$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa File: 63ffc474-e1ec-3542-81e6-1632f95c2321.roa (raw, json) Hash identifier: xUFyPBLZzvD1p3Ay6qUPrfAI8lSrndRtveRE2MCq6ek= Subject key identifier: 76:AE:92:71:3A:ED:10:6E:24:53:E3:9C:FC:43:82:F8:FC:8C:77:04 Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Certificate serial: 010D0C9F432858490B4C198624903E743E2C9E00 Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 198949 IP address blocks: 192.170.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:19:86:24:90:3e:74:3e:2c:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=9e6688bb-3bba-4532-9c0b-1fe4e1d58faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1f:af:63:ae:80:de:2b:63:63:27:e0:36:70: af:dc:e5:f6:28:61:a5:84:1c:c3:ca:40:5d:48:e1: b3:fd:b1:29:73:85:7b:03:3d:66:8c:73:6f:0e:86: 0a:b9:a6:7f:61:7d:f7:98:e8:aa:ac:40:fc:78:79: d9:f0:34:d1:a3:3c:73:8c:ca:26:60:c7:7a:9d:1f: a4:41:6d:84:f1:81:c0:f0:27:d4:95:e3:95:e8:57: 29:cc:49:3c:3e:da:b9:68:24:9f:66:0c:d7:cd:89: 4a:3d:e7:f0:17:14:a2:7c:72:f4:8e:4a:b5:13:7c: 98:19:60:03:b5:fc:6a:30:5d:aa:06:f9:fb:5e:f5: c0:80:4a:19:23:df:ae:bd:fb:56:f4:e8:7d:45:92: 92:63:8d:fd:2d:25:23:b7:bf:d6:ec:8b:ec:b1:a3: 39:49:e2:3c:cd:9f:94:ac:e1:cc:38:43:02:e7:b6: d8:1a:93:82:76:24:d6:16:54:8e:ae:c9:37:51:25: 0f:40:8f:fb:f7:2d:93:3b:4d:e0:a9:a4:45:f6:23: ae:bf:55:74:f0:d7:e4:33:d1:45:6d:1b:f3:a2:4f: 02:ef:de:6c:63:ed:18:68:fd:b7:ab:64:73:2d:4f: ad:30:57:ab:5b:cf:d0:81:e3:47:c9:64:30:9d:fc: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AE:92:71:3A:ED:10:6E:24:53:E3:9C:FC:43:82:F8:FC:8C:77:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl X509v3 Authority Key Identifier: keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer sbgp-ipAddrBlock: critical IPv4: 192.170.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:61:76:9d:a1:d3:da:97:6a:5e:02:51:72:03:f0:53:af:bd: 2d:85:9d:b1:a6:a4:22:af:32:48:1c:70:a5:7b:e8:66:c0:b8: 39:2d:44:b3:93:e1:75:85:96:bd:30:c0:90:15:e9:2e:23:c1: 78:7c:89:6f:4e:45:2e:2a:80:ac:a6:5b:cf:5d:e5:a8:31:04: 40:8c:7f:33:9b:f1:e0:0f:ec:16:36:1b:89:8d:dd:05:dc:d2: ce:b1:ef:ea:84:53:fb:cb:c5:0f:4f:c3:d5:c7:52:d5:20:b2: 09:b8:0b:45:22:8d:7b:a6:ff:d8:88:72:01:76:07:00:e9:0d: 65:91:5b:ae:17:99:8e:9a:a4:b9:a4:1b:b8:98:ea:74:d7:05: 59:f9:87:92:06:48:e3:a6:ad:6c:90:e7:a0:fb:f6:9c:ff:ca: ad:38:65:68:da:80:0d:29:a2:de:a5:b0:f0:e7:ad:46:d5:03: 9e:a3:ff:d9:ee:39:09:1a:3e:ab:4a:61:4e:82:3a:35:43:af: 85:6f:db:1f:6a:fc:d3:4f:46:8a:bf:38:b5:2e:b0:aa:0c:9e: 93:ab:3d:23:08:51:50:8d:26:3b:d9:ae:13:51:5a:51:d4:97: 15:79:c6:92:7a:e5:d2:49:29:87:af:d5:f7:25:a2:88:ef:f9: 5c:26:a8:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBmGJJA+dD4sngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi MzMzMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk OWU2Njg4YmItM2JiYS00NTMyLTljMGItMWZlNGUxZDU4ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx+vY66A3itjYyfgNnCv3OX2KGGlhBzDykBd SOGz/bEpc4V7Az1mjHNvDoYKuaZ/YX33mOiqrED8eHnZ8DTRozxzjMomYMd6nR+k QW2E8YHA8CfUleOV6FcpzEk8Ptq5aCSfZgzXzYlKPefwFxSifHL0jkq1E3yYGWAD tfxqMF2qBvn7XvXAgEoZI9+uvftW9Oh9RZKSY439LSUjt7/W7IvssaM5SeI8zZ+U rOHMOEMC57bYGpOCdiTWFlSOrsk3USUPQI/79y2TO03gqaRF9iOuv1V08NfkM9FF bRvzok8C795sY+0YaP23q2RzLU+tMFerW8/QgeNHyWQwnfxj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHauknE67RBuJFPjnPxDgvj8jHcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvNjNmZmM0NzQtZTFlYy0z NTQyLTgxZTYtMTYzMmY5NWMyMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZhdp2h09qXal4CUXID8FOvvS2FnbGmpCKvMkgccKV76GbAuDktRLOT 4XWFlr0wwJAV6S4jwXh8iW9ORS4qgKymW89d5agxBECMfzOb8eAP7BY2G4mN3QXc 0s6x7+qEU/vLxQ9Pw9XHUtUgsgm4C0UijXum/9iIcgF2BwDpDWWRW64XmY6apLmk G7iY6nTXBVn5h5IGSOOmrWyQ56D79pz/yq04ZWjagA0pot6lsPDnrUbVA56j/9nu OQkaPqtKYU6COjVDr4Vv2x9q/NNPRoq/OLUusKoMnpOrPSMIUVCNJjvZrhNRWlHU lxV5xpJ65dJJKYev1fcloojv+VwmqO8= -----END CERTIFICATE-----Generated at Fri Apr 11 22:29:35 2025 by rpki-client