$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa File: 95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa (raw, json) Hash identifier: JMkD/Mj9wke4z6u9OKbyWlLqvvGOvB1mJEtEkEIBp/M= Subject key identifier: 60:08:84:AC:1F:5C:BF:80:7F:A6:C1:CC:98:7A:D6:76:E8:7A:04:88 Certificate issuer: /CN=d0677001-b062-4999-89f9-d882893f5a1c Certificate serial: 010D0C9F43285849849EEC1D412A97F400CABD80 Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 393607 IP address blocks: 192.152.158.0/24 maxlen: 24 198.169.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:ec:1d:41:2a:97:f4:00:ca:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=614ce3d3-c018-411e-9600-653a6cd8652f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:bc:cf:d0:48:57:32:96:a2:21:d9:e0:be: 23:a7:68:02:1c:09:3c:53:4e:e6:f6:c1:0c:3d:32: 74:89:d4:97:1f:ef:4c:db:1e:6a:70:f4:b7:c2:17: e5:73:8e:36:67:79:9d:e3:54:3f:b1:b1:fe:61:53: 70:f6:aa:a3:87:61:60:f2:4e:b4:93:e2:c4:22:c5: 14:53:ce:9b:79:84:b3:f5:08:3c:64:4a:b1:2b:41: c3:78:b9:b9:a9:6b:6d:f7:7c:ed:2d:3f:7a:a4:7c: fc:b2:6f:92:de:20:c3:7a:2f:55:05:79:f5:f4:80: cc:8a:1b:61:e1:dd:04:9d:79:a4:1a:39:aa:4e:4f: a8:5a:63:d0:dc:64:e9:7f:4a:a4:01:62:5e:e6:b3: a6:64:6b:82:1d:76:7c:36:8a:f3:a9:0b:76:17:73: 1e:9b:94:ba:13:9a:3c:5d:d4:85:31:e1:c7:f5:07: 21:76:36:46:e1:65:ae:c4:9f:e8:2f:5f:76:56:81: e8:b9:a2:e4:76:d5:6b:b5:36:3e:90:4f:31:95:f8: 1e:a4:ad:83:95:f7:30:4a:b3:33:e0:e1:4a:fe:39: 35:89:39:5d:19:41:f6:bc:15:8d:fe:4b:8f:13:50: af:fa:46:a8:08:6d:7c:39:06:b3:10:14:d4:37:d0: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:84:AC:1F:5C:BF:80:7F:A6:C1:CC:98:7A:D6:76:E8:7A:04:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl X509v3 Authority Key Identifier: keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer sbgp-ipAddrBlock: critical IPv4: 192.152.158.0/24 198.169.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bc:02:05:23:6a:54:da:1f:f0:a3:01:f9:68:be:38:a4:c1: 64:a0:5b:8e:65:4d:4e:5d:23:c5:1e:0e:fc:e7:3f:5d:ca:36: 85:f7:5a:3a:87:8d:63:fb:c1:ce:53:ea:48:8f:09:4a:9c:21: ac:53:02:81:fd:53:64:ec:43:ed:a7:eb:95:3b:c5:c1:7c:dd: 91:cd:7f:06:3d:cf:e5:78:de:c9:1a:ee:1a:cb:b3:b1:6c:97: 7b:e3:60:b1:b8:2e:e6:3b:57:b3:f2:8f:9d:f0:52:04:7e:f7: 66:72:c4:37:60:f8:72:51:6b:9a:08:33:f9:e4:10:97:dc:1e: 6d:27:43:fa:b3:6d:82:4e:c9:6b:7f:b8:4f:90:af:a4:15:f0: ec:97:8f:df:51:d7:e9:cd:0b:6d:c6:10:a3:e9:bf:2c:b5:bc: 15:94:9c:ae:d1:9e:8e:92:a0:94:8d:95:78:21:5c:1f:79:30: ca:d5:6f:db:ec:18:73:88:82:6c:e2:9c:ed:ab:24:3e:cb:df: 6b:e2:8f:b7:5e:df:e0:75:5b:5a:88:39:29:98:0e:e5:7c:8b: 9a:90:b9:36:fa:8c:6c:dc:be:91:f9:cf:c1:93:89:d2:20:a7: f7:01:5b:8c:e9:5c:44:4d:95:81:41:9a:0b:d1:f2:43:5c:c2: aa:bf:4e:ce -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmEnuwdQSqX9ADKvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2NzcwMDEtYjA2Mi00OTk5LTg5ZjktZDg4Mjg5M2Y1 YTFjMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk NjE0Y2UzZDMtYzAxOC00MTFlLTk2MDAtNjUzYTZjZDg2NTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkre8z9BIVzKWoiHZ4L4jp2gCHAk8U07m9sEM PTJ0idSXH+9M2x5qcPS3whflc442Z3md41Q/sbH+YVNw9qqjh2Fg8k60k+LEIsUU U86beYSz9Qg8ZEqxK0HDeLm5qWtt93ztLT96pHz8sm+S3iDDei9VBXn19IDMihth 4d0EnXmkGjmqTk+oWmPQ3GTpf0qkAWJe5rOmZGuCHXZ8NorzqQt2F3Mem5S6E5o8 XdSFMeHH9QchdjZG4WWuxJ/oL192VoHouaLkdtVrtTY+kE8xlfgepK2DlfcwSrMz 4OFK/jk1iTldGUH2vBWN/kuPE1Cv+kaoCG18OQazEBTUN9AAiwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGAIhKwfXL+Af6bBzJh61nboegSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMDY3 NzAwMS1iMDYyLTQ5OTktODlmOS1kODgyODkzZjVhMWMvOTUxMDYzMTYtYTBkMS0z ZGJmLThhYjItYzQ5OGM3MGY2YzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDA2NzcwMDEtYjA2Mi00OTk5LTg5 ZjktZDg4Mjg5M2Y1YTFjL2QwNjc3MDAxLWIwNjItNDk5OS04OWY5LWQ4ODI4OTNm NWExYy5jcmwwHwYDVR0jBBgwFoAULwDv5B+OOmyQRa+di2BLcNn0tSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMDY3NzAwMS1iMDYyLTQ5OTktODlmOS1kODgy ODkzZjVhMWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwJieAwQA xql+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJC8AgUjalTaH/CjAflovjikwWSgW45lTU5dI8UeDvznP13K NoX3WjqHjWP7wc5T6kiPCUqcIaxTAoH9U2TsQ+2n65U7xcF83ZHNfwY9z+V43ska 7hrLs7Fsl3vjYLG4LuY7V7Pyj53wUgR+92ZyxDdg+HJRa5oIM/nkEJfcHm0nQ/qz bYJOyWt/uE+Qr6QV8OyXj99R1+nNC23GEKPpvyy1vBWUnK7Rno6SoJSNlXghXB95 MMrVb9vsGHOIgmzinO2rJD7L32vij7de3+B1W1qIOSmYDuV8i5qQuTb6jGzcvpH5 z8GTidIgp/cBW4zpXERNlYFBmgvR8kNcwqq/Ts4= -----END CERTIFICATE-----Generated at Mon Apr 21 19:11:58 2025 by rpki-client