$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa File: 889605e8-b381-38e4-9042-117f16829cdc.roa (raw, json) Hash identifier: xdtz1rAwT1RXAKjmZD9b8HuZaUid4QGgr19WOPtjP4A= Subject key identifier: 63:2B:83:8E:0C:49:83:EC:05:BA:07:FD:68:DB:1B:F1:B4:6C:A8:EB Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F43285848E9CBE0F695D8E75E40869B00 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 55095 IP address blocks: 192.173.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e0:f6:95:d8:e7:5e:40:86:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=aad0a9f5-2e87-47b5-bffc-55a32a3e24f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:04:93:75:16:82:f7:92:82:f9:de:bf:e8: 89:7d:8b:c0:45:08:9f:b7:49:de:1e:84:3b:9c:28: 70:b8:0a:09:ec:3f:cd:2c:ae:0b:f9:fd:8f:45:5e: a1:26:b1:1b:6d:dc:cc:ef:ed:25:d4:47:16:c6:bf: ce:3d:ab:49:c0:3a:4a:65:d0:8b:80:89:43:52:7b: 77:72:98:76:4d:32:4f:c5:58:19:7b:b2:38:fa:26: dd:24:61:50:3f:2a:90:ae:e7:fe:45:63:cf:20:3c: e6:15:45:26:b2:46:8f:6b:90:8c:2a:ef:a4:c4:58: 95:ad:3a:08:d5:fd:70:1c:6e:54:24:57:5f:4c:81: 4d:76:ae:e1:20:4e:f6:b2:cf:bc:3e:d8:6c:85:b2: 5f:61:b7:1b:59:a9:08:cd:03:06:e1:ad:33:29:c0: 59:4c:4f:c7:8c:2c:fb:29:fb:13:2c:4e:8c:6e:df: 04:40:a5:c8:f2:43:46:60:77:82:3d:e7:24:3b:32: fb:57:6c:55:16:ca:a2:54:cf:d2:4e:ed:54:62:79: 38:a0:6c:ac:b6:c1:c2:e0:29:b4:79:e0:e8:2c:9a: d0:c0:1e:91:a4:2f:ee:a3:58:6a:00:59:98:b7:ea: 9e:1d:20:f8:d5:cc:0f:f4:15:dd:47:59:1b:b1:e8: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:83:8E:0C:49:83:EC:05:BA:07:FD:68:DB:1B:F1:B4:6C:A8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 192.173.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2a:69:1b:a1:fe:91:2d:9b:43:a2:77:9b:62:f9:3f:cd:0e: 35:c9:d4:ef:6e:86:6e:79:37:8f:bb:c4:6d:c0:e1:71:6c:01: f8:51:91:fd:dd:22:a0:35:63:da:b0:09:2f:1a:b2:46:e5:3d: 93:62:3a:bb:c7:30:4d:ce:a5:81:3c:e9:21:ea:7d:af:0b:d6: a8:59:2b:40:5c:83:7b:3e:65:71:64:e0:2a:0c:b7:08:33:94: 8b:d2:3c:f6:09:c3:ab:4c:22:c8:8f:de:c9:a4:58:5f:3c:c0: 4b:04:b3:07:d0:56:46:dc:90:db:ad:57:a1:2b:45:24:90:39: 0f:f1:a4:5d:86:29:2a:ac:ec:2a:69:4c:4d:46:0a:74:99:4f: d3:81:9a:a9:f8:6a:4c:1e:33:b8:d9:0b:0b:83:ce:fc:77:ed: e8:d2:8c:cb:d3:3b:f6:e3:bd:48:d3:76:57:a1:db:74:ca:c6: fa:b1:a0:fc:87:22:65:be:d2:42:50:ed:eb:55:19:d5:6d:45: 70:11:b1:14:31:19:a6:d0:37:22:0f:65:96:9b:75:67:e1:84: f9:45:bc:2f:1e:7c:0e:36:ed:96:6b:30:42:2d:7e:ac:b3:08: c4:08:10:8c:c5:33:4a:84:20:9f:52:24:23:ba:9e:e9:c0:35: f6:ea:2b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+D2ldjnXkCGmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk YWFkMGE5ZjUtMmU4Ny00N2I1LWJmZmMtNTVhMzJhM2UyNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8IEk3UWgveSgvnev+iJfYvARQift0neHoQ7 nChwuAoJ7D/NLK4L+f2PRV6hJrEbbdzM7+0l1EcWxr/OPatJwDpKZdCLgIlDUnt3 cph2TTJPxVgZe7I4+ibdJGFQPyqQruf+RWPPIDzmFUUmskaPa5CMKu+kxFiVrToI 1f1wHG5UJFdfTIFNdq7hIE72ss+8PthshbJfYbcbWakIzQMG4a0zKcBZTE/HjCz7 KfsTLE6Mbt8EQKXI8kNGYHeCPeckOzL7V2xVFsqiVM/STu1UYnk4oGystsHC4Cm0 eeDoLJrQwB6RpC/uo1hqAFmYt+qeHSD41cwP9BXdR1kbsegC4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMrg44MSYPsBboH/WjbG/G0bKjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvODg5NjA1ZTgtYjM4MS0z OGU0LTkwNDItMTE3ZjE2ODI5Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwK1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIqaRuh/pEtm0Oid5ti+T/NDjXJ1O9uhm55N4+7xG3A4XFsAfhRkf3d IqA1Y9qwCS8askblPZNiOrvHME3OpYE86SHqfa8L1qhZK0Bcg3s+ZXFk4CoMtwgz lIvSPPYJw6tMIsiP3smkWF88wEsEswfQVkbckNutV6ErRSSQOQ/xpF2GKSqs7Cpp TE1GCnSZT9OBmqn4akweM7jZCwuDzvx37ejSjMvTO/bjvUjTdleh23TKxvqxoPyH ImW+0kJQ7etVGdVtRXARsRQxGabQNyIPZZabdWfhhPlFvC8efA427ZZrMEItfqyz CMQIEIzFM0qEIJ9SJCO6nunANfbqK/c= -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:05 2025 by rpki-client