$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/eead665b-9bd7-34de-8717-5a7bef6c1423.roa File: eead665b-9bd7-34de-8717-5a7bef6c1423.roa (raw, json) Hash identifier: Y+JSwDHz5wOhxdRO+wazsEUhemyS+10c6rybr7t18XY= Subject key identifier: 78:0D:0E:44:5C:BC:BB:1A:EA:67:D8:88:9D:38:27:2B:F6:4D:F0:A1 Certificate issuer: /CN=0342da0b-b5cd-422c-807b-e1b95cb877e0 Certificate serial: 010D0C9F43285848FDED64735731C41A94AF6F00 Authority key identifier: E2:36:8F:48:28:27:43:1C:4A:9A:85:75:69:47:CF:96:1D:11:F1:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/eead665b-9bd7-34de-8717-5a7bef6c1423.roa Signing time: Mon 24 Feb 2025 19:04:43 +0000 ROA not before: Mon 24 Feb 2025 19:04:43 +0000 ROA not after: Sun 25 May 2025 18:04:43 +0000 asID: 812 IP address blocks: 192.206.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:ed:64:73:57:31:c4:1a:94:af:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0342da0b-b5cd-422c-807b-e1b95cb877e0 Validity Not Before: Feb 24 19:04:43 2025 GMT Not After : May 25 18:04:43 2025 GMT Subject: CN=7e602dfd-4053-4287-8852-2eaba7ee8e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:89:31:4d:57:6a:b0:82:9c:55:32:a0:95: 62:5c:68:17:2a:01:93:b2:e4:68:60:a7:7d:83:68: 1d:87:e4:6f:47:0b:ad:6e:1e:4c:8e:2f:ae:52:bd: 01:18:92:85:36:41:f5:7f:93:d1:a5:06:cc:d7:7d: 1e:50:c1:a1:21:54:67:79:77:20:61:c3:48:38:53: 05:37:9c:a8:83:2e:68:9a:db:58:57:18:16:8d:ee: b8:8e:7c:b3:be:47:b8:1c:af:3a:c9:c1:73:10:ee: 03:6a:d2:42:ce:ef:f3:33:b7:4f:f6:54:af:b3:41: 8f:32:1c:2a:96:ea:c8:9c:70:ba:e6:3c:00:c3:87: c4:ee:02:a8:9d:2d:50:b5:3f:68:ce:0d:9e:54:54: 27:de:27:60:54:08:66:f1:bc:57:4d:8c:d5:73:e0: b2:35:5b:be:c4:11:1f:7d:f4:01:de:5f:95:f8:81: ee:4a:b2:e7:9a:94:a8:bc:8d:45:2e:21:03:3c:ec: 71:b9:a5:56:26:91:1d:a0:26:a9:65:32:15:2b:c9: cc:a3:cf:62:95:eb:1c:5e:e9:76:23:03:30:5f:80: 4f:f3:d6:85:97:ce:d7:ab:23:fb:2b:9e:64:59:49: 08:4f:e5:03:c2:8d:6b:e8:41:6d:9f:47:11:5b:8f: 89:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0D:0E:44:5C:BC:BB:1A:EA:67:D8:88:9D:38:27:2B:F6:4D:F0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/eead665b-9bd7-34de-8717-5a7bef6c1423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.crl X509v3 Authority Key Identifier: keyid:E2:36:8F:48:28:27:43:1C:4A:9A:85:75:69:47:CF:96:1D:11:F1:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer sbgp-ipAddrBlock: critical IPv4: 192.206.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6b:d1:f0:52:5f:dd:fa:e3:9d:9b:ce:11:4c:17:01:43:52: df:65:9c:47:a0:44:70:64:c4:4a:c4:23:48:b3:9e:57:2e:f5: 0a:7c:a0:94:b6:88:c1:50:53:51:79:72:aa:19:bc:14:14:f9: e1:76:50:71:2f:f2:13:94:83:16:8a:a2:9a:db:34:9e:b2:f0: d7:b5:64:a0:40:02:6c:f2:f3:a3:b8:f1:f6:68:dc:2f:18:8a: d6:72:a0:8a:03:04:1a:0c:50:2d:cc:80:c7:c8:37:10:fb:da: 0a:ed:c0:5d:2c:c1:56:83:65:7e:37:d2:17:dd:7e:5f:9f:c9: fa:8a:49:c7:59:a3:86:35:aa:d5:97:9b:ef:a7:1f:b6:95:88: 34:60:26:79:aa:5e:14:d3:98:ba:ee:de:30:6b:ae:6d:a4:a7: 09:43:ed:bd:cb:17:d5:3f:4f:64:cc:88:5a:a6:c5:3e:48:d2: 6e:78:08:2f:da:d1:f1:8b:1e:e5:9b:c8:b4:41:73:8c:47:ab: 5b:f2:f0:4d:db:ad:30:51:61:3f:d2:5b:5f:dc:9a:96:aa:44: f5:cd:1e:f4:f4:e9:c5:d5:32:ae:99:fb:dc:08:1c:e3:1e:4e: 84:ba:8d:f0:df:1d:e3:c1:83:98:3f:8c:c1:86:b5:2e:4a:e2: fd:10:54:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj97WRzVzHEGpSvbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM0MmRhMGItYjVjZC00MjJjLTgwN2ItZTFiOTVjYjg3 N2UwMB4XDTI1MDIyNDE5MDQ0M1oXDTI1MDUyNTE4MDQ0M1owLzEtMCsGA1UEAxMk N2U2MDJkZmQtNDA1My00Mjg3LTg4NTItMmVhYmE3ZWU4ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbSJMU1XarCCnFUyoJViXGgXKgGTsuRoYKd9 g2gdh+RvRwutbh5Mji+uUr0BGJKFNkH1f5PRpQbM130eUMGhIVRneXcgYcNIOFMF N5yogy5omttYVxgWje64jnyzvke4HK86ycFzEO4DatJCzu/zM7dP9lSvs0GPMhwq lurInHC65jwAw4fE7gKonS1QtT9ozg2eVFQn3idgVAhm8bxXTYzVc+CyNVu+xBEf ffQB3l+V+IHuSrLnmpSovI1FLiEDPOxxuaVWJpEdoCapZTIVK8nMo89ilescXul2 IwMwX4BP89aFl87XqyP7K55kWUkIT+UDwo1r6EFtn0cRW4+JMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgNDkRcvLsa6mfYiJ04Jyv2TfChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMzQy ZGEwYi1iNWNkLTQyMmMtODA3Yi1lMWI5NWNiODc3ZTAvZWVhZDY2NWItOWJkNy0z NGRlLTg3MTctNWE3YmVmNmMxNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDM0MmRhMGItYjVjZC00MjJjLTgw N2ItZTFiOTVjYjg3N2UwLzAzNDJkYTBiLWI1Y2QtNDIyYy04MDdiLWUxYjk1Y2I4 NzdlMC5jcmwwHwYDVR0jBBgwFoAU4jaPSCgnQxxKmoV1aUfPlh0R8ecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMzQyZGEwYi1iNWNkLTQyMmMtODA3Yi1lMWI5 NWNiODc3ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExr0fBSX936452bzhFMFwFDUt9lnEegRHBkxErEI0iznlcu9Qp8oJS2 iMFQU1F5cqoZvBQU+eF2UHEv8hOUgxaKoprbNJ6y8Ne1ZKBAAmzy86O48fZo3C8Y itZyoIoDBBoMUC3MgMfINxD72grtwF0swVaDZX430hfdfl+fyfqKScdZo4Y1qtWX m++nH7aViDRgJnmqXhTTmLru3jBrrm2kpwlD7b3LF9U/T2TMiFqmxT5I0m54CC/a 0fGLHuWbyLRBc4xHq1vy8E3brTBRYT/SW1/cmpaqRPXNHvT06cXVMq6Z+9wIHOMe ToS6jfDfHePBg5g/jMGGtS5K4v0QVFY= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:18 2025 by rpki-client