$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/33645b9a-e976-3e22-ad0c-7c1924f3cfe9.roa File: 33645b9a-e976-3e22-ad0c-7c1924f3cfe9.roa (raw, json) Hash identifier: ZEwsIFlhxQZlm2smjO3wLuB4fONNoOTlnx6aKgSwd5E= Subject key identifier: 52:61:04:89:38:33:25:5D:7F:82:46:B7:03:FE:DE:29:14:38:4E:F7 Certificate issuer: /CN=ac717083-6970-4d32-8573-0bfa89700c9e Certificate serial: 010D0C9F43285849244E89353D674D7B2954D840 Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/33645b9a-e976-3e22-ad0c-7c1924f3cfe9.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 802 IP address blocks: 192.75.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:89:35:3d:67:4d:7b:29:54:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=b603707a-3c83-4702-a10c-6d1e49ebbaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:8f:9d:c1:24:8d:14:db:6c:7c:b3:58:48: 67:af:ef:ad:66:f5:e5:85:62:9a:00:ce:55:d4:a9: 6e:22:25:7c:95:ab:a8:22:64:72:9c:b4:02:9b:29: e3:42:29:bc:1f:e9:1e:09:cf:b0:76:a3:f7:c8:13: a7:70:76:8c:18:43:04:8e:7d:49:12:29:a7:cd:10: 0d:d0:33:bd:d4:e8:61:95:73:7c:75:c0:0e:51:09: b1:1b:40:36:a3:23:fb:3d:8c:9b:f8:20:f0:3b:3c: d5:6f:7d:f9:6a:62:1f:14:ae:bf:ae:35:b4:bd:e2: 4a:32:6b:09:6e:9f:84:e1:9b:ff:d7:72:4d:67:c5: 01:29:4e:42:9a:60:43:68:11:86:6b:43:2b:f3:2e: 12:de:d5:d8:d4:21:cf:92:34:23:71:54:aa:f4:ae: 3e:c7:0e:a0:ed:f2:57:28:02:08:db:c7:22:b7:d1: 2b:0f:49:38:d6:2c:85:de:cd:dc:20:a0:d7:47:11: ed:ae:5c:f4:1d:6a:ee:e0:77:6a:a5:95:e1:a4:75: 8a:5e:dd:df:36:62:45:7c:12:f4:37:ca:bd:29:a9: 32:50:3c:85:1b:e6:8f:64:0c:63:b2:13:94:80:ca: 08:12:12:4d:eb:24:21:f9:9c:94:bc:2a:8c:9b:0d: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:61:04:89:38:33:25:5D:7F:82:46:B7:03:FE:DE:29:14:38:4E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/33645b9a-e976-3e22-ad0c-7c1924f3cfe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl X509v3 Authority Key Identifier: keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer sbgp-ipAddrBlock: critical IPv4: 192.75.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c4:62:3b:08:24:4f:2f:2f:9c:7f:ce:a0:0e:f6:50:da:ba: ba:09:fe:1e:49:67:46:de:e9:04:26:89:c4:74:0c:04:a5:bc: 78:52:b2:4c:7c:2c:75:f8:43:81:84:c6:04:33:c1:e9:d1:32: 9d:b9:d6:da:7b:ab:2a:40:78:6c:21:70:07:d3:24:61:92:f0: bc:db:5c:79:29:2b:3f:84:62:e9:70:48:43:c1:73:97:c6:13: 2c:06:25:77:01:0f:42:aa:c2:fa:b3:0f:e9:f1:34:ff:26:97: 14:fe:8a:12:67:ea:a4:b4:4d:aa:5e:29:f2:cb:fe:2b:65:1c: fb:31:11:7c:99:ea:41:b7:57:06:f8:c4:98:63:db:08:f6:d9: 00:8f:88:f2:a9:95:8a:f9:19:d1:cd:8c:e7:4a:11:f2:59:c0: 04:2e:a4:9e:88:a0:c5:00:d4:1a:49:6c:51:d2:fa:00:f8:65: a7:06:65:fa:0b:f2:e2:71:ff:84:9a:8d:f5:79:ea:34:28:57: aa:d1:64:bb:4f:e0:9c:00:13:45:40:34:4f:11:de:2e:c6:92: 6b:4f:63:13:4f:b3:aa:cf:a7:f1:60:9d:09:b7:62:d3:57:b1: 0b:86:cf:db:96:da:0d:b0:e4:58:4a:2d:9c:95:7b:e2:99:8c: 70:12:fa:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTok1PWdNeylU2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM3MTcwODMtNjk3MC00ZDMyLTg1NzMtMGJmYTg5NzAw YzllMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YjYwMzcwN2EtM2M4My00NzAyLWExMGMtNmQxZTQ5ZWJiYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2aPncEkjRTbbHyzWEhnr++tZvXlhWKaAM5V 1KluIiV8lauoImRynLQCmynjQim8H+keCc+wdqP3yBOncHaMGEMEjn1JEimnzRAN 0DO91OhhlXN8dcAOUQmxG0A2oyP7PYyb+CDwOzzVb335amIfFK6/rjW0veJKMmsJ bp+E4Zv/13JNZ8UBKU5CmmBDaBGGa0Mr8y4S3tXY1CHPkjQjcVSq9K4+xw6g7fJX KAII28cit9ErD0k41iyF3s3cIKDXRxHtrlz0HWru4HdqpZXhpHWKXt3fNmJFfBL0 N8q9KakyUDyFG+aPZAxjshOUgMoIEhJN6yQh+ZyUvCqMmw1rxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJhBIk4MyVdf4JGtwP+3ikUOE73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcx NzA4My02OTcwLTRkMzItODU3My0wYmZhODk3MDBjOWUvMzM2NDViOWEtZTk3Ni0z ZTIyLWFkMGMtN2MxOTI0ZjNjZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM3MTcwODMtNjk3MC00ZDMyLTg1 NzMtMGJmYTg5NzAwYzllL2FjNzE3MDgzLTY5NzAtNGQzMi04NTczLTBiZmE4OTcw MGM5ZS5jcmwwHwYDVR0jBBgwFoAUIF+z6njl6UcKxVau6vVt4D2e/a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcxNzA4My02OTcwLTRkMzItODU3My0wYmZh ODk3MDBjOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEsSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTEYjsIJE8vL5x/zqAO9lDauroJ/h5JZ0be6QQmicR0DASlvHhSskx8 LHX4Q4GExgQzwenRMp251tp7qypAeGwhcAfTJGGS8LzbXHkpKz+EYulwSEPBc5fG EywGJXcBD0KqwvqzD+nxNP8mlxT+ihJn6qS0TapeKfLL/itlHPsxEXyZ6kG3Vwb4 xJhj2wj22QCPiPKplYr5GdHNjOdKEfJZwAQupJ6IoMUA1BpJbFHS+gD4ZacGZfoL 8uJx/4SajfV56jQoV6rRZLtP4JwAE0VANE8R3i7GkmtPYxNPs6rPp/FgnQm3YtNX sQuGz9uW2g2w5FhKLZyVe+KZjHAS+ro= -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:10 2025 by rpki-client