$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa File: 19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa (raw, json) Hash identifier: evdmYLNRHwsNt6b3y1of5q81CDqQ/0VQ+b8tXnblwWc= Subject key identifier: C9:0D:FE:83:4B:82:35:F9:33:D2:72:B5:28:18:8D:B4:D4:B8:AE:47 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F43285848DA70FF41250592ECBC0B6F80 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 5645 IP address blocks: 192.252.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:ff:41:25:05:92:ec:bc:0b:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=86ec9e05-0562-4263-89bf-3655d7e37022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:3a:b9:ab:df:44:be:72:07:31:00:e8:b6: ed:36:c0:9c:0a:b1:29:d9:26:7e:a0:7d:8e:19:fc: 3f:5d:45:60:3d:d1:a6:2b:41:35:0b:48:0f:de:f5: 1a:bc:8e:e6:e3:49:37:e5:8e:31:ff:d1:62:7b:73: d7:ec:29:b5:9b:2f:1a:0c:65:32:82:19:6b:70:5d: aa:75:0d:47:4f:51:57:56:e5:6c:20:28:46:fd:73: 64:0c:30:8a:c4:14:cf:9c:dd:f7:a2:3e:23:3a:ee: 4b:99:9c:4d:3e:7a:80:f3:10:ce:af:40:59:c9:a3: 8b:25:dd:7e:3e:ea:ab:ae:cb:66:7b:be:8e:79:42: d5:2d:28:9c:4c:b4:97:b1:14:88:73:fb:67:be:9f: 42:44:fa:81:93:fb:36:01:2b:5e:86:92:03:90:8d: 06:6f:66:7b:af:f9:75:cd:0b:f5:16:ed:af:68:6b: 05:94:43:60:b7:52:23:97:dc:44:0b:b9:28:21:4f: 17:32:40:84:b6:72:bc:c0:3d:64:09:00:6f:09:85: 4e:c0:2c:05:e4:31:95:bb:04:c7:31:c9:63:10:11: e2:cc:9d:d4:65:81:c5:e4:a1:f9:a0:ad:1d:0c:cd: 4f:11:30:ff:16:d3:34:9f:70:c9:09:5d:20:3a:17: 64:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0D:FE:83:4B:82:35:F9:33:D2:72:B5:28:18:8D:B4:D4:B8:AE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 192.252.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:c4:4f:4e:af:e3:98:60:81:03:37:8b:2d:a2:f9:ca:f6:46: 1c:93:67:0e:8d:46:78:93:c4:8c:21:e0:df:66:f3:dc:f4:06: 9a:bb:0b:32:01:08:13:34:f7:e3:19:15:f4:15:24:ae:0b:3b: fa:44:21:fb:7d:c3:80:84:3c:a4:88:da:f9:a6:a5:30:b2:dc: 3c:41:4d:ca:00:28:73:ca:51:78:05:e5:32:2d:2f:49:c9:cc: 09:ea:6e:b1:e9:f5:ce:fb:cf:74:4e:8c:6c:7c:a5:76:1c:d1: 50:62:9c:04:a9:f1:3a:79:82:2b:2a:3f:cd:7f:a6:b3:47:c2: 9b:c3:ff:99:d2:2d:78:2e:57:d5:c9:66:3b:7c:b8:88:a6:87: 1e:58:4a:2e:e5:05:85:f6:4e:24:78:59:93:c3:74:3c:c8:60: 62:9b:ba:c8:ca:62:a6:bb:5c:0c:87:a3:91:72:1f:8f:4b:c7: 9f:75:62:db:88:d2:ee:c2:52:24:a2:ce:c4:47:7b:56:cc:79: 95:81:ac:54:62:52:21:1d:bb:5f:ad:a2:21:af:28:68:95:4c: c4:af:aa:df:21:88:0b:45:bc:06:86:91:c8:8d:68:44:a4:f9: d8:f5:ae:1a:f7:c5:2f:63:76:d9:2e:7f:94:0c:e3:92:73:ae: 3f:d6:45:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacP9BJQWS7LwLb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ODZlYzllMDUtMDU2Mi00MjYzLTg5YmYtMzY1NWQ3ZTM3MDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/k6uavfRL5yBzEA6LbtNsCcCrEp2SZ+oH2O Gfw/XUVgPdGmK0E1C0gP3vUavI7m40k35Y4x/9Fie3PX7Cm1my8aDGUyghlrcF2q dQ1HT1FXVuVsIChG/XNkDDCKxBTPnN33oj4jOu5LmZxNPnqA8xDOr0BZyaOLJd1+ Puqrrstme76OeULVLSicTLSXsRSIc/tnvp9CRPqBk/s2AStehpIDkI0Gb2Z7r/l1 zQv1Fu2vaGsFlENgt1Ijl9xEC7koIU8XMkCEtnK8wD1kCQBvCYVOwCwF5DGVuwTH McljEBHizJ3UZYHF5KH5oK0dDM1PETD/FtM0n3DJCV0gOhdkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkN/oNLgjX5M9JytSgYjbTUuK5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMTljNWZhMGEtNGM5NC0z Y2ZlLWE5MTAtOGRlZmZiYWJkYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANTET06v45hggQM3iy2i+cr2RhyTZw6NRniTxIwh4N9m89z0Bpq7CzIB CBM09+MZFfQVJK4LO/pEIft9w4CEPKSI2vmmpTCy3DxBTcoAKHPKUXgF5TItL0nJ zAnqbrHp9c77z3ROjGx8pXYc0VBinASp8Tp5gisqP81/prNHwpvD/5nSLXguV9XJ Zjt8uIimhx5YSi7lBYX2TiR4WZPDdDzIYGKbusjKYqa7XAyHo5FyH49Lx591YtuI 0u7CUiSizsRHe1bMeZWBrFRiUiEdu1+toiGvKGiVTMSvqt8hiAtFvAaGkciNaESk +dj1rhr3xS9jdtkuf5QM45Jzrj/WRf8= -----END CERTIFICATE-----Generated at Mon Mar 24 19:08:03 2025 by rpki-client