$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa File: 1a8e232f-f83b-3de7-8816-63d5567cf47b.roa (raw, json) Hash identifier: GtIhFuOKc/KgD5CavgQitymeSgqS7ed7uug7f8DFzr8= Subject key identifier: D7:DB:D6:07:9D:0F:F1:B3:DF:A3:0B:2E:CF:2A:A7:6B:E4:B6:B3:8B Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584937D93A306F61098652613E80 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 30045 IP address blocks: 192.75.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3a:30:6f:61:09:86:52:61:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=c06c3065-2776-48d0-a97f-9d03060263a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:94:66:ae:f6:50:5a:62:02:d8:bb:0b:77: 86:1e:ce:12:19:58:ed:0a:a3:55:78:1c:c2:bd:66: 30:0c:c2:a3:69:ca:9c:ac:47:fb:28:9c:9e:a2:6a: 0e:b0:47:ea:ae:ae:fb:95:9e:8a:6d:00:a1:53:bc: 24:57:ed:71:25:ef:f1:eb:e2:12:29:73:4c:86:ae: 71:a7:a1:bd:4c:e2:7f:7a:d3:74:3e:6b:76:ec:8c: 33:5a:e0:b1:c3:f3:af:50:f1:c9:2d:40:98:ba:07: f3:50:8e:95:58:48:77:61:69:53:de:e4:f7:85:a6: 69:ab:63:9f:71:70:48:d6:14:29:e7:bd:73:4c:a0: 6c:57:01:f0:c3:45:8e:51:c2:a8:27:68:90:d0:7f: f0:e4:e3:5e:68:1a:cc:c4:bd:57:50:7f:01:d9:da: 03:02:76:37:be:fa:98:38:88:a7:2e:e9:f1:63:2f: 18:20:10:6b:4a:4b:c6:1a:e5:97:52:40:c7:49:57: 13:51:65:94:ae:cf:8a:ae:9a:85:7f:c0:de:da:ab: 55:14:c5:12:17:58:51:dd:e9:f2:d9:c9:b5:dd:45: 27:58:5f:63:f2:b0:13:0e:8a:db:e3:07:d3:50:47: ec:3a:d2:c3:31:23:c0:34:18:1e:d5:93:fb:a7:5c: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DB:D6:07:9D:0F:F1:B3:DF:A3:0B:2E:CF:2A:A7:6B:E4:B6:B3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv4: 192.75.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:cd:7a:67:a2:ae:e1:d2:7e:54:ec:ab:ee:ad:d9:1f:5c:76: a2:10:3d:71:9a:40:ee:88:72:4d:71:f3:ca:eb:41:47:55:97: 04:37:cd:8d:66:6c:35:cd:0b:bc:b6:19:45:f5:1f:ce:82:13: 15:d0:71:4d:55:88:48:fd:70:be:3d:67:da:e8:e5:b9:9b:7d: 41:7d:40:df:99:dd:70:b1:62:4d:47:60:f7:73:81:02:99:a8: 5d:7d:b8:36:24:e8:71:2e:74:e2:c9:f4:70:81:d0:5a:56:56: 68:5d:2c:e8:2d:80:24:10:09:39:c0:35:04:ba:c6:da:60:4c: 3a:6f:86:4c:33:e5:32:19:ef:8a:a9:51:dc:50:19:2e:9d:af: b5:50:10:62:a2:8d:9f:b9:86:38:10:14:dc:01:36:2f:89:9a: 7c:be:21:54:00:54:fd:09:49:96:17:78:bb:70:44:53:ab:a7: 01:7e:e2:9b:ed:80:06:6e:e8:44:9c:d9:fb:37:a4:18:5e:ad: 29:70:ab:c1:5b:e0:4b:1c:c7:0a:42:40:a7:ab:13:17:79:69: 34:34:6d:80:5e:58:37:22:96:bc:c7:1b:85:e5:32:e4:61:1e: 79:ff:73:f8:8a:3c:a3:d3:fe:d9:f3:a5:23:3a:79:5e:c9:2d: 5c:32:c6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32Towb2EJhlJhPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk YzA2YzMwNjUtMjc3Ni00OGQwLWE5N2YtOWQwMzA2MDI2M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobeUZq72UFpiAti7C3eGHs4SGVjtCqNVeBzC vWYwDMKjacqcrEf7KJyeomoOsEfqrq77lZ6KbQChU7wkV+1xJe/x6+ISKXNMhq5x p6G9TOJ/etN0Pmt27IwzWuCxw/OvUPHJLUCYugfzUI6VWEh3YWlT3uT3haZpq2Of cXBI1hQp571zTKBsVwHww0WOUcKoJ2iQ0H/w5ONeaBrMxL1XUH8B2doDAnY3vvqY OIinLunxYy8YIBBrSkvGGuWXUkDHSVcTUWWUrs+KrpqFf8De2qtVFMUSF1hR3eny 2cm13UUnWF9j8rATDorb4wfTUEfsOtLDMSPANBge1ZP7p1zwKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfb1gedD/Gz36MLLs8qp2vktrOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvMWE4ZTIzMmYtZjgzYi0z ZGU3LTg4MTYtNjNkNTU2N2NmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEulMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/NemeiruHSflTsq+6t2R9cdqIQPXGaQO6Ick1x88rrQUdVlwQ3zY1m bDXNC7y2GUX1H86CExXQcU1ViEj9cL49Z9ro5bmbfUF9QN+Z3XCxYk1HYPdzgQKZ qF19uDYk6HEudOLJ9HCB0FpWVmhdLOgtgCQQCTnANQS6xtpgTDpvhkwz5TIZ74qp UdxQGS6dr7VQEGKijZ+5hjgQFNwBNi+Jmny+IVQAVP0JSZYXeLtwRFOrpwF+4pvt gAZu6ESc2fs3pBherSlwq8Fb4EscxwpCQKerExd5aTQ0bYBeWDcilrzHG4XlMuRh Hnn/c/iKPKPT/tnzpSM6eV7JLVwyxvA= -----END CERTIFICATE-----Generated at Mon Apr 7 16:52:37 2025 by rpki-client