$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json) Hash identifier: azD+AEwRgO57SwIh6W6wW1C1/ExQgEBQjgeTYQJ4aSg= Subject key identifier: 44:8B:50:FA:46:FF:7D:08:BE:62:D2:C7:FB:AD:80:24:C3:4F:E3:02 Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F432858497DA46CE0C5266CFD098F7E80 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 399103 IP address blocks: 192.240.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6c:e0:c5:26:6c:fd:09:8f:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=b1a97e14-f408-4fd3-8aad-6b83b3f1d588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:ad:ad:36:e8:eb:4c:5b:92:fe:39:a2:f6: a9:c2:f1:f5:a3:13:80:3c:7f:72:63:62:01:32:49: 20:57:df:72:f6:fe:e7:f0:33:c6:3d:b5:ad:4a:d4: 1c:7f:e0:5f:b7:2c:ef:05:32:60:20:12:96:2d:de: 41:f7:86:03:a1:05:35:02:9b:24:ad:df:7c:e9:d1: fe:bd:a1:d7:85:62:a9:fc:1b:87:40:25:69:44:8a: e3:e6:34:6b:7e:b9:03:fc:ea:5e:8d:25:c4:6a:d1: ac:21:13:c9:e6:fc:2c:1c:c8:9f:c7:0b:f8:3c:90: 3b:03:45:7e:b2:57:a0:ea:6f:b1:90:2b:14:fa:2c: f3:10:6c:da:fe:60:06:20:bc:16:f4:07:19:9b:90: 1d:4d:a2:2b:9c:27:4c:f9:55:6f:56:61:c6:92:e4: 93:5e:99:e3:39:37:ea:ee:a5:40:ab:2d:85:21:18: 99:02:48:de:10:fc:68:71:3e:57:ae:cc:4c:e1:52: 8e:89:0d:39:ca:a6:65:88:4a:71:e9:dd:7d:94:34: 6c:94:a2:d8:81:ed:b7:31:09:a5:1b:2c:ad:c3:11: 88:a5:4c:e8:a8:ef:99:ed:59:08:3b:03:80:dd:ed: a7:78:fc:25:5d:b9:a2:48:a6:93:0c:4d:66:6a:8e: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8B:50:FA:46:FF:7D:08:BE:62:D2:C7:FB:AD:80:24:C3:4F:E3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 192.240.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e0:e1:29:f3:e2:4c:e2:cd:ae:96:9a:fc:3d:86:81:11:6a: 9b:89:92:c5:01:cc:41:0b:12:db:51:dc:69:30:b7:16:ac:76: 4b:6b:18:36:4a:9f:3d:71:45:d7:c9:dc:d9:19:1e:8d:ab:d4: 5c:3b:da:0b:e8:71:39:9e:c0:65:19:71:b6:e8:ab:0b:05:b6: f1:37:da:47:f4:1a:2f:57:34:26:3c:39:95:0e:76:e9:f6:ed: 56:3f:35:31:6c:46:1e:ad:6b:5c:2c:e5:1a:1e:f6:26:ee:23: f2:b9:6f:8f:65:f2:dd:1f:51:5a:d6:3f:9e:df:5a:1b:56:85: 6e:d1:6a:e2:34:b7:21:56:4c:c3:03:d3:54:85:a0:7e:cd:47: d7:37:a9:a5:2e:d0:e7:35:0b:a6:a6:35:0b:68:70:0f:f9:b7: e4:01:f2:c6:9d:64:eb:64:7b:b8:0e:41:fd:89:c4:f9:77:fd: 23:bc:28:07:e6:9d:9b:95:c2:69:74:7c:0a:10:74:99:77:4b: f9:ad:04:1b:d4:d9:a9:ec:7a:9f:dd:bd:b2:c3:cb:12:93:42: 9a:8a:18:b7:ee:d6:d7:11:1b:24:ca:43:08:29:8e:be:7c:ca: 2a:79:fd:d5:91:db:69:10:1f:63:82:c0:df:60:78:dd:33:10: 5b:c9:95:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pGzgxSZs/QmPfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjFhOTdlMTQtZjQwOC00ZmQzLThhYWQtNmI4M2IzZjFkNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU2trTbo60xbkv45ovapwvH1oxOAPH9yY2IB MkkgV99y9v7n8DPGPbWtStQcf+BftyzvBTJgIBKWLd5B94YDoQU1Apskrd986dH+ vaHXhWKp/BuHQCVpRIrj5jRrfrkD/OpejSXEatGsIRPJ5vwsHMifxwv4PJA7A0V+ sleg6m+xkCsU+izzEGza/mAGILwW9AcZm5AdTaIrnCdM+VVvVmHGkuSTXpnjOTfq 7qVAqy2FIRiZAkjeEPxocT5XrsxM4VKOiQ05yqZliEpx6d19lDRslKLYge23MQml GyytwxGIpUzoqO+Z7VkIOwOA3e2nePwlXbmiSKaTDE1mao6ZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESLUPpG/30IvmLSx/utgCTDT+MCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACng4Snz4kziza6Wmvw9hoERapuJksUBzEELEttR3GkwtxasdktrGDZK nz1xRdfJ3NkZHo2r1Fw72gvocTmewGUZcbboqwsFtvE32kf0Gi9XNCY8OZUOdun2 7VY/NTFsRh6ta1ws5Roe9ibuI/K5b49l8t0fUVrWP57fWhtWhW7RauI0tyFWTMMD 01SFoH7NR9c3qaUu0Oc1C6amNQtocA/5t+QB8sadZOtke7gOQf2JxPl3/SO8KAfm nZuVwml0fAoQdJl3S/mtBBvU2ansep/dvbLDyxKTQpqKGLfu1tcRGyTKQwgpjr58 yip5/dWR22kQH2OCwN9geN0zEFvJlX4= -----END CERTIFICATE-----Generated at Sat Apr 12 12:15:33 2025 by rpki-client