$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa File: 4a22aa0c-164e-338c-b284-0e4f40ef468d.roa (raw, json) Hash identifier: q/OOKW2Sx9EGiHvO1IzdhbMzEgk9aRaZpGOAH+ZVTn0= Subject key identifier: 6A:A3:D0:B1:BB:66:A6:BC:C6:A3:68:CD:26:01:CD:59:50:3A:37:51 Certificate issuer: /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Certificate serial: 010D0C9F43285848D0ABB0424DDD7EA59CDB59A8 Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 395960 IP address blocks: 192.184.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b0:42:4d:dd:7e:a5:9c:db:59:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=6ad7daa4-4883-43db-877d-d6e02fc735be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:1e:0b:fa:31:76:df:dc:1c:35:55:ec:3a: e1:8f:8c:08:68:a7:59:21:e5:63:f6:5e:ef:89:8f: a1:34:e0:dc:39:be:09:b8:96:8e:0a:e3:02:19:38: 03:59:01:f6:3f:af:ab:87:6f:4a:ef:94:95:28:24: dd:a1:c8:77:60:b6:64:c5:5d:fe:ba:f5:a5:b6:9a: 13:ae:6a:66:cd:00:b2:c4:ef:d7:b7:2a:94:d2:97: 80:01:d1:73:51:b3:e5:92:59:5f:1c:da:fd:d1:87: 86:bb:5f:6a:83:45:dd:b1:d4:76:61:56:cd:4f:e3: 9c:59:6f:23:aa:85:1c:9c:09:4f:5a:eb:df:04:6f: aa:c4:9e:06:f0:36:32:23:5d:d7:69:89:ba:a3:e0: 32:e7:fa:af:c0:d9:0d:5f:d5:ff:d1:64:c6:87:53: a1:ec:9f:f6:ca:4f:ce:ec:49:a4:d5:50:2f:26:d7: a5:ac:7a:9a:74:df:cf:fb:16:cf:8b:e3:87:20:24: 28:27:0a:42:a3:eb:9a:ca:b5:c4:b3:ae:42:71:ef: 80:27:74:7c:77:df:b8:b1:94:80:44:bb:6a:75:8d: ff:0f:98:ad:78:a7:37:d1:4f:80:7e:20:51:a4:66: d7:1b:ac:28:5f:89:85:df:ce:92:b7:3b:b5:c1:bf: 1b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A3:D0:B1:BB:66:A6:BC:C6:A3:68:CD:26:01:CD:59:50:3A:37:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl X509v3 Authority Key Identifier: keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer sbgp-ipAddrBlock: critical IPv4: 192.184.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:48:ff:01:93:79:14:7c:cf:fc:e3:8e:81:06:cf:70:84:5e: df:68:81:c0:85:bb:bd:32:40:4e:5c:d9:1d:6a:c5:f5:97:ce: 36:56:dc:b6:56:9d:b5:1a:11:9d:3d:c3:e0:b6:e8:9d:06:65: 58:d0:50:17:92:36:d8:a2:91:33:d2:d1:dc:0f:4c:9c:8f:bf: d6:23:eb:87:f2:5f:77:a5:62:f0:f1:b0:e9:56:9e:ad:2f:c6: e4:f1:af:c0:91:33:35:16:15:93:79:33:5b:19:c1:3b:9d:c3: 90:3b:dc:06:67:d7:cf:b1:5c:e3:eb:0b:f1:74:2c:3b:5b:e2: f2:86:98:fb:e6:97:a5:16:90:ff:33:d5:7d:c0:9b:b1:bc:1f: 5d:9f:b8:f5:3b:66:c2:16:0b:26:b5:18:ab:44:c8:fb:da:76: 46:4f:0c:3a:cd:b3:d1:8e:33:b2:1b:d0:1b:a6:0b:13:28:a9: cb:8c:c6:52:e4:58:b4:fc:65:bd:45:e5:8e:35:45:dd:4c:53: 88:38:d6:8d:75:e9:e9:96:f0:1b:e4:83:7e:1f:d7:dd:aa:fd: 38:8d:02:d6:79:30:b7:8c:41:16:ca:3a:65:9b:be:16:4c:f3: 18:96:36:fb:28:a9:2f:d2:83:db:0f:b4:1f:56:33:b0:57:e2: 68:ff:6c:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7BCTd1+pZzbWagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi MDg3MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NmFkN2RhYTQtNDg4My00M2RiLTg3N2QtZDZlMDJmYzczNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9UeC/oxdt/cHDVV7Drhj4wIaKdZIeVj9l7v iY+hNODcOb4JuJaOCuMCGTgDWQH2P6+rh29K75SVKCTdoch3YLZkxV3+uvWltpoT rmpmzQCyxO/XtyqU0peAAdFzUbPlkllfHNr90YeGu19qg0XdsdR2YVbNT+OcWW8j qoUcnAlPWuvfBG+qxJ4G8DYyI13XaYm6o+Ay5/qvwNkNX9X/0WTGh1Oh7J/2yk/O 7Emk1VAvJtelrHqadN/P+xbPi+OHICQoJwpCo+uayrXEs65Cce+AJ3R8d9+4sZSA RLtqdY3/D5iteKc30U+AfiBRpGbXG6woX4mF386Stzu1wb8b6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqj0LG7Zqa8xqNozSYBzVlQOjdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvNGEyMmFhMGMtMTY0ZS0z MzhjLWIyODQtMGU0ZjQwZWY0NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh YmY4YmIwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLjqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFI/wGTeRR8z/zjjoEGz3CEXt9ogcCFu70yQE5c2R1qxfWXzjZW3LZW nbUaEZ09w+C26J0GZVjQUBeSNtiikTPS0dwPTJyPv9Yj64fyX3elYvDxsOlWnq0v xuTxr8CRMzUWFZN5M1sZwTudw5A73AZn18+xXOPrC/F0LDtb4vKGmPvml6UWkP8z 1X3Am7G8H12fuPU7ZsIWCya1GKtEyPvadkZPDDrNs9GOM7Ib0BumCxMoqcuMxlLk WLT8Zb1F5Y41Rd1MU4g41o116emW8Bvkg34f192q/TiNAtZ5MLeMQRbKOmWbvhZM 8xiWNvsoqS/Sg9sPtB9WM7BX4mj/bAE= -----END CERTIFICATE-----Generated at Tue Apr 8 12:29:42 2025 by rpki-client