$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/97945668-ba06-3f30-bb13-a4e33f779512.roa File: 97945668-ba06-3f30-bb13-a4e33f779512.roa (raw, json) Hash identifier: 5RQfTBuHVZxz0MDOhz9cFgbItNjFJaJfXVv0MQtDYCk= Subject key identifier: 34:1C:13:A1:0F:96:55:94:D4:1A:B4:7E:EE:3C:02:57:22:C2:1B:79 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F43285848ADC6035147C8ACE8D6070D00 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/97945668-ba06-3f30-bb13-a4e33f779512.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 397423 IP address blocks: 192.154.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:03:51:47:c8:ac:e8:d6:07:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=3e369a51-94dc-4d09-a10c-21445110af76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f2:00:7b:43:5c:f4:9e:db:ab:fd:bf:4d:15: 72:d4:48:13:66:2a:85:54:e7:64:42:c9:a4:e9:e4: 5a:0f:dd:b8:f9:2a:bb:df:90:42:e9:9b:06:0d:b9: 74:be:a2:51:29:93:de:30:c0:61:6d:a5:cd:bf:8d: 61:45:1f:c8:43:b6:76:b5:ba:ff:aa:19:ad:2c:9b: 9b:60:da:87:af:d1:dc:e6:a2:f5:61:ca:9a:ea:44: 74:81:ad:ac:26:9b:be:fd:c5:ce:40:f2:80:3d:a3: 23:8e:e0:08:a7:ff:65:22:63:a5:3f:73:16:c0:b1: 13:61:3f:02:b7:a9:a4:8a:13:ce:e0:76:f4:85:03: 53:d3:c8:2f:ee:f4:2c:98:d0:f8:b9:8c:e8:2a:ca: 43:bf:50:32:72:73:4f:71:db:5b:9d:6c:28:e0:72: 7b:32:87:a5:d4:00:4a:b0:79:c7:1d:0d:d6:52:85: 6a:43:a8:a7:3f:da:94:15:bb:9c:ec:2a:c7:55:63: 42:69:75:ca:60:c2:4d:ce:23:23:42:db:b5:ba:88: 80:00:10:81:b9:e7:52:e7:e9:4c:30:47:f4:1c:52: 08:99:92:21:53:79:0e:77:6c:c0:91:fc:d6:11:f9: 52:2d:46:81:ab:20:09:bc:43:ca:ac:44:84:35:c1: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1C:13:A1:0F:96:55:94:D4:1A:B4:7E:EE:3C:02:57:22:C2:1B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/97945668-ba06-3f30-bb13-a4e33f779512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.154.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:92:14:25:85:e3:94:d6:97:f8:3e:99:cc:4e:c0:9f:1d:17: 87:71:d0:4c:50:d3:83:52:7c:36:6d:b4:2a:59:e5:35:c0:17: d6:04:14:2d:64:4e:a8:2b:6a:58:2d:ac:ed:f3:0b:5d:25:00: cf:2f:40:ee:a9:2a:ea:19:19:7d:f8:bd:73:41:84:2c:bb:ae: eb:f4:79:fa:15:05:5c:c4:ea:dc:e0:47:05:00:a9:b0:64:ec: 0c:3b:f6:a8:bb:32:ff:25:9a:94:ab:c8:c3:bf:1c:0a:06:92: d3:4b:63:3b:69:46:fd:61:f5:60:92:05:62:b3:fd:60:3c:4f: d9:29:60:02:7f:aa:f1:a0:d2:18:8e:48:69:a1:df:ca:9a:93: ac:7f:e9:79:bf:a3:fe:f0:e7:b0:e8:04:dc:7d:27:49:a1:17: 38:8d:3a:e8:88:e6:d1:08:3b:49:e6:47:8c:e7:6c:f3:79:e9: 65:e8:06:f0:b6:81:18:f2:ce:77:39:7e:19:f3:c8:b3:ff:8c: 95:49:ee:b2:b5:56:87:c0:9f:a8:a2:da:b9:12:57:58:79:ef: c3:24:23:0e:ae:92:13:14:e4:b1:ea:ce:ea:17:f6:d4:58:6f: 14:9a:9c:f7:30:69:7e:56:2b:a2:e0:2a:58:f1:40:ba:20:fc: ef:79:02:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgNRR8is6NYHDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk M2UzNjlhNTEtOTRkYy00ZDA5LWExMGMtMjE0NDUxMTBhZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivIAe0Nc9J7bq/2/TRVy1EgTZiqFVOdkQsmk 6eRaD924+Sq735BC6ZsGDbl0vqJRKZPeMMBhbaXNv41hRR/IQ7Z2tbr/qhmtLJub YNqHr9Hc5qL1Ycqa6kR0ga2sJpu+/cXOQPKAPaMjjuAIp/9lImOlP3MWwLETYT8C t6mkihPO4Hb0hQNT08gv7vQsmND4uYzoKspDv1AycnNPcdtbnWwo4HJ7Moel1ABK sHnHHQ3WUoVqQ6inP9qUFbuc7CrHVWNCaXXKYMJNziMjQtu1uoiAABCBuedS5+lM MEf0HFIImZIhU3kOd2zAkfzWEflSLUaBqyAJvEPKrESENcG7MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQcE6EPllWU1Bq0fu48Alciwht5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvOTc5NDU2NjgtYmEwNi0z ZjMwLWJiMTMtYTRlMzNmNzc5NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABySFCWF45TWl/g+mcxOwJ8dF4dx0ExQ04NSfDZttCpZ5TXAF9YEFC1k TqgralgtrO3zC10lAM8vQO6pKuoZGX34vXNBhCy7ruv0efoVBVzE6tzgRwUAqbBk 7Aw79qi7Mv8lmpSryMO/HAoGktNLYztpRv1h9WCSBWKz/WA8T9kpYAJ/qvGg0hiO SGmh38qak6x/6Xm/o/7w57DoBNx9J0mhFziNOuiI5tEIO0nmR4znbPN56WXoBvC2 gRjyznc5fhnzyLP/jJVJ7rK1VofAn6ii2rkSV1h578MkIw6ukhMU5LHqzuoX9tRY bxSanPcwaX5WK6LgKljxQLog/O95Ak0= -----END CERTIFICATE-----Generated at Tue Apr 8 13:18:18 2025 by rpki-client