$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa File: 3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa (raw, json) Hash identifier: xRyAtpKmuuUAy9y1kCkJ6ZlbLhdmCcTzlqO50hTPfug= Subject key identifier: 97:A6:70:71:04:0E:12:B8:05:06:2E:7D:0B:02:0A:53:57:8B:A3:FC Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F43285848E59BBF9107B78F9EF9BC5700 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 7224 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:bf:91:07:b7:8f:9e:f9:bc:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=4c2b70c6-a701-4592-9e38-d5cbef0927df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:80:3a:36:4a:89:da:13:f4:2e:c7:4c:79: 21:2a:8d:a0:ba:b8:79:38:d9:f8:b7:0f:52:20:06: 5f:7d:c3:8d:97:b6:4b:f0:6b:b8:26:60:97:1c:e8: a8:ae:17:0b:12:12:79:cc:e4:02:2a:9c:74:80:71: 7d:54:fe:81:0c:d7:7e:6f:12:b7:5f:43:8d:78:4c: 0b:ae:8a:ef:4f:59:db:da:42:18:90:ba:b2:ce:1d: ce:04:70:ea:fc:56:e1:08:35:26:96:73:da:8c:95: a4:81:23:3e:aa:7f:04:22:96:7e:e8:96:2b:25:d9: 1e:27:f2:75:06:16:95:cf:e0:79:34:f9:d8:80:9e: fb:b0:5e:12:54:33:0f:84:1d:7e:95:71:13:bd:0b: 69:c1:90:52:6f:d4:4d:86:73:61:aa:a6:a0:49:d4: 6b:00:46:27:29:52:e7:eb:3c:f1:79:58:31:1d:a9: 7d:ca:04:11:e0:fc:6a:fe:0e:b8:d2:99:b9:cc:8a: a6:ef:bf:a3:22:03:31:0f:29:6a:ad:1b:2b:fc:e6: ad:60:d5:01:c3:2f:32:12:2d:0c:d8:2d:4f:46:54: f7:0a:41:74:53:1d:ce:c3:ee:92:9d:ca:7d:27:d6: 77:43:7d:ab:f6:29:d0:bd:bb:d1:b4:85:97:67:12: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A6:70:71:04:0E:12:B8:05:06:2E:7D:0B:02:0A:53:57:8B:A3:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4c:c7:2b:46:13:d5:71:c8:13:c8:d0:30:5c:07:c2:d9:e6: 28:f4:24:39:55:81:78:1a:fc:18:d2:8a:e9:99:35:82:55:57: d0:33:48:01:ae:e0:01:9f:f2:e0:a6:85:d2:86:cb:9e:26:ce: 9f:b0:c4:39:3d:ba:d2:f7:76:2f:8b:2b:a9:f4:60:80:5d:af: 15:cc:9e:ac:0c:b4:d2:77:e7:7b:ab:a8:2c:de:d0:9c:24:c9: 9b:5f:48:cf:11:1c:3e:ff:2f:61:f3:91:54:28:7d:33:97:a0: 45:28:78:a9:62:84:f5:0b:35:12:76:b5:d6:b8:f0:7d:0c:a7: aa:ae:66:c9:b3:61:1b:b9:0a:f4:f1:f2:fd:bc:d6:41:65:2f: 7d:1a:a3:ac:af:ac:a6:a6:b7:26:fe:eb:2d:15:b4:29:5b:1d: 65:6a:c0:6d:35:bf:85:c0:36:87:92:e8:d2:55:48:aa:33:78: d1:ee:48:80:82:a5:e7:e5:22:73:88:1d:65:de:23:a9:de:51: de:66:ab:75:10:ea:39:35:a6:77:ab:0a:84:54:1c:11:bb:2d: 79:b9:af:cc:41:aa:62:38:10:d0:77:b3:4f:67:f0:b3:82:6e: 7b:70:08:c8:60:54:8e:09:b2:22:9b:89:1e:5c:14:c4:08:ab: db:e3:ff:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7+RB7ePnvm8VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NGMyYjcwYzYtYTcwMS00NTkyLTllMzgtZDVjYmVmMDkyN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKKAOjZKidoT9C7HTHkhKo2gurh5ONn4tw9S IAZffcONl7ZL8Gu4JmCXHOiorhcLEhJ5zOQCKpx0gHF9VP6BDNd+bxK3X0ONeEwL rorvT1nb2kIYkLqyzh3OBHDq/FbhCDUmlnPajJWkgSM+qn8EIpZ+6JYrJdkeJ/J1 BhaVz+B5NPnYgJ77sF4SVDMPhB1+lXETvQtpwZBSb9RNhnNhqqagSdRrAEYnKVLn 6zzxeVgxHal9ygQR4Pxq/g640pm5zIqm77+jIgMxDylqrRsr/OatYNUBwy8yEi0M 2C1PRlT3CkF0Ux3Ow+6Sncp9J9Z3Q32r9inQvbvRtIWXZxKJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJemcHEEDhK4BQYufQsCClNXi6P8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2ZiMDhkYzctYmVlYS0z NDU4LTkwOGQtOWIxYThiZjZhMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdMxytGE9VxyBPI0DBcB8LZ5ij0JDlVgXga/BjSiumZNYJVV9AzSAGu 4AGf8uCmhdKGy54mzp+wxDk9utL3di+LK6n0YIBdrxXMnqwMtNJ353urqCze0Jwk yZtfSM8RHD7/L2HzkVQofTOXoEUoeKlihPULNRJ2tda48H0Mp6quZsmzYRu5CvTx 8v281kFlL30ao6yvrKamtyb+6y0VtClbHWVqwG01v4XANoeS6NJVSKozeNHuSICC peflInOIHWXeI6neUd5mq3UQ6jk1pnerCoRUHBG7LXm5r8xBqmI4ENB3s09n8LOC bntwCMhgVI4JsiKbiR5cFMQIq9vj/70= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:42 2025 by rpki-client