$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2c0d3416-83c1-37ae-bf01-19ef30f4146c.roa File: 2c0d3416-83c1-37ae-bf01-19ef30f4146c.roa (raw, json) Hash identifier: /iJRLEaQd5sAodGvhFTBD+h4OAefETo3iOdiYrUCj5k= Subject key identifier: 8D:0B:0E:14:FB:37:B9:89:6E:DA:EC:23:5E:12:6E:AD:9D:9C:33:35 Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F432858494B6415333F2B7C8EAA1E9340 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2c0d3416-83c1-37ae-bf01-19ef30f4146c.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54004 IP address blocks: 144.168.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:15:33:3f:2b:7c:8e:aa:1e:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=420a8c73-66a8-4473-862f-9a9d70e8a7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:30:57:b4:cb:5f:2b:ba:8c:e4:72:7b:8a:42: cc:13:97:c8:aa:40:ed:45:bb:d9:45:39:91:a3:37: 47:32:50:1b:1a:78:e8:20:e0:6b:82:f0:70:7d:b4: 61:d1:2b:cf:98:82:f2:56:3f:b5:61:5d:31:bb:e4: f1:15:61:40:a4:f4:23:81:b9:0b:47:7d:43:9a:2a: 82:df:e7:47:4c:eb:07:16:c2:1d:34:4e:90:a9:00: 80:99:3d:a5:0f:c7:05:50:42:0c:69:2d:63:1f:cb: f4:c3:cc:33:be:3a:f9:f0:52:b7:49:e1:d4:b5:d3: 9d:2d:6d:90:3f:73:f2:42:1f:dc:52:49:13:bc:02: b6:82:47:b7:1a:f4:b5:dd:9a:15:a7:af:dd:24:57: b1:af:61:58:ec:3b:92:09:f7:42:ee:9a:ce:90:80: 94:12:89:09:d3:21:28:26:ac:1e:6e:49:a0:5e:23: 2d:78:18:69:36:27:ca:7c:20:03:47:ec:45:11:e8: c5:6f:26:d2:8c:31:5f:d5:ac:54:86:e6:67:9d:3c: f8:07:ff:1a:4b:2b:a2:22:6c:d9:77:a7:a4:d3:fc: 1d:8f:67:2a:72:14:d9:63:12:c5:f1:67:e9:b5:c5: cb:da:c8:27:29:ce:cd:64:eb:d6:84:ad:38:ab:c5: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0B:0E:14:FB:37:B9:89:6E:DA:EC:23:5E:12:6E:AD:9D:9C:33:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2c0d3416-83c1-37ae-bf01-19ef30f4146c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 144.168.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:96:ba:73:42:70:a7:e0:46:6b:df:ec:02:3a:bd:20:c4:23: f6:44:f3:6a:67:b2:a0:90:3d:70:e1:d4:48:e4:ec:f7:b4:f9: a6:1d:84:d1:4c:b5:1b:17:64:ae:22:e9:3d:83:88:ee:40:b3: 13:7b:c5:36:95:1b:47:2f:15:39:4c:97:2f:ff:9c:82:63:27: fd:e3:e4:c7:01:c0:e1:91:71:11:cd:f4:a3:81:af:16:0c:8f: 9d:81:b5:d9:04:95:ad:c8:1e:39:c0:00:9d:ec:b8:f4:a2:cb: da:a9:f8:dd:44:4c:20:8b:78:60:e0:b0:85:4b:c0:f7:bc:d8: 29:fb:07:27:2f:0c:c4:65:ab:11:45:fe:50:82:0d:92:7a:dc: d9:dc:cc:43:33:dd:0e:64:5e:80:30:a6:15:d0:7e:ca:46:5c: 8f:98:82:bb:df:b4:8d:5e:bb:7c:07:21:50:a7:9e:15:17:8e: aa:9d:25:33:b4:6c:36:5c:86:1a:56:b0:cc:d8:1f:f2:a6:f4: b8:3b:1a:93:69:14:29:49:28:d7:70:49:80:dd:9f:99:2b:e2: 8a:74:43:d6:e9:19:5a:c0:56:10:37:77:c9:48:71:9e:97:88: 8a:dd:60:93:15:85:9e:88:26:32:38:0e:67:d5:a3:58:af:54: 98:8b:55:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBUzPyt8jqoek0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NDIwYThjNzMtNjZhOC00NDczLTg2MmYtOWE5ZDcwZThhN2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTBXtMtfK7qM5HJ7ikLME5fIqkDtRbvZRTmR ozdHMlAbGnjoIOBrgvBwfbRh0SvPmILyVj+1YV0xu+TxFWFApPQjgbkLR31DmiqC 3+dHTOsHFsIdNE6QqQCAmT2lD8cFUEIMaS1jH8v0w8wzvjr58FK3SeHUtdOdLW2Q P3PyQh/cUkkTvAK2gke3GvS13ZoVp6/dJFexr2FY7DuSCfdC7prOkICUEokJ0yEo JqwebkmgXiMteBhpNifKfCADR+xFEejFbybSjDFf1axUhuZnnTz4B/8aSyuiImzZ d6ek0/wdj2cqchTZYxLF8WfptcXL2sgnKc7NZOvWhK04q8W62QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0LDhT7N7mJbtrsI14Sbq2dnDM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvMmMwZDM0MTYtODNjMS0z N2FlLWJmMDEtMTllZjMwZjQxNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiWunNCcKfgRmvf7AI6vSDEI/ZE82pnsqCQPXDh1Ejk7Pe0+aYdhNFM tRsXZK4i6T2DiO5AsxN7xTaVG0cvFTlMly//nIJjJ/3j5McBwOGRcRHN9KOBrxYM j52BtdkEla3IHjnAAJ3suPSiy9qp+N1ETCCLeGDgsIVLwPe82Cn7BycvDMRlqxFF /lCCDZJ63NnczEMz3Q5kXoAwphXQfspGXI+YgrvftI1eu3wHIVCnnhUXjqqdJTO0 bDZchhpWsMzYH/Km9Lg7GpNpFClJKNdwSYDdn5kr4op0Q9bpGVrAVhA3d8lIcZ6X iIrdYJMVhZ6IJjI4DmfVo1ivVJiLVYQ= -----END CERTIFICATE-----Generated at Sun Apr 6 17:44:24 2025 by rpki-client