$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa File: 3f4559cd-55eb-3ee4-96a6-22d37db39638.roa (raw, json) Hash identifier: +mvQSUlURuH1YGHB07Noe5ZZNYylKH7VyOU8WGc/91M= Subject key identifier: F9:9D:8D:D1:57:E5:3D:A8:6A:82:7E:89:F9:7C:88:7F:62:7E:69:28 Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F43285848E00654A369F563814783B780 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 65068 IP address blocks: 192.139.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:54:a3:69:f5:63:81:47:83:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=015ed8cb-3d56-4f54-aa45-e10b040d3d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:36:b7:2b:bf:86:2b:66:e8:35:32:0a:41: 92:7d:ea:2e:b4:5f:4d:b4:16:20:8b:ef:be:be:f7: 0a:cf:0d:08:ee:cf:14:08:39:14:37:19:14:7a:00: 60:78:f8:15:62:40:af:5a:8b:b4:e5:b0:4e:e8:40: d1:90:48:02:9f:b3:ab:0d:d2:75:91:73:de:ec:7e: 33:7a:af:74:ea:d6:b8:6f:96:00:1d:ee:8c:8d:a5: 18:ab:3f:b2:7e:c5:50:a5:f3:fb:c6:73:0e:2e:ad: 7e:67:e2:ac:56:cf:47:b9:14:5b:8e:36:85:d0:df: c3:9d:51:f3:59:68:da:b4:0b:87:83:48:82:4c:9e: 91:71:15:1a:25:b1:e6:f9:2a:e9:a7:51:03:ee:76: 07:e9:fc:8e:6f:1e:9c:c6:0b:fd:58:3c:db:b5:45: 49:1e:1c:26:67:17:ab:4e:f4:6b:6f:d0:67:0a:f3: 16:62:91:6e:a8:fc:fc:d7:6c:d4:9f:0b:4c:a2:48: 0f:ef:06:74:ac:53:9e:31:86:93:bc:96:36:83:1e: f0:d0:61:52:de:a4:c0:e0:7b:52:eb:d0:ad:6b:08: 54:9d:7b:b0:99:3e:1d:c3:c9:00:d8:5f:a5:b0:e4: 40:21:fb:26:aa:94:38:2b:55:2e:0e:9e:99:29:53: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9D:8D:D1:57:E5:3D:A8:6A:82:7E:89:F9:7C:88:7F:62:7E:69:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: 192.139.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7e:2a:fc:ad:2d:d5:3d:f6:0b:47:30:50:0b:4c:04:6f:b6: 9a:5e:cc:fa:b2:3b:21:9d:ee:b6:d1:58:6d:ec:25:c7:3e:86: b9:8a:cc:61:a4:15:62:e4:5c:19:0e:75:ae:c9:ea:72:2e:54: 8b:97:24:7c:8c:17:66:7a:b6:ac:9f:82:82:d4:ed:2f:95:3c: 77:80:bf:4f:b7:22:fe:d1:bd:6b:47:eb:30:41:6f:f0:8b:9a: 51:41:a7:eb:fd:8d:be:09:03:5a:4d:27:96:1e:76:90:aa:30: f2:72:bf:aa:6a:d5:51:ae:23:37:49:d1:4e:cc:e0:c4:a4:68: 43:cc:ae:0c:e4:f8:2d:d3:bd:72:ee:e8:79:d4:5d:63:e5:90: ab:13:b1:a1:0b:8c:02:c3:b7:26:26:6f:a2:d2:09:9f:b5:fa: 67:f8:1f:fd:33:77:c1:b0:4a:d1:da:8e:d6:01:8a:10:91:41: 6a:b2:52:61:39:9e:bf:e7:7e:c1:36:c4:d6:e9:81:1a:74:53: 7c:6e:6d:71:fa:b0:0f:4e:16:16:23:b3:a8:eb:dd:f9:cd:fe: c9:ba:4c:03:ce:df:03:08:ae:5a:29:d8:66:85:e9:a0:d8:a4: 92:67:81:bc:92:66:16:a9:eb:cb:fe:c5:bb:c6:3e:a6:bd:5a: 19:e6:2a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlSjafVjgUeDt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MDE1ZWQ4Y2ItM2Q1Ni00ZjU0LWFhNDUtZTEwYjA0MGQzZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKk2tyu/hitm6DUyCkGSfeoutF9NtBYgi+++ vvcKzw0I7s8UCDkUNxkUegBgePgVYkCvWou05bBO6EDRkEgCn7OrDdJ1kXPe7H4z eq906ta4b5YAHe6MjaUYqz+yfsVQpfP7xnMOLq1+Z+KsVs9HuRRbjjaF0N/DnVHz WWjatAuHg0iCTJ6RcRUaJbHm+Srpp1ED7nYH6fyObx6cxgv9WDzbtUVJHhwmZxer TvRrb9BnCvMWYpFuqPz812zUnwtMokgP7wZ0rFOeMYaTvJY2gx7w0GFS3qTA4HtS 69CtawhUnXuwmT4dw8kA2F+lsORAIfsmqpQ4K1UuDp6ZKVOGmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmdjdFX5T2oaoJ+ifl8iH9ifmkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvM2Y0NTU5Y2QtNTVlYi0z ZWU0LTk2YTYtMjJkMzdkYjM5NjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ+KvytLdU99gtHMFALTARvtppezPqyOyGd7rbRWG3sJcc+hrmKzGGk FWLkXBkOda7J6nIuVIuXJHyMF2Z6tqyfgoLU7S+VPHeAv0+3Iv7RvWtH6zBBb/CL mlFBp+v9jb4JA1pNJ5YedpCqMPJyv6pq1VGuIzdJ0U7M4MSkaEPMrgzk+C3TvXLu 6HnUXWPlkKsTsaELjALDtyYmb6LSCZ+1+mf4H/0zd8GwStHajtYBihCRQWqyUmE5 nr/nfsE2xNbpgRp0U3xubXH6sA9OFhYjs6jr3fnN/sm6TAPO3wMIrlop2GaF6aDY pJJngbySZhap68v+xbvGPqa9WhnmKjM= -----END CERTIFICATE-----Generated at Sat Apr 12 12:36:26 2025 by rpki-client