$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/b9b9a722-054c-343c-88bd-516515f8b0ff.roa File: b9b9a722-054c-343c-88bd-516515f8b0ff.roa (raw, json) Hash identifier: WDO87g3XbBtrfIBsfmgEXOrBx9sNil9XJW3mDfVZMb4= Subject key identifier: 76:3D:77:D4:4B:B8:F1:32:1C:7E:8E:C0:11:73:4A:0B:43:3B:9A:A4 Certificate issuer: /CN=92812057-2309-49c4-a842-f0f0c77f3471 Certificate serial: 010D0C9F43285848EC96986997CEC8F325044A00 Authority key identifier: F0:AD:25:73:62:F0:08:66:C7:7B:8C:7A:69:03:07:12:63:95:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/b9b9a722-054c-343c-88bd-516515f8b0ff.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 46848 IP address blocks: 198.51.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/92812057-2309-49c4-a842-f0f0c77f3471.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/92812057-2309-49c4-a842-f0f0c77f3471.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:98:69:97:ce:c8:f3:25:04:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92812057-2309-49c4-a842-f0f0c77f3471 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=593dc4a2-9a1d-4c7e-b5c8-39ac55a5b8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:4d:c4:16:31:59:25:4e:8c:a8:e7:e3:83: 6c:7e:62:2c:e9:43:16:9c:da:ab:ca:f0:39:c6:a0: d6:12:d1:be:29:90:db:db:68:45:33:39:30:68:49: 30:1f:b5:9f:41:6f:a2:79:fc:de:aa:ca:a5:65:6d: f9:25:6f:f4:fc:4d:7d:4f:e6:46:ac:bb:ea:ca:09: 7d:ce:0a:bd:a3:41:6a:d4:0e:8d:0e:1e:88:60:03: 1c:1d:cd:3a:fe:b4:6e:08:53:04:79:53:d7:f4:ac: 37:d8:dc:26:bb:1d:c5:c1:12:d1:94:6e:ee:90:33: 54:4b:0c:aa:9e:11:ac:79:fb:41:2a:bb:18:67:83: c9:1a:82:28:eb:3a:44:30:20:b2:62:41:b0:39:6a: 42:ad:5b:f9:c3:19:b7:a2:ea:c3:5e:46:7b:8d:a3: 07:b2:9f:54:55:f5:17:89:d2:9a:de:55:c5:11:86: 3f:d0:8a:e7:0e:4b:19:38:94:98:1c:93:0b:ae:04: 5f:3c:19:b6:fc:e6:ff:ba:7b:42:1c:3b:c4:e3:66: 3d:e4:f5:06:c5:09:95:87:39:1f:9a:11:ab:ef:13: a2:68:93:62:44:93:10:db:bc:94:cc:19:c3:2c:d9: f7:00:97:7e:2b:78:d2:be:67:7a:c7:0c:ca:79:7f: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3D:77:D4:4B:B8:F1:32:1C:7E:8E:C0:11:73:4A:0B:43:3B:9A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/b9b9a722-054c-343c-88bd-516515f8b0ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/92812057-2309-49c4-a842-f0f0c77f3471.crl X509v3 Authority Key Identifier: keyid:F0:AD:25:73:62:F0:08:66:C7:7B:8C:7A:69:03:07:12:63:95:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471.cer sbgp-ipAddrBlock: critical IPv4: 198.51.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7d:4a:eb:6b:3a:a7:22:ee:0b:c9:9b:76:6f:bd:7f:b2:f1: 92:8e:fe:69:46:43:67:20:f4:e5:68:87:c3:86:52:38:f5:72: 25:5c:0e:78:f4:45:e3:46:94:24:c5:64:b8:73:f4:e4:81:66: 76:55:7a:ac:a0:e9:b5:e7:19:9c:83:92:cf:0a:b8:b6:08:58: d0:d3:dc:e8:22:a7:6d:ba:3c:27:fc:0b:ee:bb:28:80:28:d9: 2e:42:32:e1:e1:28:85:6b:bd:6a:84:c5:6d:22:cd:35:99:6b: 6a:d4:45:8f:b9:26:3b:21:a7:f4:6d:7e:19:64:67:49:fd:d5: 90:a2:67:e9:35:33:de:0d:ce:ce:4a:fd:fc:84:a7:66:2c:83: 7d:5f:a7:ff:c3:7c:76:b2:2f:20:4c:0e:51:06:7a:53:19:91: a9:30:de:92:0b:4c:3f:81:3d:fa:b4:e5:31:07:77:31:a1:0a: b6:02:51:85:0e:e8:27:54:0c:f6:27:fe:40:bd:b2:8b:d6:62: 7f:28:11:00:be:eb:01:0b:5e:c2:17:3e:0d:37:9f:e6:b4:7b: 21:32:62:b2:2a:36:40:b3:92:ae:cb:c6:2c:2c:d0:70:79:0e: ab:23:d2:25:f7:a8:9e:b4:0c:20:c9:c9:10:f9:cb:4c:ed:92: 8b:de:14:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslphpl87I8yUESgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4MTIwNTctMjMwOS00OWM0LWE4NDItZjBmMGM3N2Yz NDcxMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NTkzZGM0YTItOWExZC00YzdlLWI1YzgtMzlhYzU1YTViOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA9NxBYxWSVOjKjn44NsfmIs6UMWnNqryvA5 xqDWEtG+KZDb22hFMzkwaEkwH7WfQW+iefzeqsqlZW35JW/0/E19T+ZGrLvqygl9 zgq9o0Fq1A6NDh6IYAMcHc06/rRuCFMEeVPX9Kw32Nwmux3FwRLRlG7ukDNUSwyq nhGseftBKrsYZ4PJGoIo6zpEMCCyYkGwOWpCrVv5wxm3ourDXkZ7jaMHsp9UVfUX idKa3lXFEYY/0IrnDksZOJSYHJMLrgRfPBm2/Ob/untCHDvE42Y95PUGxQmVhzkf mhGr7xOiaJNiRJMQ27yUzBnDLNn3AJd+K3jSvmd6xwzKeX/U5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY9d9RLuPEyHH6OwBFzSgtDO5qkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjgx MjA1Ny0yMzA5LTQ5YzQtYTg0Mi1mMGYwYzc3ZjM0NzEvYjliOWE3MjItMDU0Yy0z NDNjLTg4YmQtNTE2NTE1ZjhiMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI4MTIwNTctMjMwOS00OWM0LWE4 NDItZjBmMGM3N2YzNDcxLzkyODEyMDU3LTIzMDktNDljNC1hODQyLWYwZjBjNzdm MzQ3MS5jcmwwHwYDVR0jBBgwFoAU8K0lc2LwCGbHe4x6aQMHEmOVnOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjgxMjA1Ny0yMzA5LTQ5YzQtYTg0Mi1mMGYw Yzc3ZjM0NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx9SutrOqci7gvJm3ZvvX+y8ZKO/mlGQ2cg9OVoh8OGUjj1ciVcDnj0 ReNGlCTFZLhz9OSBZnZVeqyg6bXnGZyDks8KuLYIWNDT3Ogip226PCf8C+67KIAo 2S5CMuHhKIVrvWqExW0izTWZa2rURY+5Jjshp/RtfhlkZ0n91ZCiZ+k1M94Nzs5K /fyEp2Ysg31fp//DfHayLyBMDlEGelMZkakw3pILTD+BPfq05TEHdzGhCrYCUYUO 6CdUDPYn/kC9sovWYn8oEQC+6wELXsIXPg03n+a0eyEyYrIqNkCzkq7Lxiws0HB5 Dqsj0iX3qJ60DCDJyRD5y0ztkoveFIE= -----END CERTIFICATE-----Generated at Sat Apr 12 00:22:43 2025 by rpki-client