$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa File: dab71fff-cbac-3e27-9fc7-f12b013a750a.roa (raw, json) Hash identifier: pqtXizf1ZhiasjqZwDPS1ENuO/DdCC1Y+ynLhPvEapI= Subject key identifier: D8:EC:72:D6:45:CA:70:37:76:BA:94:E7:17:D3:B1:22:FF:CC:49:7F Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F43285848E8665B223157BDE452CD5D00 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 55178 IP address blocks: 192.230.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:5b:22:31:57:bd:e4:52:cd:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=7b8662ea-42e9-49da-b53e-4e0a96a10124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:d2:da:5c:01:74:82:69:67:6a:55:a4:7e: ce:76:e1:af:0f:17:e5:72:d9:ff:b9:d5:ea:e5:74: 01:d0:0a:69:62:ad:4a:a5:b3:75:79:0e:82:85:12: 12:ac:06:78:34:e1:2f:8e:bb:0c:df:27:d2:22:8f: 3d:42:d0:36:49:7d:7d:d5:97:85:ae:a9:ca:cc:78: 6e:8a:20:27:4d:96:e3:b4:c4:c4:e6:c1:f9:42:9b: a4:28:0f:09:f8:b2:4e:6f:f2:3f:07:8e:55:76:64: 4e:18:f3:44:7d:a5:b5:ba:fb:11:95:04:08:fc:b7: c0:d6:8a:f7:f9:96:58:6b:f7:c3:a9:8f:4f:f9:d1: 0d:d3:25:9e:f5:34:fb:49:ef:55:42:ba:dd:92:30: f9:1e:4f:e0:da:6a:f7:69:63:df:cb:62:10:85:5a: 9f:c6:bd:0c:48:03:bd:9b:90:45:b0:1d:7a:d9:c5: 09:f5:74:48:f4:ca:35:b4:08:e8:4d:25:a0:d8:89: 3b:88:88:06:60:02:a4:7b:4d:8e:a6:32:71:69:7d: be:76:d3:8f:f3:cf:01:fd:5c:e9:4c:8f:69:d2:d7: 96:a7:5a:d8:f1:25:15:3a:9b:dd:a9:5d:56:12:c8: 94:76:00:7c:9a:1a:8a:39:8f:0f:d3:20:64:00:1c: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EC:72:D6:45:CA:70:37:76:BA:94:E7:17:D3:B1:22:FF:CC:49:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5b:29:b7:fa:c5:5c:83:67:6a:2f:5b:c0:cf:ee:84:c3:1b: ba:37:ff:cf:98:11:d4:91:5a:35:ed:94:01:a0:a4:74:53:dd: 37:bb:e1:85:e1:67:27:0b:5c:9f:a1:81:ca:b8:ff:cc:ba:c4: 18:f3:ac:e8:d5:d1:77:b9:ed:9f:a6:c5:97:be:26:f6:a8:f6: f3:7a:d1:ae:a1:d7:9f:df:fe:4b:0c:ff:81:29:b5:25:41:af: 3b:80:58:00:9a:1a:e5:77:d9:19:83:8b:95:7e:57:9a:67:fe: 53:d9:f3:c4:db:ad:83:b3:38:86:3f:76:96:8f:50:52:ae:f4: 66:bb:33:7e:e8:bf:f2:b5:18:fe:20:24:64:54:3b:4f:fd:19: 2e:34:c6:54:4d:78:fc:93:73:58:99:5a:65:b5:21:a2:a4:c8: bf:71:c4:1d:f7:21:78:44:fb:ca:f6:85:b0:9d:5f:e1:ac:90: 3b:3f:e6:46:3d:7a:9a:ce:0b:00:f6:2c:e6:bf:89:18:09:3c: 95:ff:5e:9c:49:db:ab:d1:0e:07:a3:ce:53:46:96:02:9f:2c: 78:eb:52:b2:29:bb:48:f3:66:7b:19:57:d4:72:73:76:69:47: 37:b3:76:86:bb:35:1a:65:32:ba:d2:cb:54:69:8b:18:6f:f2: f9:73:b1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZlsiMVe95FLNXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk N2I4NjYyZWEtNDJlOS00OWRhLWI1M2UtNGUwYTk2YTEwMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm77S2lwBdIJpZ2pVpH7OduGvDxflctn/udXq 5XQB0AppYq1KpbN1eQ6ChRISrAZ4NOEvjrsM3yfSIo89QtA2SX191ZeFrqnKzHhu iiAnTZbjtMTE5sH5QpukKA8J+LJOb/I/B45VdmROGPNEfaW1uvsRlQQI/LfA1or3 +ZZYa/fDqY9P+dEN0yWe9TT7Se9VQrrdkjD5Hk/g2mr3aWPfy2IQhVqfxr0MSAO9 m5BFsB162cUJ9XRI9Mo1tAjoTSWg2Ik7iIgGYAKke02OpjJxaX2+dtOP888B/Vzp TI9p0teWp1rY8SUVOpvdqV1WEsiUdgB8mhqKOY8P0yBkABzgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjsctZFynA3drqU5xfTsSL/zEl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvZGFiNzFmZmYtY2JhYy0z ZTI3LTlmYzctZjEyYjAxM2E3NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJbKbf6xVyDZ2ovW8DP7oTDG7o3/8+YEdSRWjXtlAGgpHRT3Te74YXh ZycLXJ+hgcq4/8y6xBjzrOjV0Xe57Z+mxZe+Jvao9vN60a6h15/f/ksM/4EptSVB rzuAWACaGuV32RmDi5V+V5pn/lPZ88TbrYOzOIY/dpaPUFKu9Ga7M37ov/K1GP4g JGRUO0/9GS40xlRNePyTc1iZWmW1IaKkyL9xxB33IXhE+8r2hbCdX+GskDs/5kY9 eprOCwD2LOa/iRgJPJX/XpxJ26vRDgejzlNGlgKfLHjrUrIpu0jzZnsZV9Ryc3Zp Rzezdoa7NRplMrrSy1Rpixhv8vlzsYA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:08 2025 by rpki-client