$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa File: 4065f43f-ee36-3824-890b-4696c8253f7f.roa (raw, json) Hash identifier: Bx7Ep0rsTc4xPxrYjeZ+UapjcFWn9oxSzcpyb4TEtMg= Subject key identifier: 99:1B:74:CF:0B:3E:FF:29:45:C0:5D:60:3E:F8:3F:54:CC:85:10:D1 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F432858489340AD0AF39AFA601EEAEA00 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 91 IP address blocks: 192.12.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:ad:0a:f3:9a:fa:60:1e:ea:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=a4343e8f-df2c-4bee-8924-48f43804a371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:00:42:bc:24:8f:83:a3:45:0f:02:34:69: 67:ff:3b:dd:98:43:63:49:7a:90:5c:e6:04:f0:b1: ea:43:52:f0:72:a5:8a:09:8d:92:70:33:b4:4a:7f: 7a:47:5a:ab:80:61:63:70:d3:35:47:ea:e8:34:a0: 37:a7:15:ad:97:93:b4:c2:c7:cb:e3:57:03:56:1d: dd:57:31:f7:9f:f7:79:18:af:4d:66:b2:9e:98:79: cc:60:01:61:d0:eb:12:5f:01:f4:f7:c9:27:fd:ea: 67:7f:54:f5:a1:43:8b:c5:44:e5:05:5b:ad:64:51: 75:7a:bd:80:8d:00:cd:61:bd:7b:e0:e8:55:ea:65: 22:29:8b:b4:fc:ea:c5:8c:fa:cf:6e:55:ce:e7:9f: 39:38:05:1e:96:03:bf:16:d0:d7:b0:cd:50:17:c6: 75:22:69:da:9f:11:d6:e9:ab:63:18:ed:ee:32:b4: a2:05:b9:03:92:7d:49:13:16:13:ab:8d:60:0e:9b: 6f:78:d7:bf:3a:a4:32:84:dd:e2:e9:10:8d:51:3a: 09:76:d9:ba:9e:16:57:b6:26:32:45:e7:4f:bf:f2: 97:02:d1:1f:99:74:59:2e:b2:54:94:40:d7:30:82: ba:30:f8:ba:c5:a6:7e:9a:d9:96:7b:04:4e:2d:4a: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1B:74:CF:0B:3E:FF:29:45:C0:5D:60:3E:F8:3F:54:CC:85:10:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6e:04:a6:ea:18:c2:95:69:d1:b4:15:b5:3f:ea:14:b2:5a: af:6e:22:53:c5:1a:a1:0d:6d:ea:97:4c:5b:5d:37:f8:40:f3: 72:57:b7:bf:ed:ec:86:44:30:ac:3e:b3:11:c0:b9:4d:15:9a: 3b:8d:4b:35:0a:51:ab:50:f8:cd:ad:60:d3:4c:97:e8:33:78: 16:11:af:5a:e6:33:ac:a8:ad:92:01:65:7e:cb:69:3b:ae:ff: 4e:11:f4:8c:64:4a:04:ea:c1:3e:37:88:89:65:ff:25:cc:10: d1:79:d1:90:11:8e:b0:de:1c:28:82:e0:62:c9:3f:2a:51:0b: 70:d1:b4:d5:58:4f:e8:99:fc:15:35:65:bb:1f:04:c2:ba:2c: 99:cf:0a:b6:31:a5:2b:89:1d:96:f8:71:b4:44:df:bb:e4:c0: c3:19:cb:93:b6:a8:95:67:83:8f:4b:f5:b1:9d:f9:7d:37:e0: 1b:66:b0:2f:26:90:b9:ee:34:d8:e3:94:7a:bb:4c:85:64:d0: db:dd:fe:f8:af:17:2d:60:c1:8d:18:2a:d3:61:2d:89:bb:f7: 02:c2:5a:f4:4b:09:87:c7:d6:79:40:7a:cc:14:97:a7:ac:b8: 4c:6e:6f:af:21:37:2d:c4:e8:b7:07:58:78:56:a9:39:34:8f: 14:25:7f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQK0K85r6YB7q6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk YTQzNDNlOGYtZGYyYy00YmVlLTg5MjQtNDhmNDM4MDRhMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UwAQrwkj4OjRQ8CNGln/zvdmENjSXqQXOYE 8LHqQ1LwcqWKCY2ScDO0Sn96R1qrgGFjcNM1R+roNKA3pxWtl5O0wsfL41cDVh3d VzH3n/d5GK9NZrKemHnMYAFh0OsSXwH098kn/epnf1T1oUOLxUTlBVutZFF1er2A jQDNYb174OhV6mUiKYu0/OrFjPrPblXO5585OAUelgO/FtDXsM1QF8Z1ImnanxHW 6atjGO3uMrSiBbkDkn1JExYTq41gDptveNe/OqQyhN3i6RCNUToJdtm6nhZXtiYy RedPv/KXAtEfmXRZLrJUlEDXMIK6MPi6xaZ+mtmWewROLUpZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkbdM8LPv8pRcBdYD74P1TMhRDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvNDA2NWY0M2YtZWUzNi0z ODI0LTg5MGItNDY5NmM4MjUzZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZuBKbqGMKVadG0FbU/6hSyWq9uIlPFGqENbeqXTFtdN/hA83JXt7/t 7IZEMKw+sxHAuU0VmjuNSzUKUatQ+M2tYNNMl+gzeBYRr1rmM6yorZIBZX7LaTuu /04R9IxkSgTqwT43iIll/yXMENF50ZARjrDeHCiC4GLJPypRC3DRtNVYT+iZ/BU1 ZbsfBMK6LJnPCrYxpSuJHZb4cbRE37vkwMMZy5O2qJVng49L9bGd+X034BtmsC8m kLnuNNjjlHq7TIVk0Nvd/vivFy1gwY0YKtNhLYm79wLCWvRLCYfH1nlAeswUl6es uExub68hNy3E6LcHWHhWqTk0jxQlf+M= -----END CERTIFICATE-----Generated at Wed Mar 26 14:40:09 2025 by rpki-client