$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa File: 787c0dea-fa35-351f-9bf6-45a7b33af696.roa (raw, json) Hash identifier: Vc+hnm2hbaCVXGMFNDkPYsC4PknOkjDACV3MYngSKgw= Subject key identifier: BC:49:0A:85:C4:9E:E9:24:4B:EC:58:A8:5D:56:59:F9:C4:3A:6F:E8 Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Certificate serial: 010D0C9F432858489340A815618155FA0D59F480 Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 19845 IP address blocks: 192.131.151.0/24 maxlen: 24 192.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:a8:15:61:81:55:fa:0d:59:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=357b0155-22f2-45ce-a39b-9583f4c36947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:99:53:25:67:94:ba:39:08:cf:b6:20:ee: fd:e1:a3:7a:6c:53:e8:18:eb:2d:26:cb:44:f0:41: 8c:ea:f2:ea:c5:f8:4f:91:4c:51:cf:80:dd:2f:4f: 02:31:aa:5d:13:6f:23:2b:52:a8:2f:85:67:5d:6c: a6:3a:62:68:bb:07:34:44:19:e2:fd:af:45:eb:e8: 48:ce:24:d9:15:18:fd:ba:2d:12:7e:d6:16:c7:f1: c1:92:40:a4:23:19:bf:c7:76:67:ca:5b:ab:a8:c8: 8f:08:45:2b:c9:ba:b0:1a:8f:fe:fe:16:72:44:d6: f7:1b:ec:86:e1:aa:c1:cb:49:9a:bd:74:dc:a9:18: 12:07:5f:8e:d5:80:9f:3a:ba:f6:73:d0:8e:53:a4: 1a:93:e4:f7:c6:d8:27:0f:f2:23:e1:aa:fb:8a:a3: a7:bb:8e:6a:99:79:59:05:0d:ef:62:50:c4:9b:81: 83:22:38:3f:e5:c1:a0:73:81:06:69:5f:da:8c:9e: a6:07:8e:e7:c5:7d:b1:5d:57:a9:b6:0e:95:e9:ce: 3e:80:71:c1:89:13:83:65:ff:bc:46:10:89:a5:0d: a0:ab:fc:4a:80:5d:85:94:fe:5e:81:89:6a:fc:70: 44:4e:b0:8e:04:e4:71:63:70:20:c1:95:54:57:c4: 61:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:49:0A:85:C4:9E:E9:24:4B:EC:58:A8:5D:56:59:F9:C4:3A:6F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl X509v3 Authority Key Identifier: keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer sbgp-ipAddrBlock: critical IPv4: 192.131.151.0/24 192.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7b:03:89:08:6e:59:39:60:08:43:39:4d:3a:6f:3b:eb:fc: 4b:1e:ad:5c:38:87:28:30:75:22:55:a8:07:78:0d:8e:1b:62: 30:0c:c1:d9:e5:7a:30:17:30:aa:f9:c7:64:87:96:be:8e:3d: b1:ef:ce:28:6a:0d:9d:4b:64:12:29:8a:15:9d:7e:7e:68:37: 3f:10:9e:e0:56:76:74:24:8c:9b:3f:0a:1a:32:24:7d:83:17: d5:f1:dd:46:2b:c3:99:cc:ab:e6:aa:a8:2a:0e:37:b3:fa:18: f3:41:f8:96:10:22:5d:1a:3d:41:9d:01:b6:fe:1d:c0:72:dd: bf:0b:35:c3:4d:83:06:ec:93:4f:d4:74:bf:ef:0c:f5:14:4b: 7b:23:47:c4:0f:57:5a:b6:db:0f:00:0a:6e:87:7f:38:d5:f2: 69:5c:12:85:03:13:d6:c9:10:76:f9:7f:58:c0:24:ca:46:02: 8a:65:81:bd:cb:7a:ea:22:71:e1:0f:dd:9d:dd:9f:9a:9b:75: fc:b5:fd:5e:b7:c8:23:99:54:1d:d9:52:9a:2e:b0:db:d4:54: 79:52:e7:af:a8:ef:af:30:bb:63:7d:5b:d2:02:37:2e:b2:cc: 36:0b:04:a4:30:78:0e:80:e1:7c:99:73:c4:91:a2:97:9f:cd: f5:b9:4a:ee -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiTQKgVYYFV+g1Z9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMzg1OTktMTFiZC00NzZhLTliOTgtZDBmYjQzYjc2 ZDYwMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk MzU3YjAxNTUtMjJmMi00NWNlLWEzOWItOTU4M2Y0YzM2OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBiZUyVnlLo5CM+2IO794aN6bFPoGOstJstE 8EGM6vLqxfhPkUxRz4DdL08CMapdE28jK1KoL4VnXWymOmJouwc0RBni/a9F6+hI ziTZFRj9ui0SftYWx/HBkkCkIxm/x3ZnylurqMiPCEUrybqwGo/+/hZyRNb3G+yG 4arBy0mavXTcqRgSB1+O1YCfOrr2c9COU6Qak+T3xtgnD/Ij4ar7iqOnu45qmXlZ BQ3vYlDEm4GDIjg/5cGgc4EGaV/ajJ6mB47nxX2xXVeptg6V6c4+gHHBiRODZf+8 RhCJpQ2gq/xKgF2FlP5egYlq/HBETrCOBORxY3AgwZVUV8RhYwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLxJCoXEnukkS+xYqF1WWfnEOm/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80N2Mz ODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZiNDNiNzZkNjAvNzg3YzBkZWEtZmEzNS0z NTFmLTliZjYtNDVhN2IzM2FmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDdjMzg1OTktMTFiZC00NzZhLTli OTgtZDBmYjQzYjc2ZDYwLzQ3YzM4NTk5LTExYmQtNDc2YS05Yjk4LWQwZmI0M2I3 NmQ2MC5jcmwwHwYDVR0jBBgwFoAUaUYj7LbDyji488TmIagK6RkFgVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80N2MzODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZi NDNiNzZkNjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIOXAwQA wIOZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG57A4kIblk5YAhDOU06bzvr/EserVw4hygwdSJVqAd4DY4b YjAMwdnlejAXMKr5x2SHlr6OPbHvzihqDZ1LZBIpihWdfn5oNz8QnuBWdnQkjJs/ ChoyJH2DF9Xx3UYrw5nMq+aqqCoON7P6GPNB+JYQIl0aPUGdAbb+HcBy3b8LNcNN gwbsk0/UdL/vDPUUS3sjR8QPV1q22w8ACm6HfzjV8mlcEoUDE9bJEHb5f1jAJMpG Aoplgb3LeuoiceEP3Z3dn5qbdfy1/V63yCOZVB3ZUpousNvUVHlS56+o768wu2N9 W9ICNy6yzDYLBKQweA6A4XyZc8SRopefzfW5Su4= -----END CERTIFICATE-----Generated at Mon Apr 7 07:12:31 2025 by rpki-client