$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa File: d6a3954a-281e-3441-b4f0-d432435afda3.roa (raw, json) Hash identifier: Coua7ZLFH3eskO72KVhXTGx5wX5mMvCZVN6U/EqB32E= Subject key identifier: 65:0F:C3:B2:29:17:01:73:02:05:CA:37:20:EC:59:DF:F9:6B:88:72 Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Certificate serial: 010D0C9F43285848AF2B78B9AC034117EABE6980 Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 31898 IP address blocks: 192.35.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:78:b9:ac:03:41:17:ea:be:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=aad67ab7-3e6b-4d3c-bce6-d156e66bc483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:61:bd:e2:67:96:81:f0:bf:63:81:e6:ee: 4e:01:b6:c1:31:03:6d:08:7b:f4:01:b6:7e:4d:80: da:a9:58:ed:d3:2b:11:2c:2e:8f:65:c8:96:4e:08: 8c:bf:47:a3:1c:48:51:57:e2:10:56:63:1f:5e:32: 64:b1:40:51:0e:50:86:91:17:89:11:96:b1:be:6a: c0:90:a3:6f:16:5a:36:43:5f:0c:ad:cf:ea:ff:d7: 91:d9:cb:7e:b7:a2:91:05:73:58:ec:b4:64:8b:40: 1b:85:70:6f:7f:81:8e:a5:21:55:2d:67:dc:af:38: 80:64:4c:77:59:f0:f7:f0:db:04:7f:e1:17:53:90: b5:c9:17:57:a1:4d:49:2e:64:78:66:d0:ae:55:10: 1d:24:81:fb:7a:8a:37:f1:f1:c5:cd:95:99:51:a9: 03:bf:4a:a1:f5:95:49:d9:6a:77:39:7e:21:7b:13: ae:25:32:b1:de:a9:64:1c:99:e1:66:f1:77:10:58: 72:d0:04:82:a4:e6:9d:b9:6d:6a:2b:aa:11:c3:5d: 19:15:58:9c:fb:06:c2:af:df:2b:86:28:81:c6:67: e6:c5:69:9c:99:57:dc:9c:67:6c:f1:32:f8:91:58: 6d:69:ce:8a:1f:68:11:dd:b9:70:7a:0f:9c:91:f4: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:C3:B2:29:17:01:73:02:05:CA:37:20:EC:59:DF:F9:6B:88:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl X509v3 Authority Key Identifier: keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer sbgp-ipAddrBlock: critical IPv4: 192.35.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c8:37:a3:0d:f6:a9:df:a8:60:dc:84:41:b5:99:b5:45:20: 7c:b7:21:2b:af:c5:7d:70:ae:af:5c:92:d4:01:1c:2b:e7:01: 61:5d:31:9d:57:09:c8:6e:39:b0:f6:02:d2:8c:e4:63:6e:dd: a9:58:4e:f4:33:1e:ed:f7:c5:15:e5:6d:61:37:36:89:fc:16: 2a:a6:06:33:79:35:8e:b5:44:73:33:99:c0:41:a7:58:e9:c6: 59:ca:60:5c:f8:84:9c:99:1a:67:bb:eb:c7:c0:e8:2f:99:36: 0d:99:80:80:2a:b2:2e:68:04:01:a9:f6:06:d5:de:d4:57:74: 8a:d9:fc:12:f5:3c:39:7d:b6:29:43:a7:e2:c6:90:68:09:58: 0e:51:04:a7:d4:67:24:6e:62:72:b8:b4:58:cf:18:6e:ac:da: a4:92:41:07:72:e3:0e:12:9a:ea:23:e0:8f:58:3c:17:a3:af: a2:f8:15:47:1c:b9:a8:06:d0:ad:11:e9:06:c7:7f:9b:2a:de: 3c:1d:b5:87:e2:e7:a6:67:b1:33:bc:81:5f:ea:f2:b0:25:54: ce:91:e3:f0:8a:ba:cf:33:cb:5b:ba:d4:79:5f:e5:12:5a:a1: fe:a5:e1:c8:0e:bf:29:34:db:84:de:9b:44:63:f8:be:14:42: ce:0c:8c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3i5rANBF+q+aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4MTM2ZjAtM2VmYy00ZGZiLWEzZmUtNTk2ZDlhOGRm MDFhMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YWFkNjdhYjctM2U2Yi00ZDNjLWJjZTYtZDE1NmU2NmJjNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUZhveJnloHwv2OB5u5OAbbBMQNtCHv0AbZ+ TYDaqVjt0ysRLC6PZciWTgiMv0ejHEhRV+IQVmMfXjJksUBRDlCGkReJEZaxvmrA kKNvFlo2Q18Mrc/q/9eR2ct+t6KRBXNY7LRki0AbhXBvf4GOpSFVLWfcrziAZEx3 WfD38NsEf+EXU5C1yRdXoU1JLmR4ZtCuVRAdJIH7eoo38fHFzZWZUakDv0qh9ZVJ 2Wp3OX4hexOuJTKx3qlkHJnhZvF3EFhy0ASCpOaduW1qK6oRw10ZFVic+wbCr98r hiiBxmfmxWmcmVfcnGds8TL4kVhtac6KH2gR3blweg+ckfQmuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUPw7IpFwFzAgXKNyDsWd/5a4hyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTgx MzZmMC0zZWZjLTRkZmItYTNmZS01OTZkOWE4ZGYwMWEvZDZhMzk1NGEtMjgxZS0z NDQxLWI0ZjAtZDQzMjQzNWFmZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk4MTM2ZjAtM2VmYy00ZGZiLWEz ZmUtNTk2ZDlhOGRmMDFhL2M5ODEzNmYwLTNlZmMtNGRmYi1hM2ZlLTU5NmQ5YThk ZjAxYS5jcmwwHwYDVR0jBBgwFoAU+aZ1AijUOo0zRp4cvJUONtc7Pn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTgxMzZmMC0zZWZjLTRkZmItYTNmZS01OTZk OWE4ZGYwMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETIN6MN9qnfqGDchEG1mbVFIHy3ISuvxX1wrq9cktQBHCvnAWFdMZ1X CchuObD2AtKM5GNu3alYTvQzHu33xRXlbWE3Non8FiqmBjN5NY61RHMzmcBBp1jp xlnKYFz4hJyZGme768fA6C+ZNg2ZgIAqsi5oBAGp9gbV3tRXdIrZ/BL1PDl9tilD p+LGkGgJWA5RBKfUZyRuYnK4tFjPGG6s2qSSQQdy4w4Smuoj4I9YPBejr6L4FUcc uagG0K0R6QbHf5sq3jwdtYfi56ZnsTO8gV/q8rAlVM6R4/CKus8zy1u61Hlf5RJa of6l4cgOvyk024Tem0Rj+L4UQs4MjLQ= -----END CERTIFICATE-----Generated at Sun Apr 6 00:02:29 2025 by rpki-client