$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/6f20e311-325e-33f5-895e-6e4a807162d7.roa File: 6f20e311-325e-33f5-895e-6e4a807162d7.roa (raw, json) Hash identifier: wL1cjdlUsimBCuPClWNsO+9UlDts4N3Ks60CTXo+kCY= Subject key identifier: 0A:88:CC:52:A0:B0:92:3B:87:3A:6A:77:B3:9E:34:6F:D1:DD:7A:F0 Certificate issuer: /CN=47cb54de-492e-46c3-9427-1c9e425c3663 Certificate serial: 010D0C9F43285848BFEBA3E4B654CDD482A12A80 Authority key identifier: 5F:AC:23:65:E9:E7:97:34:85:CB:86:0D:83:28:73:8B:0D:A3:F9:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/6f20e311-325e-33f5-895e-6e4a807162d7.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 4906 IP address blocks: 192.223.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/47cb54de-492e-46c3-9427-1c9e425c3663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/47cb54de-492e-46c3-9427-1c9e425c3663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a3:e4:b6:54:cd:d4:82:a1:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47cb54de-492e-46c3-9427-1c9e425c3663 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=e4b490ce-a3bd-430d-95db-3556cb45e60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:81:43:d9:5a:ca:19:84:c0:d8:61:0a:00: 2a:79:27:5c:75:d6:d8:0c:22:b1:4b:68:a5:d0:45: 5c:54:35:ea:ff:a5:91:72:2d:f8:97:da:8a:ac:da: 20:0e:ac:7b:9e:9b:da:46:4f:e0:7e:51:03:79:c5: 1b:e3:c8:bb:02:3c:25:9f:31:97:86:e9:38:3e:97: da:04:f1:03:b3:bd:63:38:19:8d:74:52:9e:b3:77: 02:c8:df:44:dd:c1:a1:62:eb:bf:33:9b:c8:56:bc: 8e:d9:a3:09:a4:2d:1e:7e:05:f2:d7:94:56:93:b5: 15:07:ec:cb:81:d0:41:b4:0b:6b:e6:51:3f:44:dd: 1c:dc:fc:55:9b:28:29:d2:c0:15:6f:5a:53:4d:c0: 07:a4:13:49:8e:e9:a5:1d:4f:3a:0e:32:c6:7b:f8: 86:02:6a:8b:22:5f:8b:d0:68:67:50:e3:31:9a:74: f4:4d:e3:89:10:d7:51:0a:ed:10:c0:ac:f4:32:55: b8:ca:34:55:88:e1:af:50:dc:fd:77:a3:67:30:84: 3c:e4:70:a4:4f:23:60:3f:ca:c3:d2:f1:42:4c:e8: 0c:d1:0e:f4:5a:4e:03:a3:c0:c9:ff:b1:c2:45:a5: fa:74:fd:e0:d1:ad:e7:21:5e:06:7d:30:27:b1:e8: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:88:CC:52:A0:B0:92:3B:87:3A:6A:77:B3:9E:34:6F:D1:DD:7A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/6f20e311-325e-33f5-895e-6e4a807162d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/47cb54de-492e-46c3-9427-1c9e425c3663.crl X509v3 Authority Key Identifier: keyid:5F:AC:23:65:E9:E7:97:34:85:CB:86:0D:83:28:73:8B:0D:A3:F9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663.cer sbgp-ipAddrBlock: critical IPv4: 192.223.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:13:26:ed:45:99:9f:cc:27:4b:93:00:6c:b1:d1:76:9c:8d: 7a:11:19:3a:4d:88:97:98:a6:7f:30:3a:b4:cf:42:05:8b:c9: c8:8a:dd:28:ac:50:b4:a8:89:c7:79:b5:42:27:b8:dc:48:8f: 5c:be:c4:ca:dc:a3:d1:84:6c:58:b8:ad:06:88:65:86:c4:c6: 84:e6:d4:3f:87:3a:61:58:78:42:cc:82:22:ab:f0:eb:aa:95: dc:68:cb:5b:e0:17:2f:37:1f:63:b8:c0:03:3a:b6:ac:fa:10: f4:31:e9:2e:98:75:6f:15:27:00:36:3d:92:7a:92:8d:06:f2: b1:ab:16:28:6f:0c:5c:9a:8b:60:b1:f0:40:36:87:0f:2f:1b: dc:5f:8d:c9:09:ad:22:13:91:c5:3c:c9:49:2b:46:e1:54:0f: b9:1b:d0:3a:44:14:66:74:48:c3:ce:d7:a8:6c:91:b0:66:da: 79:f7:a6:17:cc:4d:ee:98:e6:5c:a0:0e:eb:db:1f:ab:68:63: 2d:57:33:a4:90:be:8a:da:c7:ac:11:15:e8:00:0b:75:61:c9: 69:38:b5:b9:0e:2f:e9:1f:91:d5:2f:02:d3:79:54:ed:f5:87: fe:36:17:11:2f:68:05:02:ab:cf:e1:2f:eb:c2:4d:f9:f2:7f: 92:7f:2e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66PktlTN1IKhKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjYjU0ZGUtNDkyZS00NmMzLTk0MjctMWM5ZTQyNWMz NjYzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZTRiNDkwY2UtYTNiZC00MzBkLTk1ZGItMzU1NmNiNDVlNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnCBQ9layhmEwNhhCgAqeSdcddbYDCKxS2il 0EVcVDXq/6WRci34l9qKrNogDqx7npvaRk/gflEDecUb48i7AjwlnzGXhuk4Ppfa BPEDs71jOBmNdFKes3cCyN9E3cGhYuu/M5vIVryO2aMJpC0efgXy15RWk7UVB+zL gdBBtAtr5lE/RN0c3PxVmygp0sAVb1pTTcAHpBNJjumlHU86DjLGe/iGAmqLIl+L 0GhnUOMxmnT0TeOJENdRCu0QwKz0MlW4yjRViOGvUNz9d6NnMIQ85HCkTyNgP8rD 0vFCTOgM0Q70Wk4Do8DJ/7HCRaX6dP3g0a3nIV4GfTAnsejQVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqIzFKgsJI7hzpqd7OeNG/R3XrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80N2Ni NTRkZS00OTJlLTQ2YzMtOTQyNy0xYzllNDI1YzM2NjMvNmYyMGUzMTEtMzI1ZS0z M2Y1LTg5NWUtNmU0YTgwNzE2MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDdjYjU0ZGUtNDkyZS00NmMzLTk0 MjctMWM5ZTQyNWMzNjYzLzQ3Y2I1NGRlLTQ5MmUtNDZjMy05NDI3LTFjOWU0MjVj MzY2My5jcmwwHwYDVR0jBBgwFoAUX6wjZennlzSFy4YNgyhziw2j+VcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80N2NiNTRkZS00OTJlLTQ2YzMtOTQyNy0xYzll NDI1YzM2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwN8LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkTJu1FmZ/MJ0uTAGyx0XacjXoRGTpNiJeYpn8wOrTPQgWLyciK3Sis ULSoicd5tUInuNxIj1y+xMrco9GEbFi4rQaIZYbExoTm1D+HOmFYeELMgiKr8Ouq ldxoy1vgFy83H2O4wAM6tqz6EPQx6S6YdW8VJwA2PZJ6ko0G8rGrFihvDFyai2Cx 8EA2hw8vG9xfjckJrSITkcU8yUkrRuFUD7kb0DpEFGZ0SMPO16hskbBm2nn3phfM Te6Y5lygDuvbH6toYy1XM6SQvorax6wRFegAC3VhyWk4tbkOL+kfkdUvAtN5VO31 h/42FxEvaAUCq8/hL+vCTfnyf5J/Lq8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:02 2025 by rpki-client