$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa File: 9db9c639-d02d-33c9-bdb4-066c23602c3f.roa (raw, json) Hash identifier: HVaWaJp3lhW6oxwCw9KMypL4yjFgtX724uoOCMoVYl0= Subject key identifier: 6C:07:91:87:95:9A:00:73:47:E4:9B:0B:76:3B:56:F3:72:E9:D3:42 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F43285848AF2B858F574614897CF81AC0 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 293 IP address blocks: 192.188.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:85:8f:57:46:14:89:7c:f8:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=b3996bb6-db51-4db7-a8e8-2048b157fc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:28:ad:70:a9:b2:b7:9b:60:7a:d6:f7:88: 04:9c:17:53:80:03:c4:4e:aa:fa:09:e0:89:17:0a: ee:f3:bf:27:24:84:ab:da:c5:5c:b8:93:24:ee:af: be:cb:ef:94:f2:b2:a0:7b:9f:c5:d5:92:76:64:67: 7d:09:21:9c:13:b4:48:15:3f:06:b5:ac:6a:be:fe: f3:4d:b2:27:49:32:8c:1a:22:40:b4:af:5b:80:39: 70:db:55:02:ae:32:c3:ff:df:b0:f1:c9:86:a6:c5: 2c:5a:75:ec:2c:95:20:a9:7a:aa:01:12:48:29:00: 3f:73:67:00:da:69:3c:78:d1:4f:4d:96:79:60:2e: 6f:81:43:de:78:6b:92:af:cc:21:a9:56:f5:de:61: 3f:06:f9:8b:3c:e0:e1:a0:c3:ab:e3:f7:d6:a8:cf: 8d:d9:c8:96:1d:b5:91:3b:bd:5f:0d:31:7a:ea:b7: 5d:35:fb:25:91:a7:28:d4:48:15:66:b8:da:0a:82: cd:01:79:70:00:ba:a4:3d:a5:54:9d:c8:5f:c1:df: dd:43:54:3f:61:0d:e6:5e:be:ec:28:f4:b3:9a:b0: 26:d9:bf:65:a6:52:94:af:6d:f3:05:59:08:c9:b8: de:35:99:17:b9:ee:a9:f6:0f:aa:0b:c8:08:68:58: 73:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:07:91:87:95:9A:00:73:47:E4:9B:0B:76:3B:56:F3:72:E9:D3:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d8:99:7a:7f:8c:5a:d4:ab:75:f7:eb:93:7f:25:29:0e:ea: 72:b3:9a:07:5c:29:86:23:98:56:09:d8:15:bd:39:91:5f:0e: 26:14:ca:9d:6e:9f:20:a1:09:e1:79:e8:ca:2f:22:8c:e1:c7: 63:58:54:11:09:54:c3:24:a0:b3:9e:7b:0a:41:66:35:2a:70: 1a:c6:35:57:a5:33:f1:de:e6:df:9d:8a:27:fa:21:de:72:e2: 58:62:c8:09:1b:09:bd:3b:86:e9:aa:d9:70:b2:49:ac:60:0d: 28:ca:a0:f6:52:e5:c9:0f:f7:71:86:28:48:68:62:dd:70:cb: e6:e8:af:0c:41:12:62:c3:55:e8:54:02:9a:04:2e:18:8b:d9: 47:ea:77:6f:05:b1:b0:51:de:4f:fe:4b:2e:45:8b:71:61:25: bc:2c:0f:91:7c:cc:51:de:db:43:6c:a4:b5:2f:26:4f:2c:e2: 68:33:34:d1:ff:db:06:47:6f:53:f7:d1:28:c6:02:ba:3b:46: f9:c7:01:f5:26:e5:b3:40:d9:f2:fd:da:7d:af:64:ed:ab:5b: 9c:d4:5f:f7:a0:33:c3:e4:d4:6f:ae:53:32:9d:f2:62:81:89: da:1c:16:16:dc:40:63:fa:c3:df:9d:14:20:5f:fe:74:3c:c3: fb:c7:ac:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4WPV0YUiXz4GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjM5OTZiYjYtZGI1MS00ZGI3LWE4ZTgtMjA0OGIxNTdmYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk60orXCpsrebYHrW94gEnBdTgAPETqr6CeCJ Fwru878nJISr2sVcuJMk7q++y++U8rKge5/F1ZJ2ZGd9CSGcE7RIFT8Gtaxqvv7z TbInSTKMGiJAtK9bgDlw21UCrjLD/9+w8cmGpsUsWnXsLJUgqXqqARJIKQA/c2cA 2mk8eNFPTZZ5YC5vgUPeeGuSr8whqVb13mE/BvmLPODhoMOr4/fWqM+N2ciWHbWR O71fDTF66rddNfslkaco1EgVZrjaCoLNAXlwALqkPaVUnchfwd/dQ1Q/YQ3mXr7s KPSzmrAm2b9lplKUr23zBVkIybjeNZkXue6p9g+qC8gIaFhzcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwHkYeVmgBzR+SbC3Y7VvNy6dNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvOWRiOWM2MzktZDAyZC0z M2M5LWJkYjQtMDY2YzIzNjAyYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwLwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzYmXp/jFrUq3X365N/JSkO6nKzmgdcKYYjmFYJ2BW9OZFfDiYUyp1u nyChCeF56MovIozhx2NYVBEJVMMkoLOeewpBZjUqcBrGNVelM/He5t+diif6Id5y 4lhiyAkbCb07humq2XCySaxgDSjKoPZS5ckP93GGKEhoYt1wy+borwxBEmLDVehU ApoELhiL2Ufqd28FsbBR3k/+Sy5Fi3FhJbwsD5F8zFHe20NspLUvJk8s4mgzNNH/ 2wZHb1P30SjGAro7RvnHAfUm5bNA2fL92n2vZO2rW5zUX/egM8Pk1G+uUzKd8mKB idocFhbcQGP6w9+dFCBf/nQ8w/vHrHI= -----END CERTIFICATE-----Generated at Fri Apr 4 19:29:45 2025 by rpki-client