$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa File: bc7b5153-4728-3649-bc82-4499eb9a7abb.roa (raw, json) Hash identifier: C/w04CsceXw3f12NWLXtPv3MOnGueqQeOrZNegsFPew= Subject key identifier: 61:06:D3:95:7F:83:F7:7B:C2:B2:23:63:0D:26:D8:1E:5B:D4:16:DF Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F43285848E006543ACEBB251478802280 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 192.41.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:54:3a:ce:bb:25:14:78:80:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=4a5633df-f0a6-4a3a-ade2-3fbabc7829a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:12:00:eb:41:ec:c9:a4:1d:dd:03:ec:38: 5b:98:0d:6a:0e:6c:09:e6:19:e6:00:b6:fd:6e:f8: 1a:d3:59:ca:06:62:99:c6:c4:0c:f9:e6:e8:0b:80: 5d:f0:87:1b:a9:3c:d8:bc:ac:be:eb:54:dd:60:39: 92:74:70:d3:47:12:bc:b3:c1:fb:36:b9:5f:05:b0: a8:4c:31:9e:6f:5b:a2:69:5f:70:01:f9:a5:a6:70: b7:a3:55:4c:46:72:b0:81:63:69:e1:f7:7e:32:82: 0e:06:79:86:d8:c4:24:57:df:b3:79:34:a5:53:d6: e5:d8:6d:27:45:10:e9:1d:00:49:b2:90:dc:31:9c: f7:0c:26:8b:a5:62:4a:19:d3:c8:c6:8c:0d:37:bf: 0a:13:eb:e1:6c:ba:9a:ab:b4:c2:7d:9b:17:e2:b3: ea:b1:4b:b6:e3:90:71:81:44:53:d3:f9:94:18:a1: af:b5:d8:1d:f9:2d:56:8a:c8:a5:e3:0d:99:6c:6e: 2c:bf:f3:43:e0:a1:55:b4:16:cc:97:04:26:ac:23: 9b:ef:4c:30:83:78:0e:cb:26:23:c6:93:38:5d:bd: 64:06:45:23:43:ca:7f:b4:e4:c9:d8:ae:23:55:49: f4:95:a1:0a:0e:50:59:4d:97:3c:e8:57:f6:86:ab: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:06:D3:95:7F:83:F7:7B:C2:B2:23:63:0D:26:D8:1E:5B:D4:16:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 192.41.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4a:00:50:de:2b:ba:49:5d:de:71:0f:ab:04:ec:b6:cf:ae: a0:9e:26:29:2d:dd:9d:36:99:82:45:b1:c4:81:0b:2e:54:99: 75:31:05:5a:15:d7:8f:1c:f4:a9:98:46:8c:be:a8:9b:1a:c9: 22:0f:3d:49:2d:3e:97:c6:f8:99:5c:18:85:97:40:eb:69:7f: cc:74:dc:8c:9d:b3:f3:8b:a2:59:9a:85:89:06:27:fa:3f:23: 4f:dc:4c:29:00:45:e0:f3:fa:67:c4:8a:a3:aa:d3:6e:43:ad: c0:f4:39:b1:19:70:d4:5c:a1:65:01:3d:bb:39:19:38:eb:b7: 58:f2:1d:a0:8c:53:b6:16:1b:9a:ad:b0:60:1f:63:6d:90:fc: 0a:a7:a3:b7:f5:e0:44:da:12:1d:ff:a6:ef:a2:2a:24:fe:16: dc:81:d7:5c:9b:40:c0:e4:b7:56:6f:48:70:40:54:63:d2:0b: 18:9d:63:6d:2c:eb:cc:92:ef:7e:31:7a:a9:ca:a2:8f:cf:48: 27:06:42:74:17:c0:09:d6:00:50:41:68:94:5d:64:18:a2:30: 04:15:f6:44:78:f1:8b:b2:76:72:2c:5a:02:40:fe:4a:2c:e3: 64:f5:54:f6:a8:ad:ad:6c:82:85:48:4c:ba:2d:88:30:61:0e: dd:7a:a5:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlQ6zrslFHiAIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NGE1NjMzZGYtZjBhNi00YTNhLWFkZTItM2ZiYWJjNzgyOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB4SAOtB7MmkHd0D7DhbmA1qDmwJ5hnmALb9 bvga01nKBmKZxsQM+eboC4Bd8IcbqTzYvKy+61TdYDmSdHDTRxK8s8H7NrlfBbCo TDGeb1uiaV9wAfmlpnC3o1VMRnKwgWNp4fd+MoIOBnmG2MQkV9+zeTSlU9bl2G0n RRDpHQBJspDcMZz3DCaLpWJKGdPIxowNN78KE+vhbLqaq7TCfZsX4rPqsUu245Bx gURT0/mUGKGvtdgd+S1Wisil4w2ZbG4sv/ND4KFVtBbMlwQmrCOb70wwg3gOyyYj xpM4Xb1kBkUjQ8p/tOTJ2K4jVUn0laEKDlBZTZc86Ff2hqsbbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEG05V/g/d7wrIjYw0m2B5b1BbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvYmM3YjUxNTMtNDcyOC0z NjQ5LWJjODItNDQ5OWViOWE3YWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxKAFDeK7pJXd5xD6sE7LbPrqCeJikt3Z02mYJFscSBCy5UmXUxBVoV 148c9KmYRoy+qJsaySIPPUktPpfG+JlcGIWXQOtpf8x03Iyds/OLolmahYkGJ/o/ I0/cTCkAReDz+mfEiqOq025DrcD0ObEZcNRcoWUBPbs5GTjrt1jyHaCMU7YWG5qt sGAfY22Q/Aqno7f14ETaEh3/pu+iKiT+FtyB11ybQMDkt1ZvSHBAVGPSCxidY20s 68yS734xeqnKoo/PSCcGQnQXwAnWAFBBaJRdZBiiMAQV9kR48YuydnIsWgJA/kos 42T1VPaora1sgoVITLotiDBhDt16pYg= -----END CERTIFICATE-----Generated at Fri Apr 4 23:47:48 2025 by rpki-client