$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d3ae9c10-37e1-368c-b7f9-aee3a7564247.roa File: d3ae9c10-37e1-368c-b7f9-aee3a7564247.roa (raw, json) Hash identifier: StLiKy51upTq0/QhAref2b4re4bXQ+3ED5pgnLLudCo= Subject key identifier: 1F:5F:BB:66:42:D9:5D:87:06:E2:84:81:67:AB:4F:96:00:3A:8D:8D Certificate issuer: /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6 Certificate serial: 010D0C9F4328584949FE93C18EE9BE9DD820B1A0 Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d3ae9c10-37e1-368c-b7f9-aee3a7564247.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 398774 IP address blocks: 192.152.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:93:c1:8e:e9:be:9d:d8:20:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=ca18e7a3-3806-44fd-8f8f-fb04bcb08e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:cf:59:8e:62:7a:fa:79:31:bf:0e:a7:53: d8:19:8f:b9:33:d9:a8:3e:63:d3:ca:1f:6e:84:00: cf:9e:67:e1:dc:88:32:bd:a6:f3:c8:d9:58:7d:79: 15:f6:06:73:66:8d:1c:30:fa:31:bf:05:fe:0e:4f: 45:fd:99:0a:84:37:c1:da:ac:9d:32:d0:a9:86:f5: 79:db:25:79:00:a5:83:d0:2e:fa:7b:72:a6:2d:ce: b9:3f:13:70:d9:d2:c4:d3:52:b5:45:92:08:55:d3: b2:90:60:d0:37:90:b2:e6:20:9e:5f:3e:81:ab:f5: 38:d7:55:54:33:63:da:c8:2e:98:bc:9b:20:73:76: 40:e2:1d:17:db:40:5e:75:aa:db:e4:38:b9:cb:7a: 82:97:b7:29:a1:24:10:4e:8a:92:da:7c:dd:78:8e: a6:af:b1:3a:61:62:d9:c7:11:54:26:b5:ac:c3:ba: 2a:45:be:c8:8d:c3:20:3a:50:f8:cf:c4:4f:d4:54: 49:6b:09:2d:91:22:94:ed:8d:45:5b:b7:20:fd:00: 93:70:8b:5f:a5:04:87:ca:72:e3:2f:a3:21:54:6c: 0d:88:45:ce:02:64:8c:e6:88:b7:21:e9:8c:9a:7c: f7:ae:ce:17:71:af:db:86:25:2e:c5:21:32:d6:5c: 52:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5F:BB:66:42:D9:5D:87:06:E2:84:81:67:AB:4F:96:00:3A:8D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d3ae9c10-37e1-368c-b7f9-aee3a7564247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl X509v3 Authority Key Identifier: keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer sbgp-ipAddrBlock: critical IPv4: 192.152.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:67:27:0f:3e:60:26:68:e5:62:d4:57:df:ae:2b:1f:1b:7e: 9e:79:d3:8f:e7:b5:a8:c0:f9:aa:7e:ea:85:26:ae:0a:30:d6: be:8b:4b:fb:73:f6:b3:65:18:45:7e:fd:bb:71:3f:39:53:30: c7:23:59:74:42:fc:2d:44:b2:d4:8a:3a:6d:af:02:ea:fa:7e: b2:60:3e:cc:67:e9:7d:42:ac:50:7e:50:ae:bc:a8:bf:31:0d: 8f:01:11:22:1c:ac:61:72:5a:28:77:92:1c:89:c7:fd:83:64: 17:e6:6e:f6:4e:86:47:18:34:14:74:42:ca:40:09:41:fa:ce: 35:24:2b:60:24:8a:fb:36:a1:b7:39:0e:85:f8:83:fc:21:8d: 3c:de:fa:7d:a0:73:60:d7:3a:79:86:6f:a3:2b:76:71:34:00: 4b:19:fc:f5:5f:24:3b:be:d0:c3:8c:66:35:0a:4a:a5:f7:d8: c6:87:bd:bc:c6:d3:a4:cf:df:07:73:94:4a:df:03:a6:69:a5: 05:8a:3f:10:8a:b2:a2:79:15:04:97:f7:34:95:ff:86:11:9b: 3e:86:f3:43:90:a1:2e:71:f0:9e:76:05:8b:fc:ed:74:9b:71: 24:91:c2:e2:04:bb:45:f9:90:59:ad:1b:b3:20:69:c5:29:d9: 43:a4:b1:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pPBjum+ndggsaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFhMmQ0YjEtZGQ2My00ZWEzLTg3NjItNzBkNjI4MzQ3 Y2E2MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk Y2ExOGU3YTMtMzgwNi00NGZkLThmOGYtZmIwNGJjYjA4ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF3PWY5ievp5Mb8Op1PYGY+5M9moPmPTyh9u hADPnmfh3IgyvabzyNlYfXkV9gZzZo0cMPoxvwX+Dk9F/ZkKhDfB2qydMtCphvV5 2yV5AKWD0C76e3KmLc65PxNw2dLE01K1RZIIVdOykGDQN5Cy5iCeXz6Bq/U411VU M2PayC6YvJsgc3ZA4h0X20Bedarb5Di5y3qCl7cpoSQQToqS2nzdeI6mr7E6YWLZ xxFUJrWsw7oqRb7IjcMgOlD4z8RP1FRJawktkSKU7Y1FW7cg/QCTcItfpQSHynLj L6MhVGwNiEXOAmSM5oi3IemMmnz3rs4Xca/bhiUuxSEy1lxSEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9fu2ZC2V2HBuKEgWerT5YAOo2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEy ZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2MjgzNDdjYTYvZDNhZTljMTAtMzdlMS0z NjhjLWI3ZjktYWVlM2E3NTY0MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDFhMmQ0YjEtZGQ2My00ZWEzLTg3 NjItNzBkNjI4MzQ3Y2E2L2QxYTJkNGIxLWRkNjMtNGVhMy04NzYyLTcwZDYyODM0 N2NhNi5jcmwwHwYDVR0jBBgwFoAUs6z+T9Sr8E7RB6JfLC/S0EMX/vswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEyZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2 MjgzNDdjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJnJw8+YCZo5WLUV9+uKx8bfp5504/ntajA+ap+6oUmrgow1r6LS/tz 9rNlGEV+/btxPzlTMMcjWXRC/C1EstSKOm2vAur6frJgPsxn6X1CrFB+UK68qL8x DY8BESIcrGFyWih3khyJx/2DZBfmbvZOhkcYNBR0QspACUH6zjUkK2Akivs2obc5 DoX4g/whjTze+n2gc2DXOnmGb6MrdnE0AEsZ/PVfJDu+0MOMZjUKSqX32MaHvbzG 06TP3wdzlErfA6ZppQWKPxCKsqJ5FQSX9zSV/4YRmz6G80OQoS5x8J52BYv87XSb cSSRwuIEu0X5kFmtG7MgacUp2UOksao= -----END CERTIFICATE-----Generated at Fri Apr 4 16:00:48 2025 by rpki-client