$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa File: f5e48722-9789-3f44-8a5a-cba796b934fd.roa (raw, json) Hash identifier: o67DzSz88gofCnUBY5f4IAr44R9h95kaYLNl8WBY/cg= Subject key identifier: 39:FA:EC:ED:07:C4:51:10:46:F3:7B:49:3C:6C:C4:C4:21:F7:0B:15 Certificate issuer: /CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7 Certificate serial: 010D0C9F432858494CC94891AD7FA035672D2040 Authority key identifier: 07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11105 IP address blocks: 192.75.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:48:91:ad:7f:a0:35:67:2d:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=dc0b7f65-f8f5-488c-b24c-a09254151442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:7c:18:75:9d:ff:5b:2e:c9:f0:9e:fd:d3: 13:ed:09:0a:c7:61:dc:36:f6:ea:4d:7b:b3:3a:b4: f0:31:8c:7e:00:78:c6:1c:0f:1b:a5:c0:80:ce:e2: d1:3d:da:4c:69:00:a2:96:e4:1f:9e:b8:8a:2c:16: 6e:27:71:eb:6a:ed:22:b1:45:32:00:99:a8:08:71: 98:d9:3f:9a:b5:03:59:58:d8:b8:12:fe:54:b3:35: 1c:8f:b5:9f:0c:9e:2c:f7:85:d9:07:5e:56:5b:51: bb:2c:a8:44:6f:e6:34:cb:32:95:81:79:6e:8a:12: 07:7f:ba:1f:b8:c9:75:3b:be:0b:0d:f3:e8:47:e4: 7c:e8:bb:56:47:77:08:34:be:29:3e:d9:aa:1a:e1: 06:11:c6:00:cd:2b:33:c1:81:7b:fe:78:9b:4b:0a: b3:7e:2f:e4:c6:e2:80:b5:57:47:cb:20:0b:1d:fb: e0:93:3e:c4:9e:15:f5:aa:fd:c3:97:9a:a2:82:cc: 0c:ff:b0:b2:fc:52:df:d4:9e:72:ca:51:bb:84:53: c7:ff:64:9f:83:2d:3f:b6:df:0d:53:01:f3:6c:e5: 7f:10:24:55:65:e2:70:ac:40:71:82:24:90:46:32: bc:b6:40:a0:c6:ca:a5:9b:62:12:60:a7:5c:ca:76: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:EC:ED:07:C4:51:10:46:F3:7B:49:3C:6C:C4:C4:21:F7:0B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl X509v3 Authority Key Identifier: keyid:07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer sbgp-ipAddrBlock: critical IPv4: 192.75.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:78:96:cd:ce:f8:38:8f:bf:bd:b8:b3:84:54:40:e6:7c:41: cf:96:c0:bc:5d:7d:38:d6:5d:54:5f:8f:73:1f:bf:70:49:c6: 95:9b:ec:00:22:00:5c:33:82:f6:97:74:cd:84:b7:07:a8:51: 4f:57:31:ac:6a:ec:9e:45:33:8a:56:ee:c0:2c:c2:e3:07:ff: 50:5a:d3:40:fa:fd:28:81:6b:25:a6:90:cf:9c:71:37:d7:5a: 8b:57:38:1f:f1:b6:ba:b7:6c:f3:eb:20:e4:8f:6c:29:5b:16: a1:e1:79:6a:4f:e1:fc:70:f4:70:04:f9:e0:fc:ed:9c:72:4b: c5:c9:95:7c:9b:6a:5b:bc:54:55:7c:bf:47:70:7a:64:71:a4: 99:af:95:1b:15:ce:98:c9:25:4d:f8:ea:68:f0:a6:a1:4f:5f: 81:84:21:53:c4:a6:24:db:41:b7:40:4e:08:53:f3:14:5e:f0: b9:ab:af:f2:63:d3:a9:99:a9:ef:3e:e5:c8:80:b4:e9:eb:61: a4:fd:fe:72:4d:a9:4c:81:9c:32:4c:fe:bb:fb:fa:8f:df:3b: d0:a8:75:08:06:1e:98:4f:5e:dd:b8:db:98:67:a9:ef:5d:ba: 74:b9:f8:8d:2c:b0:e5:ce:e1:8c:d3:7e:19:81:28:60:b7:a6: 97:5f:c8:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUiRrX+gNWctIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDYxYTc0YmEtYzlkNy00YTlmLThkZWYtN2IwMTI0YTIw NGE3MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZGMwYjdmNjUtZjhmNS00ODhjLWIyNGMtYTA5MjU0MTUxNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodF8GHWd/1suyfCe/dMT7QkKx2HcNvbqTXuz OrTwMYx+AHjGHA8bpcCAzuLRPdpMaQCiluQfnriKLBZuJ3Hrau0isUUyAJmoCHGY 2T+atQNZWNi4Ev5UszUcj7WfDJ4s94XZB15WW1G7LKhEb+Y0yzKVgXluihIHf7of uMl1O74LDfPoR+R86LtWR3cINL4pPtmqGuEGEcYAzSszwYF7/nibSwqzfi/kxuKA tVdHyyALHfvgkz7EnhX1qv3Dl5qigswM/7Cy/FLf1J5yylG7hFPH/2Sfgy0/tt8N UwHzbOV/ECRVZeJwrEBxgiSQRjK8tkCgxsqlm2ISYKdcynYeUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDn67O0HxFEQRvN7STxsxMQh9wsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNjFh NzRiYS1jOWQ3LTRhOWYtOGRlZi03YjAxMjRhMjA0YTcvZjVlNDg3MjItOTc4OS0z ZjQ0LThhNWEtY2JhNzk2YjkzNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDYxYTc0YmEtYzlkNy00YTlmLThk ZWYtN2IwMTI0YTIwNGE3L2Q2MWE3NGJhLWM5ZDctNGE5Zi04ZGVmLTdiMDEyNGEy MDRhNy5jcmwwHwYDVR0jBBgwFoAUB8ozYLbpbCZB/kEkYHrOJe2aiLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kNjFhNzRiYS1jOWQ3LTRhOWYtOGRlZi03YjAx MjRhMjA0YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwEvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN4ls3O+DiPv724s4RUQOZ8Qc+WwLxdfTjWXVRfj3Mfv3BJxpWb7AAi AFwzgvaXdM2EtweoUU9XMaxq7J5FM4pW7sAswuMH/1Ba00D6/SiBayWmkM+ccTfX WotXOB/xtrq3bPPrIOSPbClbFqHheWpP4fxw9HAE+eD87ZxyS8XJlXybalu8VFV8 v0dwemRxpJmvlRsVzpjJJU346mjwpqFPX4GEIVPEpiTbQbdATghT8xRe8Lmrr/Jj 06mZqe8+5ciAtOnrYaT9/nJNqUyBnDJM/rv7+o/fO9CodQgGHphPXt2425hnqe9d unS5+I0ssOXO4YzTfhmBKGC3ppdfyGI= -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:46 2025 by rpki-client