$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa File: bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa (raw, json) Hash identifier: zzoad8tkFAvdFEVzDoP/S/GCsvr/ucSJFyZY2lcC+oE= Subject key identifier: 24:B4:B0:EA:26:20:61:3F:79:96:5D:12:A2:0A:C7:CD:DF:9A:8B:37 Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F43285848F22C6B82BB2D7B1FFE0E482C Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 26677 IP address blocks: 192.197.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6b:82:bb:2d:7b:1f:fe:0e:48:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=17e87aae-2035-4eb1-b1b5-67c1ec8e62a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:fa:6a:cd:7a:04:a8:f0:dd:2e:ac:40:b3: 46:af:3e:d6:37:90:f5:63:6a:60:ab:eb:3c:99:e7: c0:64:13:51:86:33:26:70:78:c9:c5:ef:31:11:eb: 84:7e:37:e2:9b:dc:0d:22:8b:93:eb:6a:b6:fd:a0: a9:c5:33:e9:ab:81:bc:ca:cf:f2:2a:7c:79:81:96: b8:e8:12:cb:6d:aa:35:eb:d4:29:38:25:b8:dd:b6: e2:8b:b7:65:5a:05:a5:86:d8:4e:59:5b:44:f5:68: 43:4a:e1:83:b9:a6:48:25:d7:df:eb:4e:cc:7f:ef: 9c:f3:cd:47:18:08:c6:9c:21:a8:a3:8d:85:ad:db: b7:3d:9f:a1:7f:f8:27:c3:56:74:a8:6d:8f:1f:4e: 38:b8:6c:9b:71:92:53:8f:2f:91:26:7a:e8:d6:81: 00:e7:22:94:2f:f3:32:71:01:86:2f:31:40:07:91: 32:b3:a2:0d:4e:c1:20:74:af:4b:96:70:de:2d:53: de:18:d4:b3:91:5b:b8:8a:9b:e1:df:7e:3c:29:a5: 5a:16:e1:b4:3c:ff:fc:a9:77:1e:db:95:31:df:ad: a4:31:e4:00:b7:6b:24:39:23:f0:16:ee:a7:df:c2: e2:74:79:9c:10:00:f8:ee:a9:d6:06:4e:9e:f5:b0: 7d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B4:B0:EA:26:20:61:3F:79:96:5D:12:A2:0A:C7:CD:DF:9A:8B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: 192.197.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ed:8d:2d:48:d6:26:dd:cf:6e:a1:0f:f7:37:1f:5b:35:17: e2:3b:28:9a:39:1e:7b:cf:98:c5:90:9a:1d:bf:4e:6e:96:73: ca:73:3d:8a:7b:6e:50:3d:fd:61:14:c5:ac:dc:67:d6:8e:14: 1c:54:80:51:38:f8:b5:e0:f6:09:0b:20:34:cf:cc:e6:93:1d: ee:a0:fc:4a:29:b9:6f:8d:21:d5:3a:e2:06:6e:61:63:0f:96: 58:13:19:10:57:86:59:e1:88:3a:63:5f:98:6f:f6:20:f5:bd: 23:fb:77:a0:8b:9c:2a:4c:05:14:eb:04:4d:8e:c7:5e:1c:9e: c5:3a:48:fe:e0:c7:e9:05:b0:d7:f7:f6:ef:1c:9b:e1:8a:b6: ba:69:13:bd:c4:87:c1:42:80:34:19:99:f5:b5:fc:63:82:ae: 10:31:f2:ef:59:13:0d:af:0b:dd:f1:b2:76:fb:25:61:b1:d1: 62:2f:34:43:fd:76:56:a7:55:fe:57:ea:a2:63:43:07:bc:6a: c8:40:b7:ac:dc:37:96:c6:49:21:2a:36:79:05:fa:57:8c:cd: 04:92:82:e4:9d:77:c9:78:20:23:4a:38:8a:fb:b2:8c:04:78: 93:59:c2:00:22:ee:7e:a3:01:3a:41:76:02:81:63:32:24:17: a6:53:32:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGuCuy17H/4OSCwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MTdlODdhYWUtMjAzNS00ZWIxLWIxYjUtNjdjMWVjOGU2MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaP6as16BKjw3S6sQLNGrz7WN5D1Y2pgq+s8 mefAZBNRhjMmcHjJxe8xEeuEfjfim9wNIouT62q2/aCpxTPpq4G8ys/yKnx5gZa4 6BLLbao169QpOCW43bbii7dlWgWlhthOWVtE9WhDSuGDuaZIJdff607Mf++c881H GAjGnCGoo42Frdu3PZ+hf/gnw1Z0qG2PH044uGybcZJTjy+RJnro1oEA5yKUL/My cQGGLzFAB5Eys6INTsEgdK9LlnDeLVPeGNSzkVu4ipvh3348KaVaFuG0PP/8qXce 25Ux362kMeQAt2skOSPwFu6n38LidHmcEAD47qnWBk6e9bB9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS0sOomIGE/eZZdEqIKx83fmos3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvYmMyYTA2ZWQtNzVkOS0z OTliLWE4OTctYzNlM2Y2Zjg5NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADtjS1I1ibdz26hD/c3H1s1F+I7KJo5HnvPmMWQmh2/Tm6Wc8pzPYp7 blA9/WEUxazcZ9aOFBxUgFE4+LXg9gkLIDTPzOaTHe6g/EopuW+NIdU64gZuYWMP llgTGRBXhlnhiDpjX5hv9iD1vSP7d6CLnCpMBRTrBE2Ox14cnsU6SP7gx+kFsNf3 9u8cm+GKtrppE73Eh8FCgDQZmfW1/GOCrhAx8u9ZEw2vC93xsnb7JWGx0WIvNEP9 dlanVf5X6qJjQwe8ashAt6zcN5bGSSEqNnkF+leMzQSSguSdd8l4ICNKOIr7sowE eJNZwgAi7n6jATpBdgKBYzIkF6ZTMuE= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:28 2025 by rpki-client