$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ff8e72dc-d509-3db2-8238-9b1d3bfed34b.roa File: ff8e72dc-d509-3db2-8238-9b1d3bfed34b.roa (raw, json) Hash identifier: /vgIFeEQZsVgj1d5DHe9qsfztFivcMrXLeFPAlPIs7A= Subject key identifier: 8B:14:23:57:A8:EC:FE:32:2C:82:B2:FC:7F:23:04:91:84:49:F1:DB Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F43285848BE8630AB34EDF814F57632D0 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ff8e72dc-d509-3db2-8238-9b1d3bfed34b.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 0 IP address blocks: 192.188.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:30:ab:34:ed:f8:14:f5:76:32:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=5ec7d073-086d-44eb-98cc-85064490130e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0b:7b:5f:ba:4a:45:ac:24:7f:9d:8c:b1:e5: 48:ef:c0:b3:04:9e:c4:85:48:be:7d:a5:2d:97:c7: 20:1a:35:b1:f3:1c:89:c2:e1:9b:91:3f:4e:f5:16: 74:3d:2a:a2:90:11:b8:07:48:30:ac:19:32:21:b6: b7:be:a6:d6:db:71:f1:ee:a0:75:ed:d3:11:54:59: f1:a2:b1:1c:4b:c9:bc:a0:04:af:61:29:0f:26:82: f9:79:d5:f2:ce:23:cf:69:67:cc:b2:be:21:ce:0d: 76:2a:26:39:71:38:c3:b0:3d:7c:37:b0:85:54:0f: fd:bd:bd:52:77:08:fa:10:23:4a:bb:cf:f4:63:26: 0f:93:38:3b:dd:2b:71:22:f1:f8:57:5c:43:e9:30: b5:85:cb:eb:63:e0:83:40:f4:9c:ae:a9:7f:aa:35: a5:97:3c:25:9d:8c:9c:c3:bb:5f:c5:69:75:20:f0: 6a:6c:13:b9:47:5a:6a:9d:11:96:56:90:b2:8d:78: b1:b8:ce:c4:26:06:25:a7:54:d6:87:29:9c:5e:72: 5f:cd:f3:02:12:45:b6:3d:18:fc:67:cf:04:cc:71: 87:bf:29:c1:dc:df:20:83:3f:ca:42:6c:88:db:5f: a0:66:69:22:76:cf:5d:01:89:c8:d1:18:57:08:79: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:14:23:57:A8:EC:FE:32:2C:82:B2:FC:7F:23:04:91:84:49:F1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ff8e72dc-d509-3db2-8238-9b1d3bfed34b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:24:c8:6c:b5:57:c0:89:3c:92:62:95:1c:05:19:72:e5:61: 25:15:47:41:1c:ab:ef:4e:48:90:6e:cc:19:00:55:00:96:af: e8:40:a5:19:5f:16:13:c6:e6:8e:85:a3:dd:11:f8:8f:32:ce: 91:e9:71:08:d8:f7:22:bb:a3:e8:7c:b0:e4:e2:8a:f9:a0:d8: 37:46:1c:c1:87:34:cd:88:ec:47:b3:62:28:dc:9f:f5:8f:d7: 63:88:0c:69:d4:38:1a:5d:4d:f4:9f:eb:0f:b3:7b:e3:32:13: e8:2c:c1:8c:85:bf:24:13:71:10:01:a4:ef:f0:43:e4:bd:e3: c5:66:16:82:03:29:59:6e:41:fa:59:87:aa:b1:06:f8:b5:75: 2c:68:ea:e0:ea:9b:28:9a:15:64:df:8c:35:6e:fb:bf:84:c9: 62:34:97:9d:33:76:67:71:a8:3f:a8:2d:d2:a8:63:2b:8b:e9: e6:e2:58:43:b3:22:f7:81:59:97:1f:83:d8:9c:3a:10:c9:79: f4:2f:d1:81:0d:bf:44:e1:c2:83:bb:32:74:e1:ad:33:fb:c0: 1d:1a:d5:3c:af:42:67:63:fd:bf:91:e8:c3:f7:2d:44:1a:28: a8:24:cf:09:d6:5a:50:89:7e:71:a1:34:6d:72:21:9a:3c:09: 30:51:b4:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjCrNO34FPV2MtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NWVjN2QwNzMtMDg2ZC00NGViLTk4Y2MtODUwNjQ0OTAxMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgt7X7pKRawkf52MseVI78CzBJ7EhUi+faUt l8cgGjWx8xyJwuGbkT9O9RZ0PSqikBG4B0gwrBkyIba3vqbW23Hx7qB17dMRVFnx orEcS8m8oASvYSkPJoL5edXyziPPaWfMsr4hzg12KiY5cTjDsD18N7CFVA/9vb1S dwj6ECNKu8/0YyYPkzg73StxIvH4V1xD6TC1hcvrY+CDQPScrql/qjWllzwlnYyc w7tfxWl1IPBqbBO5R1pqnRGWVpCyjXixuM7EJgYlp1TWhymcXnJfzfMCEkW2PRj8 Z88EzHGHvynB3N8ggz/KQmyI21+gZmkids9dAYnI0RhXCHlYXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsUI1eo7P4yLIKy/H8jBJGESfHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvZmY4ZTcyZGMtZDUwOS0z ZGIyLTgyMzgtOWIxZDNiZmVkMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABskyGy1V8CJPJJilRwFGXLlYSUVR0Ecq+9OSJBuzBkAVQCWr+hApRlf FhPG5o6Fo90R+I8yzpHpcQjY9yK7o+h8sOTiivmg2DdGHMGHNM2I7EezYijcn/WP 12OIDGnUOBpdTfSf6w+ze+MyE+gswYyFvyQTcRABpO/wQ+S948VmFoIDKVluQfpZ h6qxBvi1dSxo6uDqmyiaFWTfjDVu+7+EyWI0l50zdmdxqD+oLdKoYyuL6ebiWEOz IveBWZcfg9icOhDJefQv0YENv0ThwoO7MnThrTP7wB0a1TyvQmdj/b+R6MP3LUQa KKgkzwnWWlCJfnGhNG1yIZo8CTBRtCM= -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:39 2025 by rpki-client