$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/8c5636e0-f1ea-3cad-bfdd-0d5251de72b7.roa File: 8c5636e0-f1ea-3cad-bfdd-0d5251de72b7.roa (raw, json) Hash identifier: iGD3fKQluUEFTapBcHUORf651OHy51rYkN9c52sam3w= Subject key identifier: A9:79:00:44:2C:7C:84:C4:C0:09:20:35:34:76:14:FE:0F:56:09:74 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F43285848E59BCBAD4B6EAB5ED65ECE00 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/8c5636e0-f1ea-3cad-bfdd-0d5251de72b7.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 55178 IP address blocks: 192.230.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cb:ad:4b:6e:ab:5e:d6:5e:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=89d9cd96-100c-497b-999f-065891b74675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:d8:84:a7:82:89:9c:b4:5b:d1:0a:3b:6b: 17:3e:5b:f3:bc:a9:96:ed:75:e1:b0:da:b2:71:18: 5c:7a:f0:2a:fa:b9:e1:f1:d1:1d:b4:9c:4a:e9:a0: 0b:9d:da:17:6d:db:34:d1:4e:fc:50:fc:7e:38:53: 58:b7:6d:35:28:ed:7e:30:b3:72:2b:cd:20:76:38: cd:72:3c:2a:ec:0e:52:05:1d:41:17:ca:c3:9b:bf: 95:88:70:ec:b7:6e:bf:5a:07:09:95:24:80:74:ec: 0a:d0:f2:1e:8a:ba:ab:40:d4:fd:fe:b0:7c:fc:83: 62:00:b9:05:1a:1a:2a:64:cb:e2:b1:4a:2f:cd:2f: 06:8b:38:11:14:ef:7a:92:4c:25:01:3d:d6:01:b3: e7:b7:06:60:cf:67:55:e1:f2:28:74:cb:f7:4b:03: d2:f6:90:e5:44:cf:7c:3b:34:0c:82:f1:b9:d4:73: 64:fc:37:45:8d:ad:e5:cc:e9:cd:39:94:8f:8e:5b: b7:28:0e:c6:10:f5:6e:c5:cf:37:81:9e:1c:70:cb: f0:f3:4b:ae:7a:e8:97:97:c0:ab:4b:5d:4e:7e:31: dc:94:d3:b4:95:90:5a:ea:f4:01:1a:e6:ac:bb:57: 42:e3:cd:90:9f:ae:66:64:c3:c7:13:b4:87:4b:70: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:79:00:44:2C:7C:84:C4:C0:09:20:35:34:76:14:FE:0F:56:09:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/8c5636e0-f1ea-3cad-bfdd-0d5251de72b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:86:f2:8a:8e:00:39:f6:68:0b:4c:ac:86:fb:9f:39:18:e1: 25:42:47:d4:9c:0f:30:9e:ef:de:b4:04:78:15:e4:02:59:41: d1:f3:67:ea:a6:7e:dc:d4:d9:db:df:c1:ad:06:75:58:8a:7f: 58:40:12:43:e2:b8:b4:3a:4c:aa:09:7d:48:a6:62:0d:5e:25: 9b:9b:28:a9:b7:37:59:1a:9f:85:3d:f1:92:89:89:d7:9f:00: 50:1d:65:05:7f:ca:ff:c7:59:93:6c:00:03:c4:78:a6:25:66: 0d:a4:58:3d:6c:2a:ae:4b:70:34:16:c2:0d:32:83:c0:4e:58: 05:1b:a6:9c:29:f9:e2:71:a5:5f:5c:ea:c3:89:6f:09:27:05: 7e:51:9c:df:64:4f:38:6d:cd:c2:97:12:a2:4d:13:b7:e6:3a: f2:55:39:21:db:12:9e:af:a2:ae:65:2a:8d:36:60:4c:b4:ce: e3:6f:f3:b6:7b:eb:a1:a2:91:58:18:58:ed:67:fc:db:85:87: 59:53:3c:38:01:fe:fc:85:9e:95:a4:67:2d:68:c1:d5:ca:92: 0e:b7:1c:d6:80:c4:8b:41:9e:20:06:da:44:e8:b4:7b:2c:1f: 6d:21:b2:b2:f6:78:4d:d7:3c:3d:b5:0c:71:ed:fc:c6:e0:57: 57:d1:cf:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8utS26rXtZezgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ODlkOWNkOTYtMTAwYy00OTdiLTk5OWYtMDY1ODkxYjc0Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhzYhKeCiZy0W9EKO2sXPlvzvKmW7XXhsNqy cRhcevAq+rnh8dEdtJxK6aALndoXbds00U78UPx+OFNYt201KO1+MLNyK80gdjjN cjwq7A5SBR1BF8rDm7+ViHDst26/WgcJlSSAdOwK0PIeirqrQNT9/rB8/INiALkF GhoqZMvisUovzS8GizgRFO96kkwlAT3WAbPntwZgz2dV4fIodMv3SwPS9pDlRM98 OzQMgvG51HNk/DdFja3lzOnNOZSPjlu3KA7GEPVuxc83gZ4ccMvw80uueuiXl8Cr S11OfjHclNO0lZBa6vQBGuasu1dC482Qn65mZMPHE7SHS3C07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl5AEQsfITEwAkgNTR2FP4PVgl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvOGM1NjM2ZTAtZjFlYS0z Y2FkLWJmZGQtMGQ1MjUxZGU3MmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASG8oqOADn2aAtMrIb7nzkY4SVCR9ScDzCe7960BHgV5AJZQdHzZ+qm ftzU2dvfwa0GdViKf1hAEkPiuLQ6TKoJfUimYg1eJZubKKm3N1kan4U98ZKJidef AFAdZQV/yv/HWZNsAAPEeKYlZg2kWD1sKq5LcDQWwg0yg8BOWAUbppwp+eJxpV9c 6sOJbwknBX5RnN9kTzhtzcKXEqJNE7fmOvJVOSHbEp6voq5lKo02YEy0zuNv87Z7 66GikVgYWO1n/NuFh1lTPDgB/vyFnpWkZy1owdXKkg63HNaAxItBniAG2kTotHss H20hsrL2eE3XPD21DHHt/MbgV1fRz80= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:29 2025 by rpki-client