$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa File: 9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa (raw, json) Hash identifier: fMR1eYpoDV6hl3GfNTO37EC85a2lRYG+L19o/vphLn4= Subject key identifier: B6:6F:77:2B:A8:47:3B:4E:9D:DC:A3:E4:11:38:C5:A5:75:F1:1D:8D Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F43285848C41B7DE3B0B6867C425E8B80 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 54840 IP address blocks: 192.30.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7d:e3:b0:b6:86:7c:42:5e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=076a8115-c04d-4ddd-aad0-098ef44326a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9a:31:f8:b8:ab:ad:96:6e:6f:7f:7b:b6:d0: bb:f1:c1:6a:86:1d:11:89:26:0f:45:f8:77:b7:ca: 6b:3a:74:d5:c3:ea:9c:1b:80:0d:c5:1b:08:35:22: 41:3f:65:86:01:21:07:9c:e0:6c:43:9b:68:af:90: c7:14:9e:cf:e0:57:88:cc:fb:5e:38:c9:1c:52:88: 3e:c4:b9:d0:8c:32:7b:f7:ac:79:75:c1:c6:8f:38: 22:e1:6b:59:b9:30:79:7e:0c:c3:88:42:d8:8b:78: 74:ad:eb:ba:31:61:2b:97:b7:c3:71:5e:80:b6:92: 62:43:2e:3b:c5:8c:a7:29:f4:9f:2f:61:3c:92:ad: c0:ff:cf:15:07:c1:3d:19:a2:18:8d:c2:c1:4d:a0: e1:d7:9a:c8:3e:80:52:a9:2e:b5:dd:49:94:cc:e6: bc:0c:a7:94:52:f4:62:3d:39:3d:35:d4:f5:63:0a: 81:d9:13:1a:91:02:61:03:ac:9a:90:7f:92:b2:06: 21:1f:63:0a:84:14:b8:c1:91:c2:66:98:41:f4:0f: f5:c5:59:ea:11:8e:09:bc:a9:ac:f9:ad:3c:a7:ac: d6:4f:6a:cc:8f:1f:6b:42:28:2b:48:9d:da:92:f1: 9d:32:24:c9:a0:05:2d:3f:ba:bd:94:a6:75:96:75: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6F:77:2B:A8:47:3B:4E:9D:DC:A3:E4:11:38:C5:A5:75:F1:1D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:59:11:41:b8:db:4d:51:1c:2e:cb:81:3c:b6:ff:47:05:f8: 6d:fd:bd:12:49:39:38:8c:af:86:22:02:0e:f1:77:79:ce:2f: 79:40:06:b1:8b:0a:7c:67:47:a8:1b:c6:21:76:db:65:40:e7: 3c:b9:aa:c9:55:f3:6e:81:5f:b2:1a:85:16:a2:d5:31:5b:86: 01:ce:f6:b5:11:ca:b9:ea:64:eb:e3:33:5c:86:e1:50:58:ee: 5c:eb:e9:a4:6b:dc:e0:4e:e4:59:a6:25:d8:bf:10:a9:4c:8b: 90:77:8f:fa:e5:0f:0e:6b:96:c5:e2:0e:13:f7:d1:37:40:d9: 79:cc:94:f4:ba:c5:91:2b:5f:68:81:52:2c:5e:90:b9:eb:96: c4:82:25:bb:2d:92:6e:c3:8d:5f:8c:9e:6a:90:40:15:bc:73: 88:4d:83:7e:7c:b6:b2:86:ab:16:99:02:0a:84:db:cb:c0:81: aa:a1:b6:30:01:a7:ba:30:e8:a3:3e:29:66:42:e9:3f:81:13: 26:dd:73:35:08:0b:03:88:b5:e8:e1:31:e0:a7:79:a1:b3:6d: 84:9e:01:25:65:d7:b5:93:05:77:55:eb:d0:02:26:8e:81:01: c5:0d:e0:cc:76:17:16:df:1a:4a:d4:24:c2:91:b4:91:5b:ca: 93:8a:45:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG33jsLaGfEJei4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk MDc2YTgxMTUtYzA0ZC00ZGRkLWFhZDAtMDk4ZWY0NDMyNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZox+LirrZZub397ttC78cFqhh0RiSYPRfh3 t8prOnTVw+qcG4ANxRsINSJBP2WGASEHnOBsQ5tor5DHFJ7P4FeIzPteOMkcUog+ xLnQjDJ796x5dcHGjzgi4WtZuTB5fgzDiELYi3h0reu6MWErl7fDcV6AtpJiQy47 xYynKfSfL2E8kq3A/88VB8E9GaIYjcLBTaDh15rIPoBSqS613UmUzOa8DKeUUvRi PTk9NdT1YwqB2RMakQJhA6yakH+SsgYhH2MKhBS4wZHCZphB9A/1xVnqEY4JvKms +a08p6zWT2rMjx9rQigrSJ3akvGdMiTJoAUtP7q9lKZ1lnXitQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZvdyuoRztOndyj5BE4xaV18R2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOWEwZmZkYWUtM2E5MC0z ZWUyLTllMjktN2M3ZWUyMzIyNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClZEUG4201RHC7LgTy2/0cF+G39vRJJOTiMr4YiAg7xd3nOL3lABrGL CnxnR6gbxiF222VA5zy5qslV826BX7IahRai1TFbhgHO9rURyrnqZOvjM1yG4VBY 7lzr6aRr3OBO5FmmJdi/EKlMi5B3j/rlDw5rlsXiDhP30TdA2XnMlPS6xZErX2iB UixekLnrlsSCJbstkm7DjV+MnmqQQBW8c4hNg358trKGqxaZAgqE28vAgaqhtjAB p7ow6KM+KWZC6T+BEybdczUICwOItejhMeCneaGzbYSeASVl17WTBXdV69ACJo6B AcUN4Mx2FxbfGkrUJMKRtJFbypOKRfI= -----END CERTIFICATE-----Generated at Sun Apr 6 08:42:05 2025 by rpki-client