identifier: f4zuy3MpizYYkMBfurh5XjWVqVS9qSJckDsAokb8wPg= Subject key identifier: CB:D5:97:E2:BA:A2:03:EE:91:14:E9:F2:34:E5:FD:AF:A4:27:01:4D Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F43285848F22C682927D6FE124D28BE40 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/f37b6cb1-4258-3284-b2e2-fb064f924cb5.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 11650 IP address blocks: 192.159.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:68:29:27:d6:fe:12:4d:28:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=52e19716-8e76-4d7e-8e5e-418dc41e9fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:16:0f:ca:03:01:4d:81:23:7a:33:27:54: 96:b3:45:e9:c5:e6:8a:d4:8f:7d:75:c1:04:7b:ff: 7e:57:1c:07:30:98:22:e4:55:b0:2d:e0:f3:4f:1f: 17:50:a9:15:08:15:64:99:10:9e:b6:ce:77:e2:b4: ba:0c:83:dd:56:12:f0:b1:5d:e8:b2:f3:3d:28:7f: a2:06:ed:ce:1b:74:4d:d0:81:08:2a:56:8a:6e:ea: f5:91:73:b0:bf:87:26:ee:92:4b:4f:bb:10:08:d2: 36:d2:bb:83:34:15:3e:6b:33:4c:31:61:dc:42:6a: ba:bc:7d:d8:eb:fb:58:2f:99:2e:69:aa:f1:8d:9e: 1b:42:fc:1d:c7:e7:f6:dd:70:9f:87:16:6a:bc:6c: b4:af:93:6c:a3:b5:f3:6c:56:36:b7:38:bd:79:0e: 9f:71:f2:9f:c5:8b:73:51:fc:b2:43:9d:4c:8f:e1: 88:5c:2d:44:48:2f:78:ff:d2:fb:b6:b1:0e:27:69: fa:85:24:77:bd:7e:fb:c6:e2:94:f7:58:08:f9:07: f3:c7:1b:3a:e3:a4:6b:5c:24:19:5c:d0:7e:86:2a: ab:81:38:0c:76:c5:42:83:19:ad:76:a1:ce:08:8a: 51:d9:ae:c0:2e:df:61:b1:91:50:ad:1b:7a:34:7d: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D5:97:E2:BA:A2:03:EE:91:14:E9:F2:34:E5:FD:AF:A4:27:01:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/f37b6cb1-4258-3284-b2e2-fb064f924cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 192.159.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cf:c9:99:a8:6c:11:5e:e9:70:c3:fc:14:b1:ff:62:d8:8c: de:33:79:36:1e:47:2f:63:93:38:43:21:c4:0d:f2:e6:4a:2b: 26:a3:42:bc:6b:79:69:58:bf:41:e5:2c:30:21:0b:14:f0:09: a0:3a:79:7d:2b:f3:2d:ee:75:2b:9a:ec:d4:96:de:64:c4:54: 6f:5d:a5:90:ab:a9:4b:42:35:f9:56:8f:30:d4:3d:98:88:21: 06:d0:2f:ae:b5:67:a9:6b:a9:2a:de:40:39:0a:c3:a8:e0:ee: 9a:11:78:8f:04:de:77:ed:e2:50:4f:b1:fd:d3:ac:00:80:f7: 08:ff:86:0f:2d:28:79:db:e5:a0:11:82:cf:87:f2:ee:1f:af: de:08:c7:1c:4d:83:9d:26:f6:4e:e6:49:0e:b8:57:f1:a0:64: 31:63:c9:75:d1:1f:85:76:a0:9e:f3:44:63:c3:da:c6:ad:1e: 6c:e7:ea:86:df:59:c0:39:d9:65:84:c3:2d:67:84:71:ee:11: d5:fd:33:11:b1:5c:51:72:9a:4b:21:41:c2:4b:18:7e:55:2e: 77:0f:e3:d4:9a:3c:20:c3:fb:62:d0:74:5c:a2:59:ad:ec:dd: 39:4a:3a:b6:fe:b6:ff:fc:46:ab:f8:4b:d9:9a:f5:66:1c:c4: 2a:05:54:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGgpJ9b+Ek0ovkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NTJlMTk3MTYtOGU3Ni00ZDdlLThlNWUtNDE4ZGM0MWU5ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMoWD8oDAU2BI3ozJ1SWs0XpxeaK1I99dcEE e/9+VxwHMJgi5FWwLeDzTx8XUKkVCBVkmRCets534rS6DIPdVhLwsV3osvM9KH+i Bu3OG3RN0IEIKlaKbur1kXOwv4cm7pJLT7sQCNI20ruDNBU+azNMMWHcQmq6vH3Y 6/tYL5kuaarxjZ4bQvwdx+f23XCfhxZqvGy0r5Nso7XzbFY2tzi9eQ6fcfKfxYtz UfyyQ51Mj+GIXC1ESC94/9L7trEOJ2n6hSR3vX77xuKU91gI+Qfzxxs646RrXCQZ XNB+hiqrgTgMdsVCgxmtdqHOCIpR2a7ALt9hsZFQrRt6NH2P9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvVl+K6ogPukRTp8jTl/a+kJwFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvZjM3YjZjYjEtNDI1OC0z Mjg0LWIyZTItZmIwNjRmOTI0Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArPyZmobBFe6XDD/BSx/2LYjN4zeTYeRy9jkzhDIcQN8uZKKyajQrxr eWlYv0HlLDAhCxTwCaA6eX0r8y3udSua7NSW3mTEVG9dpZCrqUtCNflWjzDUPZiI IQbQL661Z6lrqSreQDkKw6jg7poReI8E3nft4lBPsf3TrACA9wj/hg8tKHnb5aAR gs+H8u4fr94IxxxNg50m9k7mSQ64V/GgZDFjyXXRH4V2oJ7zRGPD2satHmzn6obf WcA52WWEwy1nhHHuEdX9MxGxXFFymkshQcJLGH5VLncP49SaPCDD+2LQdFyiWa3s 3TlKOrb+tv/8Rqv4S9ma9WYcxCoFVJg= -----END CERTIFICATE-----Generated at Fri Mar 14 13:43:56 2025 by rpki-client