$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3a740706-03b4-39a7-bb11-64dc9cf215e1.roa File: 3a740706-03b4-39a7-bb11-64dc9cf215e1.roa (raw, json) Hash identifier: PlggEP+7nW35jN4tYg/MUaj6maBc5NEfEaJ02nJ9vWw= Subject key identifier: BF:BC:9B:6B:5F:77:62:89:EF:34:ED:6B:C3:B0:5E:F1:36:5D:56:B1 Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F4328584900214F0C2AAC0AEECD5FC6D0 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3a740706-03b4-39a7-bb11-64dc9cf215e1.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 30494 IP address blocks: 192.234.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:4f:0c:2a:ac:0a:ee:cd:5f:c6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=c175b5e8-da27-40b7-8c65-65087b646003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:b2:b8:0e:67:f6:56:6c:d2:db:ef:16:36: 2a:f9:77:2b:3d:71:aa:b5:02:e7:66:61:e1:a8:5d: 1e:d6:fa:e6:2f:32:20:a8:81:a3:64:71:aa:d4:ed: 1b:46:6c:23:68:8a:30:b2:05:27:e3:ff:36:44:62: ff:89:b8:9a:52:6f:70:3c:a9:04:a4:62:3a:ab:9a: aa:e3:b0:e4:ce:96:27:02:ab:b9:a2:d7:83:d5:aa: c3:00:40:a2:0c:ac:9f:32:e2:79:2e:ad:b5:1a:b4: 3f:ac:21:b2:09:81:17:4a:b3:6d:46:4b:6b:e6:19: e6:c1:bf:03:b4:d5:ea:49:1a:b5:32:dd:c4:d3:5e: 3a:dd:95:27:1d:c6:ea:97:0a:48:a8:bf:ba:62:b2: f6:40:84:4e:57:a4:4a:13:19:f1:b2:af:1a:db:b3: d5:2f:37:ae:9d:1a:55:85:16:a2:18:8e:7f:c1:c7: d1:06:c7:c6:2e:99:de:69:03:ca:59:02:99:47:64: 2c:0a:51:91:dc:4c:80:6a:48:06:70:1b:b6:12:52: 5b:cc:77:7a:18:c4:8a:13:02:3b:87:62:fc:20:f9: 45:93:77:37:2f:2c:9f:6c:f8:e7:1d:98:41:87:60: 32:29:7e:4a:36:f3:23:01:e0:07:f6:8a:7a:89:89: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BC:9B:6B:5F:77:62:89:EF:34:ED:6B:C3:B0:5E:F1:36:5D:56:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3a740706-03b4-39a7-bb11-64dc9cf215e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 192.234.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:59:12:b9:57:4f:6b:86:7d:29:40:08:7f:48:56:35:1c:3f: 0f:41:30:77:3c:5c:af:32:33:17:99:58:91:ef:74:83:aa:13: 00:26:4f:5d:1c:37:d5:e5:6f:22:b0:7b:27:2c:21:d5:d6:45: 6f:c9:ca:07:bb:69:52:a4:14:f9:c6:25:5b:0e:b5:ea:81:32: 44:26:2f:27:5c:44:73:cd:df:ab:3f:b3:f5:a8:d0:ca:c4:35: 53:34:ce:60:b9:7c:91:af:83:d1:16:6b:63:71:5c:b7:89:b6: 80:e3:76:e3:0b:b9:91:3d:db:e0:c3:1a:58:ef:b2:0f:f6:8f: 6f:50:09:0e:75:51:1a:fb:3f:c5:ab:b6:3e:b9:a4:71:f2:de: 60:db:47:aa:d7:c1:a1:35:83:38:80:b9:a1:f7:c8:28:a7:81: 9f:4c:98:3d:9f:5c:f2:fe:60:4a:f9:de:db:af:35:e0:89:65: da:55:eb:1e:68:8e:fd:2a:e6:26:7a:ff:7a:69:26:60:7c:8b: cb:fc:1d:1e:f9:bd:ba:16:41:68:a2:71:78:b2:7f:40:57:10: 4f:56:fe:0f:b3:5e:28:33:c3:b7:6f:05:45:04:1f:a0:52:6c: 42:25:9a:22:90:0b:17:04:fe:ea:cc:e8:f7:5c:b7:01:11:d6: a2:80:aa:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIU8MKqwK7s1fxtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YzE3NWI1ZTgtZGEyNy00MGI3LThjNjUtNjUwODdiNjQ2MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgSyuA5n9lZs0tvvFjYq+XcrPXGqtQLnZmHh qF0e1vrmLzIgqIGjZHGq1O0bRmwjaIowsgUn4/82RGL/ibiaUm9wPKkEpGI6q5qq 47DkzpYnAqu5oteD1arDAECiDKyfMuJ5Lq21GrQ/rCGyCYEXSrNtRktr5hnmwb8D tNXqSRq1Mt3E01463ZUnHcbqlwpIqL+6YrL2QIROV6RKExnxsq8a27PVLzeunRpV hRaiGI5/wcfRBsfGLpneaQPKWQKZR2QsClGR3EyAakgGcBu2ElJbzHd6GMSKEwI7 h2L8IPlFk3c3LyyfbPjnHZhBh2AyKX5KNvMjAeAH9op6iYnpGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+8m2tfd2KJ7zTta8OwXvE2XVaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvM2E3NDA3MDYtMDNiNC0z OWE3LWJiMTEtNjRkYzljZjIxNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNZErlXT2uGfSlACH9IVjUcPw9BMHc8XK8yMxeZWJHvdIOqEwAmT10c N9XlbyKweycsIdXWRW/Jyge7aVKkFPnGJVsOteqBMkQmLydcRHPN36s/s/Wo0MrE NVM0zmC5fJGvg9EWa2NxXLeJtoDjduMLuZE92+DDGljvsg/2j29QCQ51URr7P8Wr tj65pHHy3mDbR6rXwaE1gziAuaH3yCingZ9MmD2fXPL+YEr53tuvNeCJZdpV6x5o jv0q5iZ6/3ppJmB8i8v8HR75vboWQWiicXiyf0BXEE9W/g+zXigzw7dvBUUEH6BS bEIlmiKQCxcE/urM6PdctwER1qKAqmk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:52:07 2025 by rpki-client