$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa File: 52823a9b-61d5-38a1-8207-fbf196df3766.roa (raw, json) Hash identifier: tWGImf3sNfLmAynkZWZ/1SATWaizUMVViPmFyQ1tK5E= Subject key identifier: C1:F8:9F:10:25:F0:DA:1D:1C:83:0B:EB:13:F2:36:7B:C5:B2:68:5A Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F43285849512FAD322F2322DEB29D1800 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa Signing time: Wed 26 Mar 2025 14:50:22 +0000 ROA not before: Wed 26 Mar 2025 14:50:22 +0000 ROA not after: Tue 24 Jun 2025 14:50:22 +0000 asID: 21947 IP address blocks: 192.225.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:2f:ad:32:2f:23:22:de:b2:9d:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Mar 26 14:50:22 2025 GMT Not After : Jun 24 14:50:22 2025 GMT Subject: CN=dbfbaa4f-67a0-4962-9174-685fbc52b160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:69:af:77:fa:b2:3e:f9:f4:c3:e9:e2:6d: 0e:3a:16:4b:42:ca:ad:5e:30:d8:ea:13:fc:e1:80: 1d:f1:ba:7a:10:a2:52:d4:be:63:88:b9:f7:08:0b: 5b:49:ad:dd:4b:e0:5b:37:ff:8c:d6:f3:38:41:8b: c8:7e:c9:06:14:d6:cf:ab:8c:85:bf:66:61:29:e1: 5d:bd:43:97:ae:61:a8:8d:37:da:fb:06:35:b8:58: 9f:4a:d1:29:ef:e0:6d:2e:25:b6:f3:7b:2d:58:29: 9e:a6:c4:4c:a8:9f:fa:26:43:68:2f:5c:02:c3:aa: 63:82:fe:a0:1e:48:34:6f:2e:32:b7:1c:05:05:9f: d0:d3:f6:91:4f:40:d4:f7:47:f5:4c:b9:24:fd:07: 7c:52:dd:e9:cd:88:12:26:28:39:ad:dc:b2:a4:9a: b0:15:c8:d3:15:0c:33:fc:ab:db:2a:c4:70:d5:cf: 75:90:77:1d:74:dd:0d:68:b0:fd:05:c1:39:36:c2: 03:b4:ce:9a:61:8a:f8:a4:99:28:db:6a:a0:a8:c9: 57:bf:55:55:d2:bf:4a:67:c2:97:e3:3e:60:ef:9f: 05:e6:1d:73:95:ac:e8:cf:09:5d:80:d0:45:b5:3f: a9:22:46:db:b8:b3:9a:c0:17:dd:62:b4:18:86:e2: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F8:9F:10:25:F0:DA:1D:1C:83:0B:EB:13:F2:36:7B:C5:B2:68:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 192.225.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:99:39:81:8a:eb:8f:e2:0d:9a:0c:65:b4:53:c1:c6:67:66: 1f:93:91:1e:8e:1b:07:11:c9:d9:19:a8:30:3f:d6:2c:c7:41: bc:6c:3b:b0:81:16:65:0b:5b:5e:32:91:13:29:a7:d5:22:a3: cb:c6:05:d1:29:2a:02:86:18:4d:b3:0e:a8:2e:6e:3c:21:00: f0:d5:44:f0:64:8d:d5:b0:08:f5:40:04:06:5d:48:b8:3e:7e: 3d:d2:57:85:66:13:bf:b6:68:39:ee:35:b0:2e:41:d4:19:2f: 9b:51:d5:ad:bc:9f:0a:3f:b7:7d:6b:64:8b:7d:ff:46:6b:87: 6c:96:c8:a5:42:b1:13:75:17:62:c4:ef:12:6c:d1:13:9d:eb: de:b3:43:28:d9:f0:9b:7b:cd:30:c9:c7:4e:13:65:89:84:1a: e1:b4:3e:65:a2:f1:75:73:5e:72:36:ec:3d:10:25:f2:30:ef: c7:d5:5b:aa:73:6c:94:ee:24:e2:f0:0e:e2:51:c9:de:66:eb: 35:ea:d4:83:6b:2e:43:aa:60:01:9f:18:34:e0:19:b0:b3:8c: f5:be:77:5a:10:68:bf:b3:52:31:49:45:88:25:4b:30:51:8b: 3f:2d:67:98:ba:8b:31:e7:bd:6a:9d:0f:1d:06:31:f4:8a:08: d8:1c:c0:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRL60yLyMi3rKdGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDMyNjE0NTAyMloXDTI1MDYyNDE0NTAyMlowLzEtMCsGA1UEAxMk ZGJmYmFhNGYtNjdhMC00OTYyLTkxNzQtNjg1ZmJjNTJiMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQtpr3f6sj759MPp4m0OOhZLQsqtXjDY6hP8 4YAd8bp6EKJS1L5jiLn3CAtbSa3dS+BbN/+M1vM4QYvIfskGFNbPq4yFv2ZhKeFd vUOXrmGojTfa+wY1uFifStEp7+BtLiW283stWCmepsRMqJ/6JkNoL1wCw6pjgv6g Hkg0by4ytxwFBZ/Q0/aRT0DU90f1TLkk/Qd8Ut3pzYgSJig5rdyypJqwFcjTFQwz /KvbKsRw1c91kHcddN0NaLD9BcE5NsIDtM6aYYr4pJko22qgqMlXv1VV0r9KZ8KX 4z5g758F5h1zlazozwldgNBFtT+pIkbbuLOawBfdYrQYhuKsdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH4nxAl8NodHIML6xPyNnvFsmhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvNTI4MjNhOWItNjFkNS0z OGExLTgyMDctZmJmMTk2ZGYzNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwOGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiZOYGK64/iDZoMZbRTwcZnZh+TkR6OGwcRydkZqDA/1izHQbxsO7CB FmULW14ykRMpp9Uio8vGBdEpKgKGGE2zDqgubjwhAPDVRPBkjdWwCPVABAZdSLg+ fj3SV4VmE7+2aDnuNbAuQdQZL5tR1a28nwo/t31rZIt9/0Zrh2yWyKVCsRN1F2LE 7xJs0ROd696zQyjZ8Jt7zTDJx04TZYmEGuG0PmWi8XVzXnI27D0QJfIw78fVW6pz bJTuJOLwDuJRyd5m6zXq1INrLkOqYAGfGDTgGbCzjPW+d1oQaL+zUjFJRYglSzBR iz8tZ5i6izHnvWqdDx0GMfSKCNgcwOc= -----END CERTIFICATE-----Generated at Sat Apr 5 20:44:42 2025 by rpki-client