$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa File: 38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa (raw, json) Hash identifier: pLdITBxCkic2ubzDU+j9nt70JNIC23xvN5eoOakCLDM= Subject key identifier: B1:5E:7D:63:5A:97:3D:A8:47:89:84:88:3A:2A:9D:34:56:E5:ED:CE Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F43285848E59BBFB4CE495018DCD25300 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 7224 IP address blocks: 192.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:bf:b4:ce:49:50:18:dc:d2:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=e7234f16-5a49-4014-b619-367e665d031e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:85:d6:a4:79:2f:e4:f8:ff:19:86:e4:a4:f4: 34:30:a8:9a:8c:27:00:24:5f:9e:9e:bd:2a:d3:a4: 58:ad:12:ff:9a:43:15:99:6e:dd:7a:7f:96:8a:4d: b3:6d:bc:a5:9a:5a:5e:28:41:e8:cc:32:1d:74:34: 6e:bc:37:d3:7e:8a:f4:c1:83:79:bb:d3:86:29:8c: cf:f8:52:a8:00:83:de:70:67:5a:8c:43:4f:47:12: e9:8e:2c:7d:b4:dd:9a:c2:91:1b:2c:90:aa:88:c8: ca:23:66:3b:06:b5:26:35:4d:ba:3d:0c:18:9f:e6: 9f:0d:75:b0:1e:46:08:d8:2b:f4:2a:ce:4e:d5:03: f5:10:28:b2:03:bd:8e:c2:53:d6:f3:15:ea:ec:92: 96:29:dc:42:8b:a1:8c:38:79:a9:07:0b:2f:e0:25: db:ef:ee:e8:25:90:3b:3c:fc:bd:56:9b:f9:4b:71: 53:2e:7c:20:00:44:27:eb:65:90:3d:06:68:56:f6: fe:2a:bb:ac:d9:7e:80:7e:b5:4c:90:0f:36:bb:09: 3b:cd:0d:9d:b0:4a:24:b4:cd:ce:02:d4:ff:75:86: ec:d6:89:a9:e1:e2:0d:c5:a7:e7:0b:68:19:1e:3f: c4:ab:d4:f1:cb:c0:7f:e5:61:e8:a7:b1:78:2a:e6: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5E:7D:63:5A:97:3D:A8:47:89:84:88:3A:2A:9D:34:56:E5:ED:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:89:19:5b:5a:63:86:00:4b:50:ce:52:23:f8:3d:2b:1d:99: a0:fd:f3:c4:a2:34:4c:f9:3a:79:42:eb:4c:0a:d3:11:24:ac: 43:e0:94:36:de:ca:9b:fc:37:2b:12:c9:cd:20:86:3c:c0:56: 30:ed:5d:57:ce:0f:7a:0a:8a:82:a9:59:98:32:d6:ae:e1:5d: 98:b6:e6:52:7a:8e:ce:79:8a:e1:c5:f9:8f:e1:a9:db:79:c5: e5:96:a6:34:6e:ce:d9:6c:8e:00:de:90:8c:47:29:cc:e6:6f: a2:ae:82:ae:b6:c8:39:aa:d5:3a:6b:7c:3c:bb:aa:2b:c3:03: 24:a7:b8:0e:12:d4:d4:fe:28:26:53:e0:66:2d:db:e4:35:03: fc:b9:54:77:2e:27:3d:3f:ef:1d:a7:f8:98:c8:95:b1:5e:ab: 9c:b6:60:09:b9:4a:a5:a6:05:25:e9:ba:45:83:31:ae:a0:7f: 29:60:15:83:e1:db:35:5e:df:8e:30:cd:af:58:64:de:33:d9: 72:d3:a7:bd:97:68:0d:ff:73:1c:76:fd:cb:ed:27:3c:28:cd: 58:50:19:7a:d1:fb:4d:73:ba:07:1d:7f:8d:15:be:11:a0:be: 9a:10:73:ea:4f:66:32:38:48:93:a4:a9:13:23:63:b6:88:46: 9d:9c:08:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7+0zklQGNzSUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZTcyMzRmMTYtNWE0OS00MDE0LWI2MTktMzY3ZTY2NWQwMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYXWpHkv5Pj/GYbkpPQ0MKiajCcAJF+enr0q 06RYrRL/mkMVmW7den+Wik2zbbylmlpeKEHozDIddDRuvDfTfor0wYN5u9OGKYzP +FKoAIPecGdajENPRxLpjix9tN2awpEbLJCqiMjKI2Y7BrUmNU26PQwYn+afDXWw HkYI2Cv0Ks5O1QP1ECiyA72OwlPW8xXq7JKWKdxCi6GMOHmpBwsv4CXb7+7oJZA7 PPy9Vpv5S3FTLnwgAEQn62WQPQZoVvb+Krus2X6AfrVMkA82uwk7zQ2dsEoktM3O AtT/dYbs1omp4eINxafnC2gZHj/Eq9Txy8B/5WHop7F4KubOSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFefWNalz2oR4mEiDoqnTRW5e3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvMzhjYmFmZTUtYWMxZi0z MDRlLTk5YzQtN2IwMGFiNDJlOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGJGVtaY4YAS1DOUiP4PSsdmaD988SiNEz5OnlC60wK0xEkrEPglDbe ypv8NysSyc0ghjzAVjDtXVfOD3oKioKpWZgy1q7hXZi25lJ6js55iuHF+Y/hqdt5 xeWWpjRuztlsjgDekIxHKczmb6Kugq62yDmq1TprfDy7qivDAySnuA4S1NT+KCZT 4GYt2+Q1A/y5VHcuJz0/7x2n+JjIlbFeq5y2YAm5SqWmBSXpukWDMa6gfylgFYPh 2zVe344wza9YZN4z2XLTp72XaA3/cxx2/cvtJzwozVhQGXrR+01zugcdf40VvhGg vpoQc+pPZjI4SJOkqRMjY7aIRp2cCLg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:26 2025 by rpki-client