$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa File: 5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa (raw, json) Hash identifier: B8L5Ny7PNZrVVvwlt4/xNplTk9tz+LvlnITbyJZsrMU= Subject key identifier: 7A:DE:62:E9:18:AA:2E:70:2D:D2:23:F3:AD:67:E5:E8:8E:08:29:D0 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F43285848D64109F338EE9ECF43ACB500 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 54054 IP address blocks: 192.48.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:09:f3:38:ee:9e:cf:43:ac:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=a85443ea-dba7-4b80-a807-43594e7e8828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:87:76:9b:7f:84:c2:6a:a5:44:55:af:d6: 18:4c:cb:ed:dc:78:e1:33:17:77:55:00:5c:97:a6: c2:13:48:4c:3b:6e:14:01:b0:01:e1:01:fe:60:70: b4:45:42:08:86:fe:7e:d6:eb:ac:b9:6f:c6:68:2a: 1e:ed:54:c9:8f:cb:5d:63:f7:1b:30:e1:a7:b4:b4: bb:8c:db:34:72:d3:b4:6b:56:11:ed:67:8b:44:32: b3:e6:a8:2e:78:95:f8:c5:ba:dc:af:53:f2:f7:7a: 28:b6:a6:6a:4a:e6:be:3e:6f:e1:82:16:ae:5d:51: 59:46:2a:14:37:d7:8f:a5:34:f7:ad:e6:c2:0b:42: fb:54:2b:b6:14:d4:4e:ba:00:a2:44:54:1f:99:8b: fe:b2:b5:2a:b5:20:5b:72:bf:b8:ce:58:ff:ad:a9: 71:7a:b5:bc:8e:3b:7f:8e:97:c5:ea:2c:66:4e:2b: 4b:d8:ea:1e:26:c0:2b:46:7f:26:4c:32:7f:f5:23: 80:26:8c:62:83:d8:72:6c:70:08:7f:65:f0:5d:72: fe:45:7d:6f:9c:09:91:5d:ad:11:30:10:ac:0a:7e: 26:29:33:44:c1:ba:32:27:1b:5c:ba:6d:b0:2d:c7: 54:4c:59:84:13:60:71:04:ac:07:e2:53:f5:f4:31: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DE:62:E9:18:AA:2E:70:2D:D2:23:F3:AD:67:E5:E8:8E:08:29:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 192.48.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c2:3d:95:94:f1:53:32:a2:1b:28:c0:a3:d6:1d:fa:a5:e3: a6:4b:eb:1f:9a:30:94:a6:64:76:09:95:15:a7:3b:81:84:64: 0d:ca:ed:05:49:00:8f:72:a5:35:5c:0c:8d:b6:2d:78:fe:7c: d3:45:c0:94:8c:15:63:35:27:4f:af:0e:2d:24:4b:74:90:5e: ef:bc:32:b9:25:85:6d:51:8b:99:af:85:50:80:e7:52:99:7a: e8:a6:9f:f5:66:53:34:39:41:f4:c2:97:96:09:73:16:da:e4: 3d:d7:d4:c4:e3:91:94:67:37:68:b8:6c:06:d9:17:28:4d:1f: 0b:d7:19:83:9c:50:a6:6f:d1:bc:69:42:28:3d:6d:8a:54:2e: 56:c3:c4:b4:42:9d:db:f6:52:6c:ec:be:66:1a:65:92:2f:f9: e3:89:a7:5c:03:3b:05:06:6c:a9:22:ab:fa:c0:24:b9:da:48: d3:9c:b4:95:20:74:d3:07:55:7d:85:ca:f6:7c:1c:ec:30:f3: 01:5d:ca:23:b3:f5:a1:2f:d5:a1:59:0e:85:3d:f8:db:ef:30: 71:a3:cc:ce:46:55:fd:65:2e:79:dc:c9:91:b9:b8:1f:24:4a: b0:2d:0c:57:77:cb:95:9d:c1:bd:c6:29:2c:9b:01:d9:64:54: e5:6d:16:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQnzOO6ez0OstQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTg1NDQzZWEtZGJhNy00YjgwLWE4MDctNDM1OTRlN2U4ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfWHdpt/hMJqpURVr9YYTMvt3HjhMxd3VQBc l6bCE0hMO24UAbAB4QH+YHC0RUIIhv5+1uusuW/GaCoe7VTJj8tdY/cbMOGntLS7 jNs0ctO0a1YR7WeLRDKz5qgueJX4xbrcr1Py93ootqZqSua+Pm/hghauXVFZRioU N9ePpTT3rebCC0L7VCu2FNROugCiRFQfmYv+srUqtSBbcr+4zlj/ralxerW8jjt/ jpfF6ixmTitL2OoeJsArRn8mTDJ/9SOAJoxig9hybHAIf2XwXXL+RX1vnAmRXa0R MBCsCn4mKTNEwboyJxtcum2wLcdUTFmEE2BxBKwH4lP19DH9qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHreYukYqi5wLdIj861n5eiOCCnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvNWI3NTA1YWUtMGYzNC0z NjI2LWJjMTEtNDlmOGVjNjFkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDCPZWU8VMyohsowKPWHfql46ZL6x+aMJSmZHYJlRWnO4GEZA3K7QVJ AI9ypTVcDI22LXj+fNNFwJSMFWM1J0+vDi0kS3SQXu+8MrklhW1Ri5mvhVCA51KZ euimn/VmUzQ5QfTCl5YJcxba5D3X1MTjkZRnN2i4bAbZFyhNHwvXGYOcUKZv0bxp Qig9bYpULlbDxLRCndv2UmzsvmYaZZIv+eOJp1wDOwUGbKkiq/rAJLnaSNOctJUg dNMHVX2FyvZ8HOww8wFdyiOz9aEv1aFZDoU9+NvvMHGjzM5GVf1lLnncyZG5uB8k SrAtDFd3y5Wdwb3GKSybAdlkVOVtFrU= -----END CERTIFICATE-----Generated at Fri Apr 11 22:44:50 2025 by rpki-client