$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa File: bda6574d-81c2-38f7-b624-cdc878c38860.roa (raw, json) Hash identifier: acu0rzUpyHHQTFqdHMJRUeMM2ADm71/wUCMb42I0ZSI= Subject key identifier: AB:C4:60:45:05:8A:96:B7:63:EB:09:4A:A3:25:8C:43:D0:1D:55:89 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F43285849203C14788105638AC2D5EC40 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 400702 IP address blocks: 192.81.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:14:78:81:05:63:8a:c2:d5:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=829e5c38-ee9a-49da-87ec-f62aa2f9340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:99:5e:8b:9b:6e:48:da:f0:30:e4:a8:7c: f2:d9:28:98:ce:f7:ba:ec:fe:63:d6:31:94:04:b6: 47:01:f3:e6:3a:dc:70:a0:9a:69:d3:93:c7:bd:5d: 8d:d6:9f:aa:57:57:0b:2b:b0:73:55:87:12:b3:33: ab:ef:c6:96:8a:9f:8c:5a:da:eb:1c:3a:e1:6c:fd: 12:cf:2a:4a:f4:91:4d:01:4f:18:74:22:0d:58:6a: 73:68:2e:91:b8:92:07:c0:55:9b:e7:08:e4:67:b4: 35:c7:92:46:ce:29:0e:fd:37:37:03:a5:bf:b8:3a: 7e:7e:a1:86:48:a0:a8:03:7d:3d:71:7a:6c:22:01: 3a:75:41:e7:77:4e:54:38:63:fe:b6:6c:2c:3c:66: 7e:68:09:c4:00:c0:90:9c:22:fd:68:b9:9d:b2:a7: ac:2b:36:a3:1d:d2:93:8c:f5:6e:17:ee:c2:3b:0b: a3:cb:6f:18:86:8a:d9:27:5c:ac:ec:31:d0:7d:c0: f3:36:99:4f:52:91:93:40:6b:2e:6e:f7:46:34:96: 00:b5:5c:8d:92:1c:bc:f8:47:fe:06:9c:ff:00:0f: 92:e3:1b:f3:53:33:01:f1:fe:8b:af:a3:8c:c4:fc: 13:15:72:a8:cc:da:c6:23:7a:9e:1f:62:dc:24:3e: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C4:60:45:05:8A:96:B7:63:EB:09:4A:A3:25:8C:43:D0:1D:55:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 192.81.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a6:6e:b8:63:a2:f0:e1:51:7e:06:ff:54:95:00:72:3e:8f: 8f:d2:3e:79:75:19:3d:29:02:3e:8e:17:7e:09:f0:78:5c:89: 6c:6a:70:e1:59:df:8b:ef:bc:39:9e:09:11:1e:5a:23:1a:56: e0:ee:46:ab:3f:b0:26:7f:40:96:b3:21:38:e3:fd:ea:7b:a3: e6:2b:82:be:c1:59:b5:34:bc:b3:9a:05:7a:96:a0:a2:b4:75: 39:2b:ec:87:1d:51:10:8e:30:c1:69:06:a4:15:a7:30:78:62: 52:1c:7b:25:61:69:e5:4f:63:48:af:cc:b3:b7:96:2f:2e:e6: 37:6b:30:06:dc:fa:85:c0:0b:1e:9d:b9:11:8b:63:a3:28:6e: aa:67:62:0a:ff:a3:34:fe:75:6e:8a:a9:32:07:df:aa:32:01: a4:58:b5:4d:7f:5c:e6:9c:23:8b:24:01:ec:a1:5e:ba:32:f0: 53:54:5e:62:2f:77:9e:d2:ec:39:5d:74:8c:a7:83:6c:fd:34: bd:69:06:5a:48:8a:a7:47:b5:0f:47:80:d9:01:60:f5:a9:9c: 65:c3:f4:0c:ab:d7:62:08:b1:94:cc:60:51:1a:c5:a3:7e:83: dc:ca:20:e5:e5:de:88:fd:67:21:5e:42:de:cb:64:96:48:ee: d6:82:de:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBR4gQVjisLV7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ODI5ZTVjMzgtZWU5YS00OWRhLTg3ZWMtZjYyYWEyZjkzNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuWZXoubbkja8DDkqHzy2SiYzve67P5j1jGU BLZHAfPmOtxwoJpp05PHvV2N1p+qV1cLK7BzVYcSszOr78aWip+MWtrrHDrhbP0S zypK9JFNAU8YdCINWGpzaC6RuJIHwFWb5wjkZ7Q1x5JGzikO/Tc3A6W/uDp+fqGG SKCoA309cXpsIgE6dUHnd05UOGP+tmwsPGZ+aAnEAMCQnCL9aLmdsqesKzajHdKT jPVuF+7COwujy28YhorZJ1ys7DHQfcDzNplPUpGTQGsubvdGNJYAtVyNkhy8+Ef+ Bpz/AA+S4xvzUzMB8f6Lr6OMxPwTFXKozNrGI3qeH2LcJD7fIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvEYEUFipa3Y+sJSqMljEPQHVWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvYmRhNjU3NGQtODFjMi0z OGY3LWI2MjQtY2RjODc4YzM4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCmbrhjovDhUX4G/1SVAHI+j4/SPnl1GT0pAj6OF34J8HhciWxqcOFZ 34vvvDmeCREeWiMaVuDuRqs/sCZ/QJazITjj/ep7o+Yrgr7BWbU0vLOaBXqWoKK0 dTkr7IcdURCOMMFpBqQVpzB4YlIceyVhaeVPY0ivzLO3li8u5jdrMAbc+oXACx6d uRGLY6MobqpnYgr/ozT+dW6KqTIH36oyAaRYtU1/XOacI4skAeyhXroy8FNUXmIv d57S7DlddIyng2z9NL1pBlpIiqdHtQ9HgNkBYPWpnGXD9Ayr12IIsZTMYFEaxaN+ g9zKIOXl3oj9ZyFeQt7LZJZI7taC3gY= -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:27 2025 by rpki-client