$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa File: 3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa (raw, json) Hash identifier: ol6UsZVx4bjK6hnxGRxtg3vxqd8ceOEzqGRYNy+J9O4= Subject key identifier: 3D:68:60:2A:6F:81:B3:9B:C6:0A:F3:83:A8:83:E0:37:7D:6D:34:64 Certificate issuer: /CN=1078e419-f0dc-430f-89c0-345af0a135f9 Certificate serial: 010D0C9F432858489BA0AFE9B0A9676077085100 Authority key identifier: 8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 17298 IP address blocks: 192.91.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:af:e9:b0:a9:67:60:77:08:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1078e419-f0dc-430f-89c0-345af0a135f9 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=35322bb7-4b8a-478a-9161-2f2338cfd35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f3:b0:95:53:b9:ec:ce:02:da:4e:1c:b4:ba: bd:3e:0d:ec:54:44:3e:7e:7d:bf:7f:d5:c5:ec:65: 3f:f4:68:40:8a:45:06:d1:a1:d5:53:0d:98:eb:0a: 16:78:e0:ae:28:8e:1d:00:ba:72:84:8a:db:ec:31: a4:ae:8e:e2:45:18:ca:af:10:47:13:29:de:38:62: 79:46:f0:9b:3c:a9:20:14:84:d5:21:f5:0a:22:59: ea:73:8a:ba:ae:ab:48:30:47:03:fc:5f:f4:43:73: 2a:55:9c:81:12:bb:a9:b0:1c:3c:3b:97:e1:73:13: 3e:8a:04:05:23:fb:9b:e1:f3:b1:d3:f0:02:e3:0c: e8:b8:55:bb:d9:fd:31:81:b3:2a:af:d0:b0:37:6c: e1:bf:87:f2:37:5f:04:6c:cf:f5:20:84:54:13:39: 49:69:39:16:12:34:89:71:44:0e:86:de:b0:68:34: 7a:87:aa:7c:48:73:e9:c9:a6:a1:43:89:72:3a:e2: 0c:cc:9c:1c:3e:09:77:02:41:90:f9:00:3d:4a:ff: 46:87:62:bb:32:58:0e:11:d3:ae:53:4c:06:14:cc: de:79:8d:d6:3b:d4:bd:f4:1d:78:02:2b:be:d7:20: bb:32:d6:a9:46:9f:9a:4f:44:d2:11:bc:93:fe:78: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:68:60:2A:6F:81:B3:9B:C6:0A:F3:83:A8:83:E0:37:7D:6D:34:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl X509v3 Authority Key Identifier: keyid:8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer sbgp-ipAddrBlock: critical IPv4: 192.91.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8b:0a:78:cb:f0:ed:04:c3:c4:02:a2:72:fb:c9:8a:b5:0b: 8e:fd:73:3a:c3:34:31:e6:e1:9b:d0:6b:7c:64:13:15:40:78: 62:87:f0:b8:cd:14:b0:31:66:0d:5c:55:8b:c9:a7:28:d7:38: 2a:32:2b:16:ac:4e:6c:7b:ea:d3:9f:78:84:eb:0d:bc:46:82: 43:a2:52:9c:95:1d:85:c1:86:e6:ca:21:f4:c3:9e:13:78:b1: d9:13:83:dd:ac:fe:3a:5c:5b:84:40:41:e4:0d:a5:fb:b3:87: 06:ce:58:88:f9:5e:2f:b7:bc:a7:f2:28:5e:79:23:f8:98:ba: 8f:47:f8:c3:ee:e0:8c:18:41:06:c0:3e:0a:13:3e:d8:4b:cf: 0f:7e:56:cd:93:c7:4a:67:82:59:76:a6:9b:d1:f0:79:75:7c: d4:23:42:42:cf:ce:d1:66:6a:a8:d6:94:e3:4e:58:91:04:5d: 51:e9:b7:77:b1:59:87:cb:07:a0:73:4a:16:9a:dd:ec:9d:d4: 94:4c:39:9f:52:33:8f:ef:d5:af:ed:88:67:1c:7a:11:f7:19: 00:6b:2e:d8:74:ef:31:ec:97:1a:3a:47:db:ea:81:71:a2:21: be:26:ce:97:cb:75:43:74:8f:8a:6f:9b:90:19:c8:e3:68:6f: 4e:77:68:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboK/psKlnYHcIUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA3OGU0MTktZjBkYy00MzBmLTg5YzAtMzQ1YWYwYTEz NWY5MB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk MzUzMjJiYjctNGI4YS00NzhhLTkxNjEtMmYyMzM4Y2ZkMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/OwlVO57M4C2k4ctLq9Pg3sVEQ+fn2/f9XF 7GU/9GhAikUG0aHVUw2Y6woWeOCuKI4dALpyhIrb7DGkro7iRRjKrxBHEyneOGJ5 RvCbPKkgFITVIfUKIlnqc4q6rqtIMEcD/F/0Q3MqVZyBErupsBw8O5fhcxM+igQF I/ub4fOx0/AC4wzouFW72f0xgbMqr9CwN2zhv4fyN18EbM/1IIRUEzlJaTkWEjSJ cUQOht6waDR6h6p8SHPpyaahQ4lyOuIMzJwcPgl3AkGQ+QA9Sv9Gh2K7MlgOEdOu U0wGFMzeeY3WO9S99B14Aiu+1yC7MtapRp+aT0TSEbyT/nglmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1oYCpvgbObxgrzg6iD4Dd9bTRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4 ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVhZjBhMTM1ZjkvM2IxNWE1NGEtMjAxYi0z MWY1LWJmMDktOWM1ZjU1YjY1YTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTA3OGU0MTktZjBkYy00MzBmLTg5 YzAtMzQ1YWYwYTEzNWY5LzEwNzhlNDE5LWYwZGMtNDMwZi04OWMwLTM0NWFmMGEx MzVmOS5jcmwwHwYDVR0jBBgwFoAUjNGsOLJd765KG0J70FiUpfOyqiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVh ZjBhMTM1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+LCnjL8O0Ew8QConL7yYq1C479czrDNDHm4ZvQa3xkExVAeGKH8LjN FLAxZg1cVYvJpyjXOCoyKxasTmx76tOfeITrDbxGgkOiUpyVHYXBhubKIfTDnhN4 sdkTg92s/jpcW4RAQeQNpfuzhwbOWIj5Xi+3vKfyKF55I/iYuo9H+MPu4IwYQQbA PgoTPthLzw9+Vs2Tx0pngll2ppvR8Hl1fNQjQkLPztFmaqjWlONOWJEEXVHpt3ex WYfLB6BzShaa3eyd1JRMOZ9SM4/v1a/tiGccehH3GQBrLth07zHslxo6R9vqgXGi Ib4mzpfLdUN0j4pvm5AZyONob053aLM= -----END CERTIFICATE-----Generated at Mon Apr 7 08:15:02 2025 by rpki-client