$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa File: 9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa (raw, json) Hash identifier: F8H/zWW0G7hydSLvVFN30C4aNo0WjsPwPCiWzBm2ItA= Subject key identifier: CE:9B:44:26:EB:0B:6B:1E:40:83:4F:7F:F6:AF:4C:17:E8:62:0C:F4 Certificate issuer: /CN=052fe149-2c89-4322-a901-3a7f35c17350 Certificate serial: 010D0C9F43285848BD20E3C0E3D384ADCCC60AE0 Authority key identifier: 50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 3477 IP address blocks: 192.111.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e3:c0:e3:d3:84:ad:cc:c6:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052fe149-2c89-4322-a901-3a7f35c17350 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=b5ac5cc5-82b6-447e-b4bf-5b7fc212d54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ee:67:93:aa:f0:c0:44:57:e9:61:4f:1a:c8: 62:90:d2:39:27:b8:bc:83:7d:58:d9:54:e4:d4:59: c6:3b:69:82:2b:8a:ef:26:b8:a5:9c:89:da:af:fb: 83:bf:36:c1:71:0f:8c:91:3c:8e:79:dc:b1:09:93: 2f:83:6d:0a:a2:5c:fa:d2:ab:d3:87:a0:46:2e:ea: a8:e5:f2:e7:f9:0f:c5:1b:52:d4:54:33:ad:a2:cc: f8:fa:70:8c:2f:13:f9:6d:ea:eb:33:f7:f1:8c:25: a1:e9:40:e7:21:5e:9a:53:29:02:31:13:8c:07:cd: 56:e6:af:31:9c:f8:27:d3:d3:c8:60:33:d0:c8:ee: f5:25:3b:06:30:94:a8:87:68:09:c6:bb:88:d1:42: 77:a6:cc:fb:9b:d2:98:cc:a8:37:8f:16:f5:b4:a3: 75:f9:57:70:39:6b:80:0a:ff:01:46:9a:be:af:fa: 1a:d2:d5:17:b5:f1:d5:5d:8c:d0:e8:c7:43:a3:fa: be:cd:83:f5:16:b3:d9:70:5f:4c:56:21:02:d8:31: b7:17:50:8c:7c:18:d6:ed:88:36:19:f7:8c:35:23: 53:53:e3:c2:74:1b:ad:4d:f3:21:0a:81:f8:80:3c: 72:4f:ec:7d:dc:79:0f:1f:8a:01:e6:59:8b:e4:45: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9B:44:26:EB:0B:6B:1E:40:83:4F:7F:F6:AF:4C:17:E8:62:0C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl X509v3 Authority Key Identifier: keyid:50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer sbgp-ipAddrBlock: critical IPv4: 192.111.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:fc:fa:95:07:6d:63:9c:72:bf:0d:59:d9:ab:e9:c2:24:1a: 17:a4:b0:44:8e:c8:29:1d:cb:44:29:b5:18:78:ae:83:3d:95: 5c:22:9d:65:c3:c8:27:92:78:63:4e:ea:55:09:31:85:b2:1f: 9c:c6:e3:f5:67:05:3b:1a:53:fa:b6:f2:44:09:3b:16:35:f2: e9:9d:09:bd:6e:2e:c8:6f:e2:75:22:a3:2a:58:24:c9:71:a9: fd:25:5c:0f:8e:20:43:20:99:55:f2:b6:d7:77:c4:8a:43:73: cd:8d:9d:21:97:f9:04:c8:9e:4a:3e:cb:5d:9f:39:89:9f:8d: 29:09:3c:1d:6a:99:14:11:e8:15:28:ce:64:12:6b:72:a3:1f: 92:ae:76:32:b9:2f:fa:d2:4d:a4:d0:0c:bb:65:9c:eb:78:b2: 30:1e:e0:39:02:c4:9b:ff:7c:16:d3:67:4d:3e:0e:b9:4b:8d: 90:90:ea:d1:b1:8d:d6:0e:eb:8b:85:8b:e6:d5:90:3f:8e:8c: 38:a1:11:d9:90:89:67:1c:05:67:bf:f7:cf:5c:e5:21:4c:68: 18:d2:88:8a:00:e4:48:00:9f:c9:77:4d:58:84:97:9e:04:89: a1:3e:4d:ae:6a:03:06:90:9d:1a:0c:5f:d1:f6:5b:7f:b0:7a: c5:eb:d6:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOPA49OErczGCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUyZmUxNDktMmM4OS00MzIyLWE5MDEtM2E3ZjM1YzE3 MzUwMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk YjVhYzVjYzUtODJiNi00NDdlLWI0YmYtNWI3ZmMyMTJkNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie5nk6rwwERX6WFPGshikNI5J7i8g31Y2VTk 1FnGO2mCK4rvJrilnInar/uDvzbBcQ+MkTyOedyxCZMvg20Kolz60qvTh6BGLuqo 5fLn+Q/FG1LUVDOtosz4+nCMLxP5berrM/fxjCWh6UDnIV6aUykCMROMB81W5q8x nPgn09PIYDPQyO71JTsGMJSoh2gJxruI0UJ3psz7m9KYzKg3jxb1tKN1+VdwOWuA Cv8BRpq+r/oa0tUXtfHVXYzQ6MdDo/q+zYP1FrPZcF9MViEC2DG3F1CMfBjW7Yg2 GfeMNSNTU+PCdButTfMhCoH4gDxyT+x93HkPH4oB5lmL5EUeswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6bRCbrC2seQINPf/avTBfoYgz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wNTJm ZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdmMzVjMTczNTAvOWNkNTU4MGYtNTg1Ny0z N2RlLWIzYzgtMzUzZDBlOWViOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDUyZmUxNDktMmM4OS00MzIyLWE5 MDEtM2E3ZjM1YzE3MzUwLzA1MmZlMTQ5LTJjODktNDMyMi1hOTAxLTNhN2YzNWMx NzM1MC5jcmwwHwYDVR0jBBgwFoAUUCCXEJate6kH2I1KnJA6bvBDuVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wNTJmZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdm MzVjMTczNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr8+pUHbWOccr8NWdmr6cIkGheksESOyCkdy0QptRh4roM9lVwinWXD yCeSeGNO6lUJMYWyH5zG4/VnBTsaU/q28kQJOxY18umdCb1uLshv4nUioypYJMlx qf0lXA+OIEMgmVXyttd3xIpDc82NnSGX+QTInko+y12fOYmfjSkJPB1qmRQR6BUo zmQSa3KjH5KudjK5L/rSTaTQDLtlnOt4sjAe4DkCxJv/fBbTZ00+DrlLjZCQ6tGx jdYO64uFi+bVkD+OjDihEdmQiWccBWe/989c5SFMaBjSiIoA5EgAn8l3TViEl54E iaE+Ta5qAwaQnRoMX9H2W3+wesXr1j4= -----END CERTIFICATE-----Generated at Sat Apr 5 03:50:01 2025 by rpki-client