$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/e84d3821-dd16-38a6-b454-39bc3c0c3d72.roa File: e84d3821-dd16-38a6-b454-39bc3c0c3d72.roa (raw, json) Hash identifier: 9/3GvUWnLJa31fPZUYyiBFwtjS0fWMdUM6bsX9/o7Rk= Subject key identifier: 00:CC:22:81:27:D0:C6:91:57:9E:B7:74:01:EC:11:F9:DE:82:82:49 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F43285848AF2B853D8149A9F7EBC6F600 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/e84d3821-dd16-38a6-b454-39bc3c0c3d72.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 0 IP address blocks: 192.188.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:85:3d:81:49:a9:f7:eb:c6:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=f6b7c773-fb81-4a94-afbe-e4f3ac888a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:88:e3:79:ec:33:c7:fd:dc:4a:7b:4e:48: 28:ed:52:0b:4b:cd:9c:1c:0f:b4:41:2a:75:dd:08: 46:91:41:98:40:8a:a0:27:5f:b1:82:9f:07:a7:30: 9d:7c:1c:a0:6e:8e:bf:12:b9:dc:01:37:1c:3d:99: 16:a4:23:0a:0a:a2:c7:af:0d:fb:13:71:15:16:d5: f5:ad:25:3a:cc:8e:22:12:32:4f:f0:14:12:31:1b: cb:c3:e9:aa:43:48:71:bd:14:b3:72:0d:68:99:c4: fa:28:a6:8f:e5:c4:54:57:1c:ac:10:18:98:6f:4f: 52:e6:6a:53:7c:ae:ae:2e:4e:7a:df:d4:f6:c3:f8: f3:92:7a:30:b3:fb:28:fe:1a:1b:78:29:a4:22:0c: 02:e3:4f:6b:8e:9d:71:29:87:4c:74:de:80:ae:46: 1b:45:01:f4:7e:6a:37:c3:98:4b:c0:79:6f:c3:75: 99:00:7e:7a:3d:bf:09:b4:c4:10:38:c1:69:32:57: 75:fb:cf:17:82:95:ae:3c:c2:aa:b8:54:78:39:a1: 4b:1e:35:4a:d9:90:bb:0f:62:34:e9:44:82:7a:04: f5:8a:b2:f1:26:58:6b:8d:e2:4c:7f:3d:74:83:62: 7a:37:cc:ec:7a:63:57:0b:97:be:aa:4f:36:48:d1: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CC:22:81:27:D0:C6:91:57:9E:B7:74:01:EC:11:F9:DE:82:82:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/e84d3821-dd16-38a6-b454-39bc3c0c3d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f4:96:9b:0f:d3:6d:03:41:06:1c:bf:1b:68:26:c5:aa:52: dc:58:18:54:7b:6f:fe:d1:b6:c8:98:0d:f4:6e:c7:bb:dd:8c: a2:5c:25:0a:8b:8a:03:d0:94:d9:99:79:01:25:57:04:e7:59: 2c:de:05:be:bf:15:4e:8c:8f:2f:bf:2d:4e:39:89:f3:86:08: 15:ac:21:a5:73:b5:1b:c3:24:28:7c:15:04:0d:36:1b:57:70: 39:20:d9:5b:02:5a:ab:29:b3:90:b0:ea:00:e0:5b:ae:17:9d: 03:b9:a1:27:3f:8e:b6:0a:83:fe:65:69:d6:01:94:ce:b2:d9: ba:79:8b:46:89:96:73:a8:9c:8a:4c:5a:43:c7:be:2f:43:8d: ed:88:6e:a8:d2:65:d5:0d:c7:73:f6:ce:12:7b:cf:57:15:f0: 87:06:5b:52:8f:00:6e:0c:d9:3f:d9:a8:72:7b:7d:9a:68:6e: bd:c2:a6:e3:99:6c:c6:44:7f:c5:52:22:bb:71:f1:c4:c9:2e: e0:1c:4d:9f:47:06:8a:67:58:44:d5:f4:61:de:19:f3:b2:aa: 7f:fd:ad:9b:92:07:5d:cb:85:21:3c:7c:06:52:61:dc:91:0b: 74:19:20:dd:1a:e3:30:cd:52:5a:43:8d:9b:ce:64:9d:50:38: 7b:7d:03:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4U9gUmp9+vG9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjZiN2M3NzMtZmI4MS00YTk0LWFmYmUtZTRmM2FjODg4YTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaqI43nsM8f93Ep7Tkgo7VILS82cHA+0QSp1 3QhGkUGYQIqgJ1+xgp8HpzCdfBygbo6/ErncATccPZkWpCMKCqLHrw37E3EVFtX1 rSU6zI4iEjJP8BQSMRvLw+mqQ0hxvRSzcg1omcT6KKaP5cRUVxysEBiYb09S5mpT fK6uLk5639T2w/jzknows/so/hobeCmkIgwC409rjp1xKYdMdN6ArkYbRQH0fmo3 w5hLwHlvw3WZAH56Pb8JtMQQOMFpMld1+88XgpWuPMKquFR4OaFLHjVK2ZC7D2I0 6USCegT1irLxJlhrjeJMfz10g2J6N8zsemNXC5e+qk82SNFkoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADMIoEn0MaRV563dAHsEfnegoJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvZTg0ZDM4MjEtZGQxNi0z OGE2LWI0NTQtMzliYzNjMGMzZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP0lpsP020DQQYcvxtoJsWqUtxYGFR7b/7RtsiYDfRux7vdjKJcJQqL igPQlNmZeQElVwTnWSzeBb6/FU6Mjy+/LU45ifOGCBWsIaVztRvDJCh8FQQNNhtX cDkg2VsCWqsps5Cw6gDgW64XnQO5oSc/jrYKg/5ladYBlM6y2bp5i0aJlnOonIpM WkPHvi9Dje2IbqjSZdUNx3P2zhJ7z1cV8IcGW1KPAG4M2T/ZqHJ7fZpobr3CpuOZ bMZEf8VSIrtx8cTJLuAcTZ9HBopnWETV9GHeGfOyqn/9rZuSB13LhSE8fAZSYdyR C3QZIN0a4zDNUlpDjZvOZJ1QOHt9A9o= -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:07 2025 by rpki-client