$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa File: bbe2e43e-950f-32b7-9da7-d244a60303be.roa (raw, json) Hash identifier: gxkFqrtRtbEtprcu7SwYOEu8MHYdHO6bYpA9MCOV++0= Subject key identifier: 14:84:60:2C:C3:3D:DE:CB:08:50:68:1C:8D:36:E7:DB:AE:E9:7A:BF Certificate issuer: /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Certificate serial: 010D0C9F432858490B4C20F3D324BFC2FA3DE8C0 Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 7212 IP address blocks: 192.111.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:20:f3:d3:24:bf:c2:fa:3d:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=83d9e8af-304b-489a-aada-6cb51bf3fc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:48:6e:6a:18:c6:25:b3:91:7c:0a:9a:ad: d8:99:06:4a:64:6b:c3:f2:db:a8:ba:b4:0b:50:04: 57:5a:98:0e:c9:68:69:95:62:07:ae:17:4a:b7:3b: 46:83:e6:5a:88:a4:f8:77:3b:f3:be:a9:8d:9e:a7: 45:c3:25:69:cd:92:53:56:00:41:98:c6:19:6b:6f: c3:54:a3:3c:88:d1:a5:32:cf:b1:d8:57:ce:5a:08: 39:9d:9b:22:92:88:73:45:1a:66:7e:10:c6:17:ce: 5e:ce:f9:b7:53:1b:78:af:fd:58:73:66:36:ea:fb: 88:22:9b:6a:d8:5d:42:cb:27:06:73:d9:d4:31:ef: 57:46:ce:b8:45:99:f3:3f:d6:f9:79:9c:5d:1a:07: cb:53:f7:3d:54:01:95:e9:01:0c:38:6c:e3:75:20: 76:f2:c9:d0:21:4d:88:21:87:4f:da:17:f0:df:2d: e8:49:f6:a4:0e:33:ab:2b:b9:ac:b9:25:94:b4:d6: 17:20:b9:39:f4:e7:18:91:58:89:1d:3c:ef:6d:7f: 63:03:b0:c1:e9:3b:d3:48:2a:33:6d:1a:6b:ca:a2: b6:03:72:d9:de:76:c7:ad:37:ee:d1:db:f3:7a:b8: d3:e0:6b:05:d9:86:c6:e2:32:de:69:57:77:4e:2d: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:84:60:2C:C3:3D:DE:CB:08:50:68:1C:8D:36:E7:DB:AE:E9:7A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl X509v3 Authority Key Identifier: keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer sbgp-ipAddrBlock: critical IPv4: 192.111.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:17:77:3e:9e:dd:a9:f5:0c:94:a2:2c:cb:b0:1b:ef:82:45: a5:64:da:cc:97:44:6c:d0:bb:53:52:58:04:06:f4:df:96:c7: b1:55:33:c3:16:a3:4b:07:ef:1e:c9:b1:d8:ff:5a:2b:d7:45: 1c:31:48:40:b3:3d:90:8b:b2:be:0e:49:41:4e:c8:1d:0a:60: df:aa:fe:47:39:70:77:72:d7:c9:f9:77:ff:b5:70:f9:92:ac: 5e:f7:f9:28:12:34:52:18:b0:7c:93:c6:fb:52:ce:60:44:c4: d6:14:03:c7:7f:ee:e5:1d:c4:e5:ff:64:93:9d:99:cc:5e:a6: 58:bb:ed:7b:70:d0:99:db:cf:b5:0c:96:d7:93:26:58:cc:26: bf:67:39:ff:79:6d:67:f5:5c:02:77:74:f8:87:86:b6:38:f8: 9b:23:ec:cf:38:82:23:c5:af:6c:bd:bc:05:7e:a8:62:0a:55: e1:f4:de:3f:a5:62:a7:14:a9:eb:1d:9e:7d:15:99:72:ad:46: 92:28:29:cd:9b:6e:2f:77:44:3a:76:a6:be:e9:3c:57:99:42: 03:39:1a:8f:cf:32:9f:da:9a:9e:9e:ad:ee:a0:6e:2c:bf:62: 4c:56:4a:41:21:fa:89:05:c6:0b:13:44:51:d1:3b:b7:06:d0: e0:2f:79:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCDz0yS/wvo96MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFjMDA4OTQtNWUxNy00ZTE0LWI4ZWItYjdmYjM0OGFk MWMyMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ODNkOWU4YWYtMzA0Yi00ODlhLWFhZGEtNmNiNTFiZjNmYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre9IbmoYxiWzkXwKmq3YmQZKZGvD8tuourQL UARXWpgOyWhplWIHrhdKtztGg+ZaiKT4dzvzvqmNnqdFwyVpzZJTVgBBmMYZa2/D VKM8iNGlMs+x2FfOWgg5nZsikohzRRpmfhDGF85ezvm3Uxt4r/1Yc2Y26vuIIptq 2F1CyycGc9nUMe9XRs64RZnzP9b5eZxdGgfLU/c9VAGV6QEMOGzjdSB28snQIU2I IYdP2hfw3y3oSfakDjOrK7msuSWUtNYXILk59OcYkViJHTzvbX9jA7DB6TvTSCoz bRpryqK2A3LZ3nbHrTfu0dvzerjT4GsF2YbG4jLeaVd3Ti23ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSEYCzDPd7LCFBoHI0259uu6Xq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMw MDg5NC01ZTE3LTRlMTQtYjhlYi1iN2ZiMzQ4YWQxYzIvYmJlMmU0M2UtOTUwZi0z MmI3LTlkYTctZDI0NGE2MDMwM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWFjMDA4OTQtNWUxNy00ZTE0LWI4 ZWItYjdmYjM0OGFkMWMyL2VhYzAwODk0LTVlMTctNGUxNC1iOGViLWI3ZmIzNDhh ZDFjMi5jcmwwHwYDVR0jBBgwFoAUwYzMbm96JB9XCrDBoqjJfPoxvcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMwMDg5NC01ZTE3LTRlMTQtYjhlYi1iN2Zi MzQ4YWQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIXdz6e3an1DJSiLMuwG++CRaVk2syXRGzQu1NSWAQG9N+Wx7FVM8MW o0sH7x7Jsdj/WivXRRwxSECzPZCLsr4OSUFOyB0KYN+q/kc5cHdy18n5d/+1cPmS rF73+SgSNFIYsHyTxvtSzmBExNYUA8d/7uUdxOX/ZJOdmcxepli77Xtw0Jnbz7UM lteTJljMJr9nOf95bWf1XAJ3dPiHhrY4+Jsj7M84giPFr2y9vAV+qGIKVeH03j+l YqcUqesdnn0VmXKtRpIoKc2bbi93RDp2pr7pPFeZQgM5Go/PMp/amp6ere6gbiy/ YkxWSkEh+okFxgsTRFHRO7cG0OAveTE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:13 2025 by rpki-client