$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa File: 0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa (raw, json) Hash identifier: 0stfOafUSPUVbwyiiVCbwFSeCIWwEVmouKhrLkiWJUI= Subject key identifier: BC:BE:DD:57:42:FF:B2:6F:4E:4E:AD:06:F8:E8:91:EC:0A:6F:75:A9 Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F43285848E006548E4912BB363B52A300 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 26677 IP address blocks: 192.139.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:54:8e:49:12:bb:36:3b:52:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=619d577d-8b4b-4530-b5ee-200f36272f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:ff:b7:14:08:8e:40:e9:a7:01:86:66:26: e5:78:d6:f9:16:9c:c7:8e:f4:32:be:b0:98:0d:5f: fb:ff:3d:b0:f3:4a:e9:f1:de:34:79:9b:a3:88:e8: bb:84:b1:df:37:da:bd:b1:ef:ee:1a:11:cd:5b:8b: 6e:49:5d:6f:d0:87:b0:ee:66:9c:0d:08:f2:d8:38: fe:f7:d6:8a:99:ef:a5:e0:f7:cb:ab:83:55:2a:34: 94:d4:52:4e:a2:91:04:a9:b4:16:50:a5:d2:be:74: 94:41:48:b9:7a:71:1b:06:19:c5:36:4b:01:da:4a: c1:6e:3a:cb:6c:0d:98:a1:be:cd:83:50:b5:08:7a: ec:5b:c0:03:af:d1:e9:05:2c:d3:0b:ac:e8:b5:f3: 2b:5f:6c:f5:4e:5a:cd:22:3e:81:40:30:ed:da:a9: 39:1c:7f:6d:40:fc:17:cd:26:43:36:9f:37:65:c6: eb:b1:80:b7:0c:d1:71:32:b9:f3:93:eb:a8:a5:fe: 2b:78:51:b7:e8:6d:7a:57:80:71:86:0f:2c:b6:10: 97:47:33:98:c3:87:f6:c0:5e:ad:b3:56:fb:80:96: d9:dd:43:8e:e1:f4:93:38:c0:3f:e7:d8:8c:f7:2c: 66:e1:58:8d:cc:e3:b0:7e:3e:cc:58:dc:ee:cf:69: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BE:DD:57:42:FF:B2:6F:4E:4E:AD:06:F8:E8:91:EC:0A:6F:75:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: 192.139.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f2:76:59:72:0a:26:8d:1d:29:30:47:77:4d:ef:f2:f3:d7: 90:4b:5a:a6:ba:a4:99:8f:3e:a9:67:a3:41:c4:6c:b7:40:04: fc:3d:da:98:ec:fa:62:b0:21:86:54:0f:0c:80:99:8e:5f:83: 35:a5:b1:e6:28:ef:65:9c:2f:f0:e5:5d:f5:22:31:11:6c:c5: e5:a1:97:07:4c:3c:e0:c6:84:9b:4c:bb:29:e0:4a:2d:7c:8c: a8:08:14:40:5a:22:bc:c6:b6:aa:65:79:95:de:46:bf:17:fa: 8a:51:56:f9:a3:ca:76:25:c5:20:d1:c0:c7:3f:5f:4c:71:f3: 08:05:9b:a5:0b:35:d8:c1:05:8d:52:d9:1f:f6:9d:4a:52:df: fb:e9:5e:db:c7:bf:c2:51:56:48:74:ae:59:85:44:92:15:27: af:0e:6b:96:49:88:c5:70:79:8c:42:a7:f4:00:c5:88:d6:fd: b0:5b:02:4a:04:38:24:fc:52:53:14:90:e1:19:71:0b:59:a5: bb:ea:50:5d:f3:05:df:0e:70:85:17:f8:4e:10:20:f8:6e:91: d6:aa:4a:bc:4f:c1:0c:22:46:ba:8b:ad:f5:4c:63:0d:dc:6c: 39:b5:41:f3:6b:f6:7b:0e:4d:fc:ca:f9:11:c6:82:4a:b8:17: 05:55:6c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlSOSRK7NjtSowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NjE5ZDU3N2QtOGI0Yi00NTMwLWI1ZWUtMjAwZjM2MjcyZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUb/txQIjkDppwGGZibleNb5FpzHjvQyvrCY DV/7/z2w80rp8d40eZujiOi7hLHfN9q9se/uGhHNW4tuSV1v0Iew7macDQjy2Dj+ 99aKme+l4PfLq4NVKjSU1FJOopEEqbQWUKXSvnSUQUi5enEbBhnFNksB2krBbjrL bA2Yob7Ng1C1CHrsW8ADr9HpBSzTC6zotfMrX2z1TlrNIj6BQDDt2qk5HH9tQPwX zSZDNp83ZcbrsYC3DNFxMrnzk+uopf4reFG36G16V4Bxhg8sthCXRzOYw4f2wF6t s1b7gJbZ3UOO4fSTOMA/59iM9yxm4ViNzOOwfj7MWNzuz2nKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy+3VdC/7JvTk6tBvjokewKb3WpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvMGY4NmFmOGYtMzEyMi0z NGRmLWFlN2UtMDQ4MTFkOGM4YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDydllyCiaNHSkwR3dN7/Lz15BLWqa6pJmPPqlno0HEbLdABPw92pjs +mKwIYZUDwyAmY5fgzWlseYo72WcL/DlXfUiMRFsxeWhlwdMPODGhJtMuyngSi18 jKgIFEBaIrzGtqpleZXeRr8X+opRVvmjynYlxSDRwMc/X0xx8wgFm6ULNdjBBY1S 2R/2nUpS3/vpXtvHv8JRVkh0rlmFRJIVJ68Oa5ZJiMVweYxCp/QAxYjW/bBbAkoE OCT8UlMUkOEZcQtZpbvqUF3zBd8OcIUX+E4QIPhukdaqSrxPwQwiRrqLrfVMYw3c bDm1QfNr9nsOTfzK+RHGgkq4FwVVbDg= -----END CERTIFICATE-----Generated at Sat Apr 12 14:50:37 2025 by rpki-client