$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa File: 2c309e9a-487a-3082-b76d-a570291dea7e.roa (raw, json) Hash identifier: rsDWgw4zFfuvqeZMqb2cyTKeSM8Vebr1CwUZU1xHaHM= Subject key identifier: AB:5E:12:1F:CC:6C:5D:35:E3:B3:7A:F2:5A:AC:BC:4E:01:A6:59:75 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F43285848EF615FC5EF019A6940D54F00 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.184.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5f:c5:ef:01:9a:69:40:d5:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=08c4d98e-e128-4e72-9995-11344b6a6901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:73:01:75:52:b0:de:08:e5:24:3f:82:1d: e9:7d:02:c9:60:83:95:25:6a:10:8f:9a:74:e7:cc: 1a:d9:6c:fb:9d:de:e7:92:48:3b:2f:1e:ab:cd:d4: bc:08:1d:63:0a:e2:44:67:1b:a3:7e:fe:5f:85:d0: de:52:49:52:f9:e4:be:06:ec:e1:29:b7:ed:57:25: 03:d9:68:e6:7f:8a:0b:4c:e6:72:1e:fb:f0:69:e4: f0:0e:66:d9:59:8b:09:9d:50:1f:89:fd:dc:57:1b: ff:f8:15:6c:1a:66:dc:06:47:9d:31:be:d0:a4:6c: d0:6c:de:27:94:d0:d1:ef:77:dd:99:f1:14:d8:b0: 29:c4:dd:6c:f8:f1:35:01:77:69:dd:95:63:70:41: f2:c4:af:da:5c:18:d6:b6:d7:b3:95:00:c0:c2:fe: f0:2e:6a:3f:9e:c3:ea:9e:2a:8c:18:14:18:10:74: f5:f3:ac:3b:18:dc:83:31:d0:bf:77:6a:80:8f:73: 52:e8:f3:1d:85:ae:17:06:85:2a:6a:eb:f9:b5:d3: 45:55:26:11:8e:e1:65:2d:02:b4:b2:b1:21:6f:29: 03:8f:34:05:d7:56:c9:f6:eb:4f:f1:d9:99:11:4d: a8:37:62:f8:85:59:05:9c:25:0f:d1:ad:6a:12:bc: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5E:12:1F:CC:6C:5D:35:E3:B3:7A:F2:5A:AC:BC:4E:01:A6:59:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:af:72:07:b5:be:f4:e0:ec:d8:92:6e:2b:79:59:d8:aa:a1: 45:68:56:3a:97:30:0f:a7:a4:4b:40:5c:4e:ae:71:19:0f:7e: a4:4d:e7:b1:b4:11:6c:46:4f:81:bf:10:92:f9:47:db:b2:f7: 33:0a:34:0c:57:6a:92:86:9e:b2:31:9f:1f:1c:48:b0:24:51: d2:09:6d:12:10:1d:38:ef:79:eb:1b:a9:2f:82:e1:b7:18:ea: f3:a4:ee:70:cd:95:53:4b:a8:55:e1:93:20:e7:59:6d:4b:d1: cd:9c:4b:5d:85:6d:96:f1:89:7e:b1:ca:c8:f6:a5:07:1a:81: 2c:55:ed:34:28:80:07:70:e2:a7:78:3a:b2:cf:e0:ea:77:b7: 1d:44:e1:69:bd:07:56:ae:6f:b4:1a:cd:93:bb:d7:a4:75:c9: e0:6a:47:09:73:32:94:6a:a4:73:46:1b:6a:97:3b:5f:c1:04: 98:47:c3:d8:50:9b:01:e3:2e:f4:1a:a4:e7:f6:17:e3:e5:47: cc:57:07:6d:91:c4:34:cf:bb:1c:1a:2e:97:57:42:4d:aa:b4: 5a:99:12:29:5b:81:95:0f:67:8d:e5:4b:0d:10:40:f9:36:a4: ba:33:53:1f:b8:73:3e:cf:ae:52:a5:b1:f4:7e:6f:e9:37:0b: c6:32:cf:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYV/F7wGaaUDVTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MDhjNGQ5OGUtZTEyOC00ZTcyLTk5OTUtMTEzNDRiNmE2OTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bFzAXVSsN4I5SQ/gh3pfQLJYIOVJWoQj5p0 58wa2Wz7nd7nkkg7Lx6rzdS8CB1jCuJEZxujfv5fhdDeUklS+eS+BuzhKbftVyUD 2Wjmf4oLTOZyHvvwaeTwDmbZWYsJnVAfif3cVxv/+BVsGmbcBkedMb7QpGzQbN4n lNDR73fdmfEU2LApxN1s+PE1AXdp3ZVjcEHyxK/aXBjWttezlQDAwv7wLmo/nsPq niqMGBQYEHT186w7GNyDMdC/d2qAj3NS6PMdha4XBoUqauv5tdNFVSYRjuFlLQK0 srEhbykDjzQF11bJ9utP8dmZEU2oN2L4hVkFnCUP0a1qErzOcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKteEh/MbF0147N68lqsvE4Bpll1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMmMzMDllOWEtNDg3YS0z MDgyLWI3NmQtYTU3MDI5MWRlYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqvcge1vvTg7NiSbit5WdiqoUVoVjqXMA+npEtAXE6ucRkPfqRN57G0 EWxGT4G/EJL5R9uy9zMKNAxXapKGnrIxnx8cSLAkUdIJbRIQHTjveesbqS+C4bcY 6vOk7nDNlVNLqFXhkyDnWW1L0c2cS12FbZbxiX6xysj2pQcagSxV7TQogAdw4qd4 OrLP4Op3tx1E4Wm9B1aub7QazZO716R1yeBqRwlzMpRqpHNGG2qXO1/BBJhHw9hQ mwHjLvQapOf2F+PlR8xXB22RxDTPuxwaLpdXQk2qtFqZEilbgZUPZ43lSw0QQPk2 pLozUx+4cz7PrlKlsfR+b+k3C8Yyz/o= -----END CERTIFICATE-----Generated at Fri Mar 14 09:29:58 2025 by rpki-client