$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa File: d6bb9957-3d87-340e-a18c-043fc02daa3a.roa (raw, json) Hash identifier: 9kBtfb8zHd+hfWmzPhu3J4b505HAQSYeTIbcyuAfH0M= Subject key identifier: 96:37:40:90:DD:BE:2D:C5:6F:BB:D1:77:C5:DE:B8:10:10:AF:C2:7A Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642457D8DEA1DF0EE09B00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 192.175.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:24:57:d8:de:a1:df:0e:e0:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=c57723e7-9047-4aed-96f9-47dc52ef1bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:cf:48:ad:e9:7a:e4:6e:d9:33:b1:b7:8e: 7a:a0:24:62:76:3f:45:23:49:33:b2:dc:ab:5c:b6: bf:25:d2:da:be:6e:2f:76:5a:09:45:3c:ee:5c:c5: 85:1b:0f:c6:80:a2:b6:b0:04:63:b5:0e:60:27:e6: 06:40:71:06:17:f6:e7:4a:dd:ed:84:79:9d:b5:b1: a7:d9:67:39:db:97:a8:05:2c:1c:de:25:09:1a:92: 38:6d:bf:c5:05:56:6c:7f:94:8f:0a:f0:b6:7c:5b: 05:db:67:0a:6d:e2:56:86:a4:18:e5:15:21:86:0f: 9e:eb:58:da:60:65:06:6a:87:08:62:20:34:b1:ad: 3c:00:88:ce:a4:ec:2a:d3:7a:02:af:49:71:d5:dd: 9c:40:55:09:dc:fb:2b:e6:5e:ad:b3:dc:3e:d6:f0: 02:69:62:70:59:43:f3:da:33:21:c6:63:c7:49:a9: f5:c1:90:d7:c2:9b:fb:98:cd:80:da:5b:07:10:07: 81:07:69:15:4b:8d:e4:4b:ed:aa:9c:e3:46:fe:ff: 0e:b2:8e:f2:02:29:dc:24:57:5d:e9:29:37:37:c7: 2c:1a:63:e4:c0:ec:a8:f5:ee:05:3c:f0:87:45:37: 2a:ae:17:df:d1:25:d2:e4:73:8e:01:cf:4a:4c:eb: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:37:40:90:DD:BE:2D:C5:6F:BB:D1:77:C5:DE:B8:10:10:AF:C2:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 192.175.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e7:29:ce:37:79:6a:fc:d0:12:50:29:c7:06:50:85:e7:4d: bd:e5:28:83:dc:92:c8:18:de:e1:b1:6c:df:3d:b1:c0:24:e2: 1e:59:df:bc:f6:f9:f1:aa:55:6b:9f:1e:fe:25:35:21:e9:1d: c0:dd:92:34:a6:96:db:ee:ff:c0:6b:41:f3:52:57:d1:08:0f: 16:78:db:40:ef:17:e2:b4:3c:a4:cb:6d:c5:3d:8f:05:18:d9: 5b:aa:fe:d2:ae:e3:aa:d3:a1:fa:4f:b0:08:a8:3b:f8:01:80: d8:00:c4:dc:f7:f3:82:1b:6a:01:28:4e:9f:c4:73:5b:ce:a6: 87:8d:b6:aa:b4:c2:5c:ed:b9:4a:b0:f3:07:2e:f4:da:95:9a: 9f:f5:32:89:57:df:81:eb:5a:a0:1f:57:88:c7:de:2c:d8:9f: 51:93:d2:bf:b6:5c:c0:d1:6c:57:cf:9c:6f:56:5a:a1:26:37: 30:eb:1c:15:42:ae:24:32:43:fb:47:bd:2d:09:98:ac:fb:16: c4:01:c1:2c:23:25:c7:d0:e0:d1:a2:2c:e3:a4:04:f3:3c:9b: 41:23:35:83:20:21:32:d9:98:d5:d5:a6:64:00:61:d8:82:e0: b3:b6:fe:86:60:6b:39:4b:36:54:e4:db:1c:11:da:d9:a5:c0: 89:20:43:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCRX2N6h3w7gmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YzU3NzIzZTctOTA0Ny00YWVkLTk2ZjktNDdkYzUyZWYxYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCDPSK3peuRu2TOxt456oCRidj9FI0kzstyr XLa/JdLavm4vdloJRTzuXMWFGw/GgKK2sARjtQ5gJ+YGQHEGF/bnSt3thHmdtbGn 2Wc525eoBSwc3iUJGpI4bb/FBVZsf5SPCvC2fFsF22cKbeJWhqQY5RUhhg+e61ja YGUGaocIYiA0sa08AIjOpOwq03oCr0lx1d2cQFUJ3Psr5l6ts9w+1vACaWJwWUPz 2jMhxmPHSan1wZDXwpv7mM2A2lsHEAeBB2kVS43kS+2qnONG/v8Oso7yAincJFdd 6Sk3N8csGmPkwOyo9e4FPPCHRTcqrhff0SXS5HOOAc9KTOuJFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY3QJDdvi3Fb7vRd8XeuBAQr8J6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDZiYjk5NTctM2Q4Ny0z NDBlLWExOGMtMDQzZmMwMmRhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwK8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnnKc43eWr80BJQKccGUIXnTb3lKIPcksgY3uGxbN89scAk4h5Z37z2 +fGqVWufHv4lNSHpHcDdkjSmltvu/8BrQfNSV9EIDxZ420DvF+K0PKTLbcU9jwUY 2Vuq/tKu46rTofpPsAioO/gBgNgAxNz384IbagEoTp/Ec1vOpoeNtqq0wlztuUqw 8wcu9NqVmp/1MolX34HrWqAfV4jH3izYn1GT0r+2XMDRbFfPnG9WWqEmNzDrHBVC riQyQ/tHvS0JmKz7FsQBwSwjJcfQ4NGiLOOkBPM8m0EjNYMgITLZmNXVpmQAYdiC 4LO2/oZgazlLNlTk2xwR2tmlwIkgQ8w= -----END CERTIFICATE-----Generated at Sat Apr 12 14:48:29 2025 by rpki-client