$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa File: 108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa (raw, json) Hash identifier: 56icKuOjoQWd4TKOzz9UTKpCk+ahUAe9SsKfNE90o30= Subject key identifier: 3C:51:A7:B4:49:E9:68:92:9B:2D:C9:66:E1:18:15:F1:09:22:33:00 Certificate issuer: /CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d Certificate serial: 010D0C9F432858488C45C91AE44D0581EE1DDE00 Authority key identifier: 1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa Signing time: Wed 15 Jan 2025 02:00:39 +0000 ROA not before: Wed 15 Jan 2025 02:00:39 +0000 ROA not after: Tue 15 Apr 2025 01:00:39 +0000 asID: 17278 IP address blocks: 192.231.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8c:45:c9:1a:e4:4d:05:81:ee:1d:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d Validity Not Before: Jan 15 02:00:39 2025 GMT Not After : Apr 15 01:00:39 2025 GMT Subject: CN=52041eba-00f0-471e-995f-e266471fa5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:25:ba:d4:1d:18:d9:9a:32:e4:b0:77:2a: e3:65:cb:67:c7:0b:ff:f8:30:ed:e3:b6:c2:fe:49: 77:08:83:c5:27:54:6b:4a:87:cc:a8:30:ac:ec:f5: 46:fc:96:b1:52:ac:80:42:d7:c3:92:97:da:05:3c: 2d:87:1f:8f:75:3b:08:b6:32:d9:89:d2:cf:cc:8c: 94:2d:d2:e0:cf:8d:16:2b:2a:a7:9b:2c:f4:79:44: 21:9c:c1:bc:c6:7b:5d:d7:f1:7b:6f:aa:70:ac:62: 9a:52:79:fd:8c:a9:d4:35:02:be:40:3c:5c:9f:8f: 0d:bc:7b:16:6c:8f:4f:39:40:4e:b7:14:7e:dc:fe: 90:2a:4d:fd:84:8c:98:7e:fa:77:7e:a2:9a:89:ea: 62:c1:b1:bd:42:25:ac:c2:ff:ea:17:34:27:8c:b7: f0:61:6b:a1:e5:d3:06:f8:bc:46:3c:43:1a:44:50: f0:57:54:2e:dd:a2:39:1e:10:0a:d9:0d:c8:58:c3: 1a:1f:17:ce:b4:c5:2d:9a:34:7a:db:23:62:a2:6b: ff:91:d4:56:23:11:6e:81:56:29:7e:35:8c:3d:48: 47:77:d6:bd:19:b7:47:9a:e6:48:99:19:bc:8c:4d: 4c:65:a4:27:42:94:46:27:00:90:e3:08:05:6d:9e: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:51:A7:B4:49:E9:68:92:9B:2D:C9:66:E1:18:15:F1:09:22:33:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.crl X509v3 Authority Key Identifier: keyid:1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer sbgp-ipAddrBlock: critical IPv4: 192.231.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0b:c7:b1:bc:03:cb:c2:5f:27:33:38:8d:f4:49:b9:a6:c6: 14:34:2c:0d:a6:d0:ac:b4:a0:d7:3a:f4:81:2e:45:93:d4:ec: f8:d6:ae:02:41:4e:8b:0b:d5:8e:bf:56:22:32:31:13:46:e2: 94:39:db:95:91:70:ee:32:34:86:ae:4a:f5:ff:3d:e8:b9:4c: e2:a1:d1:4e:7b:5c:0e:4a:0b:72:d1:8d:69:60:fc:9d:67:2f: cd:89:3d:cd:7e:b2:19:1e:c9:aa:18:38:5d:a7:4d:bd:0e:6d: 80:2d:9c:3e:82:b2:9a:77:b3:f5:bd:11:e3:f0:5c:ce:c3:77: 56:4f:23:7e:af:44:32:b8:56:25:f6:30:ce:49:b3:40:9f:79: 5f:3d:77:a7:04:d3:19:dd:31:d7:05:a0:e3:ec:df:94:f9:27: ba:57:b9:f2:0e:b8:b1:ee:81:22:9e:15:c9:bf:31:42:eb:1e: c2:86:dd:3f:1c:33:33:7e:eb:fd:a6:d1:7c:32:b1:66:5d:68: 51:ee:d9:b1:83:c2:da:cc:24:a8:3f:55:40:83:39:f5:6d:42: 1d:b7:81:3c:bd:1f:91:8d:e8:08:79:63:96:0d:be:5c:fd:24: 0f:7c:0b:c1:d8:78:5c:07:e7:f2:ff:bd:a6:a2:14:04:ab:4b: 03:d1:e0:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiMRcka5E0Fge4d3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhjYjhhYmMtZWI5MC00MTc1LWE3NDQtZWNjYTdiZTM0 YjdkMB4XDTI1MDExNTAyMDAzOVoXDTI1MDQxNTAxMDAzOVowLzEtMCsGA1UEAxMk NTIwNDFlYmEtMDBmMC00NzFlLTk5NWYtZTI2NjQ3MWZhNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSYlutQdGNmaMuSwdyrjZctnxwv/+DDt47bC /kl3CIPFJ1RrSofMqDCs7PVG/JaxUqyAQtfDkpfaBTwthx+PdTsItjLZidLPzIyU LdLgz40WKyqnmyz0eUQhnMG8xntd1/F7b6pwrGKaUnn9jKnUNQK+QDxcn48NvHsW bI9POUBOtxR+3P6QKk39hIyYfvp3fqKaiepiwbG9QiWswv/qFzQnjLfwYWuh5dMG +LxGPEMaRFDwV1Qu3aI5HhAK2Q3IWMMaHxfOtMUtmjR62yNiomv/kdRWIxFugVYp fjWMPUhHd9a9GbdHmuZImRm8jE1MZaQnQpRGJwCQ4wgFbZ7G3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxRp7RJ6WiSmy3JZuEYFfEJIjMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mOGNi OGFiYy1lYjkwLTQxNzUtYTc0NC1lY2NhN2JlMzRiN2QvMTA4ZTRlMmMtNGRiZi0z MjVlLThmZjctNzRjMmQ2ZTFlNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjhjYjhhYmMtZWI5MC00MTc1LWE3 NDQtZWNjYTdiZTM0YjdkL2Y4Y2I4YWJjLWViOTAtNDE3NS1hNzQ0LWVjY2E3YmUz NGI3ZC5jcmwwHwYDVR0jBBgwFoAUH4VgVyko45Bel64xQCntO3Y7eb8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mOGNiOGFiYy1lYjkwLTQxNzUtYTc0NC1lY2Nh N2JlMzRiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwLx7G8A8vCXyczOI30SbmmxhQ0LA2m0Ky0oNc69IEuRZPU7PjWrgJB TosL1Y6/ViIyMRNG4pQ525WRcO4yNIauSvX/Pei5TOKh0U57XA5KC3LRjWlg/J1n L82JPc1+shkeyaoYOF2nTb0ObYAtnD6Cspp3s/W9EePwXM7Dd1ZPI36vRDK4ViX2 MM5Js0CfeV89d6cE0xndMdcFoOPs35T5J7pXufIOuLHugSKeFcm/MULrHsKG3T8c MzN+6/2m0XwysWZdaFHu2bGDwtrMJKg/VUCDOfVtQh23gTy9H5GN6Ah5Y5YNvlz9 JA98C8HYeFwH5/L/vaaiFASrSwPR4HI= -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:58 2025 by rpki-client