$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa File: 3f9d2fae-fd49-33bf-8645-afba9150e12c.roa (raw, json) Hash identifier: fqFIUmapQnUu2nd28qYjeWdy7W07MtKH5kHsIVLRv8U= Subject key identifier: EE:BD:1E:A7:AF:F6:00:C5:61:95:4E:DC:EA:D4:EA:F7:38:2D:0F:F7 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F43285848F926A4D9925F380D6E20ED00 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 5050 IP address blocks: 192.88.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a4:d9:92:5f:38:0d:6e:20:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=2ccf5956-9b58-4052-b8b2-b61d5756991f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:1f:6a:71:9c:22:2d:2f:ba:7b:2f:30:b9: ed:5e:14:d9:bf:c3:a0:94:8c:1a:84:43:44:ea:c3: cf:d8:78:99:04:ab:e2:ce:a4:5c:8c:d8:f7:b0:6e: b5:06:ce:ae:13:8c:4e:54:56:99:9e:5e:ec:be:87: 40:f9:6b:33:06:58:58:8c:11:ee:eb:1e:0a:51:9f: 07:28:ee:18:7d:79:4e:94:eb:fd:ff:dd:6f:5a:6f: cc:0c:8a:2c:ea:83:36:aa:3e:84:47:4a:30:68:06: 0a:b7:28:2b:bf:9d:db:1d:d9:95:0d:02:fc:2f:54: 57:8f:a6:52:e1:dc:94:03:ab:9b:89:0a:a9:b5:9b: 96:75:4e:43:6b:a4:03:a9:0c:d7:b9:3c:8c:40:eb: d8:1f:a4:17:56:e4:81:48:66:ab:55:72:ff:56:3f: 6c:90:51:f5:af:e8:16:c4:32:0a:71:25:6d:63:d8: 85:2c:a4:4f:34:3c:95:9e:08:ac:99:ff:e6:b0:fd: ef:fa:cf:f7:db:43:21:61:3f:38:ac:30:f5:2a:cb: 7c:87:d0:f8:13:39:ce:4d:4d:33:4a:fe:c8:f8:f5: 66:c9:84:59:cc:c1:96:7a:3e:8a:50:d5:b1:76:ea: 02:b6:45:dc:66:c5:82:3e:46:db:c0:b3:d3:17:99: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BD:1E:A7:AF:F6:00:C5:61:95:4E:DC:EA:D4:EA:F7:38:2D:0F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.88.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:27:dd:6d:a5:85:87:9d:62:50:60:43:b3:fc:f0:aa:49:d8: a8:76:65:b9:ae:71:fc:36:be:53:54:05:cd:f4:d4:ba:70:8f: 74:be:fd:0f:bf:e4:31:fa:ab:10:7b:b4:af:9a:7e:75:3e:8d: f6:0e:f3:21:63:df:b6:b8:95:c5:bf:e1:37:af:da:3c:f8:6c: 2b:bc:0a:91:6d:a7:29:69:12:f8:36:f3:c5:73:c0:e9:79:1e: 07:01:45:87:31:3b:d3:25:4a:bc:ea:56:db:d6:95:64:a5:6d: 6b:b9:87:89:1b:22:7f:19:1e:26:9c:e1:f6:eb:40:97:12:37: 7b:a0:b8:30:55:2b:2d:48:7e:df:fa:88:87:be:66:7e:a0:0b: 16:ae:4e:55:58:97:56:da:e4:57:77:bb:a5:52:af:0d:a1:51: 6f:81:a4:b5:83:32:56:3c:1f:b3:ff:51:2b:e8:92:1b:9a:d7: 5d:6e:23:67:be:5e:10:f3:60:09:95:f2:e2:b9:bb:0a:c4:0b: 7f:17:aa:ee:50:00:18:5a:3f:5e:a5:cf:e6:09:84:5c:6b:5a: 3b:83:3e:b4:04:ce:68:ad:85:68:91:bf:95:7f:38:5c:6c:1a: 69:af:04:3d:1a:63:15:eb:1c:fa:a4:13:26:96:8b:97:33:2a: 68:3b:8f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqTZkl84DW4g7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MmNjZjU5NTYtOWI1OC00MDUyLWI4YjItYjYxZDU3NTY5OTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdwfanGcIi0vunsvMLntXhTZv8OglIwahENE 6sPP2HiZBKvizqRcjNj3sG61Bs6uE4xOVFaZnl7svodA+WszBlhYjBHu6x4KUZ8H KO4YfXlOlOv9/91vWm/MDIos6oM2qj6ER0owaAYKtygrv53bHdmVDQL8L1RXj6ZS 4dyUA6ubiQqptZuWdU5Da6QDqQzXuTyMQOvYH6QXVuSBSGarVXL/Vj9skFH1r+gW xDIKcSVtY9iFLKRPNDyVngismf/msP3v+s/320MhYT84rDD1Kst8h9D4EznOTU0z Sv7I+PVmyYRZzMGWej6KUNWxduoCtkXcZsWCPkbbwLPTF5lPMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO69Hqev9gDFYZVO3OrU6vc4LQ/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvM2Y5ZDJmYWUtZmQ0OS0z M2JmLTg2NDUtYWZiYTkxNTBlMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIn3W2lhYedYlBgQ7P88KpJ2Kh2Zbmucfw2vlNUBc301Lpwj3S+/Q+/ 5DH6qxB7tK+afnU+jfYO8yFj37a4lcW/4Tev2jz4bCu8CpFtpylpEvg288VzwOl5 HgcBRYcxO9MlSrzqVtvWlWSlbWu5h4kbIn8ZHiac4fbrQJcSN3uguDBVKy1Ift/6 iIe+Zn6gCxauTlVYl1ba5Fd3u6VSrw2hUW+BpLWDMlY8H7P/USvokhua111uI2e+ XhDzYAmV8uK5uwrEC38Xqu5QABhaP16lz+YJhFxrWjuDPrQEzmithWiRv5V/OFxs GmmvBD0aYxXrHPqkEyaWi5czKmg7jyg= -----END CERTIFICATE-----Generated at Sat Apr 12 01:38:55 2025 by rpki-client