$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa File: 5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa (raw, json) Hash identifier: FLAGQM0tVOtZgKeUdNGkU9eev90TV3dmFgU0m1XIUmo= Subject key identifier: 72:33:1E:DD:53:39:1D:23:BB:64:2E:99:CB:C4:E7:2E:5A:12:ED:F1 Certificate issuer: /CN=e9f20d36-05ed-4189-8230-12eaed2b41c6 Certificate serial: 010D0C9F4328584925B3A906F81D32F33BD7E000 Authority key identifier: BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 72 IP address blocks: 192.58.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a9:06:f8:1d:32:f3:3b:d7:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9f20d36-05ed-4189-8230-12eaed2b41c6 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=8b583163-8136-4627-ae15-63243eaeec30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:93:d9:2e:bb:d8:22:42:73:82:9d:87:65: cc:28:ee:0c:06:1d:6b:d5:91:66:a5:b7:ab:29:ca: 3e:6a:a2:58:01:3a:c4:c6:58:fb:71:30:2c:33:a1: 8b:e8:56:4e:2e:83:b0:bd:fa:f1:56:c2:f2:4b:5a: 9e:d5:46:7f:83:1b:a3:1c:82:a7:6f:9a:5e:05:86: aa:f3:21:c7:68:08:5b:62:cf:87:21:ae:00:37:8c: a1:18:55:ae:24:af:81:df:ca:c2:3d:68:90:d3:92: fc:27:3d:12:93:ff:30:66:19:81:87:79:b9:96:52: d4:9d:62:fc:a9:57:d6:e9:e2:77:18:b0:09:41:9f: 4b:e3:31:64:da:b1:0a:36:0a:0c:0d:c4:61:12:32: 17:a9:81:07:5e:38:d6:1c:50:09:59:a3:5b:23:86: 0f:65:cc:d9:f3:e6:61:2a:fc:93:7f:45:5a:ec:68: a0:56:e6:67:70:5a:15:2d:94:f8:9f:e0:09:4d:09: d0:d7:91:4e:ce:5a:00:73:d4:14:cf:57:3c:40:eb: 37:ad:42:24:de:cc:25:4a:ef:aa:ea:97:d2:28:f3: 4a:29:fb:9d:24:ba:04:40:ab:75:8b:43:32:2b:66: cb:2e:da:ef:5d:74:8c:87:e8:f8:eb:2b:95:aa:3b: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:1E:DD:53:39:1D:23:BB:64:2E:99:CB:C4:E7:2E:5A:12:ED:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.crl X509v3 Authority Key Identifier: keyid:BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer sbgp-ipAddrBlock: critical IPv4: 192.58.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cc:25:03:0f:15:0c:87:5e:57:8c:e7:eb:90:d9:fa:20:9f: 78:40:ad:24:2e:03:68:b3:1d:b5:28:f0:e1:ab:15:f5:1c:7b: b8:95:38:71:f7:b8:45:13:d5:a6:4c:45:53:17:42:d1:22:a0: de:3a:bd:24:49:3c:11:a2:cb:19:c7:e8:f7:f1:ef:17:1a:6c: 1c:ff:8f:7b:1e:e7:e3:7c:e8:34:d1:e5:1c:2e:8e:26:c1:cf: 09:86:b8:4e:9c:65:0a:57:72:d9:44:98:79:87:85:7b:cc:44: b4:e9:ed:1e:d4:45:20:59:3f:9d:61:18:b4:62:70:fe:78:38: aa:97:44:6f:c1:a5:4e:3e:96:34:60:fb:bd:6d:2e:cd:86:fb: 34:c8:cf:a6:75:78:c1:ed:48:c5:83:45:08:cd:ec:14:0d:72: d9:47:8d:38:46:60:b5:2c:eb:d1:6f:ed:e8:96:20:04:23:d4: 43:f9:42:8c:18:83:49:16:f8:82:96:05:f0:9f:da:7f:3e:05: 2c:67:e3:bc:8a:bd:b0:dd:c4:e6:82:aa:1c:bb:ba:f5:23:04: 89:f0:57:ae:dd:4c:a8:8f:88:d7:cc:38:0e:b9:b3:df:f9:05: b5:15:7e:ad:1f:10:8c:20:5b:64:ef:0b:52:89:7f:f6:b6:7b: 37:0e:0c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6kG+B0y8zvX4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTlmMjBkMzYtMDVlZC00MTg5LTgyMzAtMTJlYWVkMmI0 MWM2MB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk OGI1ODMxNjMtODEzNi00NjI3LWFlMTUtNjMyNDNlYWVlYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk6T2S672CJCc4Kdh2XMKO4MBh1r1ZFmpber Kco+aqJYATrExlj7cTAsM6GL6FZOLoOwvfrxVsLyS1qe1UZ/gxujHIKnb5peBYaq 8yHHaAhbYs+HIa4AN4yhGFWuJK+B38rCPWiQ05L8Jz0Sk/8wZhmBh3m5llLUnWL8 qVfW6eJ3GLAJQZ9L4zFk2rEKNgoMDcRhEjIXqYEHXjjWHFAJWaNbI4YPZczZ8+Zh KvyTf0Va7GigVuZncFoVLZT4n+AJTQnQ15FOzloAc9QUz1c8QOs3rUIk3swlSu+q 6pfSKPNKKfudJLoEQKt1i0MyK2bLLtrvXXSMh+j46yuVqjsx2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIzHt1TOR0ju2QumcvE5y5aEu3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lOWYy MGQzNi0wNWVkLTQxODktODIzMC0xMmVhZWQyYjQxYzYvNWJkODBmZDUtOTljMy0z MGRhLWI5MzktZWRhMGIwYzQxZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTlmMjBkMzYtMDVlZC00MTg5LTgy MzAtMTJlYWVkMmI0MWM2L2U5ZjIwZDM2LTA1ZWQtNDE4OS04MjMwLTEyZWFlZDJi NDFjNi5jcmwwHwYDVR0jBBgwFoAUvt6Nss6HFUPkYFLekJ0bwu6I6lcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lOWYyMGQzNi0wNWVkLTQxODktODIzMC0xMmVh ZWQyYjQxYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnMJQMPFQyHXleM5+uQ2fogn3hArSQuA2izHbUo8OGrFfUce7iVOHH3 uEUT1aZMRVMXQtEioN46vSRJPBGiyxnH6Pfx7xcabBz/j3se5+N86DTR5RwujibB zwmGuE6cZQpXctlEmHmHhXvMRLTp7R7URSBZP51hGLRicP54OKqXRG/BpU4+ljRg +71tLs2G+zTIz6Z1eMHtSMWDRQjN7BQNctlHjThGYLUs69Fv7eiWIAQj1EP5QowY g0kW+IKWBfCf2n8+BSxn47yKvbDdxOaCqhy7uvUjBInwV67dTKiPiNfMOA65s9/5 BbUVfq0fEIwgW2TvC1KJf/a2ezcODOk= -----END CERTIFICATE-----Generated at Sun Apr 6 19:08:03 2025 by rpki-client