$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa File: db155d25-f432-3f34-9f10-30f49558b253.roa (raw, json) Hash identifier: +UI4PYfHdCham1OvvFCe2osuWZuERFZNSXpDfo51Ffw= Subject key identifier: 9E:BF:AE:C6:8E:BC:8C:3D:53:5B:4C:F3:89:2A:60:FF:CD:07:EF:25 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F43285848E59BC667780D585AA56D3080 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c6:67:78:0d:58:5a:a5:6d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=733734a6-9f56-4789-8995-4928a2989064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d9:ba:71:2f:36:20:a1:d2:0d:6d:2f:08:07: cf:89:b0:b1:af:6f:76:8e:90:3c:4a:ee:d9:5d:44: 1f:fe:7d:2c:4a:3d:a5:e9:e0:0a:eb:10:c1:80:71: dc:59:c1:2c:2c:cc:14:58:85:32:05:6b:ab:55:43: 24:20:35:de:41:af:f5:5c:44:d8:d5:6c:bb:ab:c9: d0:e8:94:a6:d3:5e:0a:a7:29:55:8f:b9:02:c3:67: a7:f6:cf:99:d8:73:9c:5f:ad:51:a4:25:1d:6a:fb: b7:49:c6:5c:ef:f9:47:1c:60:2f:d4:8d:31:79:4c: f1:94:1b:b5:47:94:cb:42:7d:a3:29:8b:e6:99:53: 55:ab:49:03:41:eb:c2:4d:cf:9f:df:fe:a8:79:52: 2c:ce:d4:f8:5d:8d:32:41:18:c6:eb:c2:07:3a:2c: e7:7a:02:41:fc:7d:ae:f2:2b:28:9e:21:b1:68:d4: 45:9b:90:42:1e:d4:9d:70:7b:e8:83:48:d7:77:15: 19:8a:6f:88:9c:ef:1f:12:4e:aa:21:c8:fd:e2:76: e1:13:16:19:96:84:ac:be:c3:3e:c4:11:ce:4b:36: 1a:13:22:4f:3c:7d:86:a7:ee:69:a0:40:7a:e1:2d: c2:68:b6:89:b2:58:8b:8b:d8:bd:e8:3e:a8:31:49: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:AE:C6:8E:BC:8C:3D:53:5B:4C:F3:89:2A:60:FF:CD:07:EF:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:52:d2:c2:5a:f2:7e:3e:bd:9a:1b:96:4a:80:66:c5:f9:03: f6:b8:d2:28:73:86:8e:23:ff:95:63:87:c0:33:aa:a0:6c:a3: 0b:98:6f:6b:87:8e:91:44:ba:bc:56:ae:db:8a:39:56:90:c9: d6:09:b4:7c:46:f3:b7:b2:e3:b1:76:2c:eb:3e:cc:3a:eb:75: b0:3f:4a:c9:6b:12:db:a1:11:03:07:03:8a:88:e1:8c:2b:3b: 6b:c7:9d:63:ae:8d:3d:b5:91:a2:93:fa:51:12:15:92:79:c6: 3e:cd:d6:20:a1:0e:59:74:66:ca:2f:ac:e8:2e:0a:6e:fd:7f: b4:26:3b:c5:f3:8f:a4:b0:06:54:78:ff:83:1b:88:28:3a:f9: 34:f9:7e:c6:3d:44:c8:e7:b6:49:7b:79:35:7d:38:3d:27:da: 02:e9:3f:72:00:62:99:84:ad:7a:3c:1a:67:4b:c5:be:07:ea: 86:a2:08:7c:f7:43:81:56:57:d8:24:aa:19:58:ea:c3:f6:a1: 08:6b:39:27:00:20:02:0c:d3:ba:e0:d7:2a:55:0a:ca:89:68: 1a:6f:1a:b5:69:17:1f:b0:ab:9a:45:b3:b4:23:e1:3e:ac:5b: 23:c1:3b:0f:e5:d5:e8:9e:a0:a4:a1:90:e9:67:20:40:69:ed: 3d:2a:6e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8ZneA1YWqVtMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NzMzNzM0YTYtOWY1Ni00Nzg5LTg5OTUtNDkyOGEyOTg5MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNm6cS82IKHSDW0vCAfPibCxr292jpA8Su7Z XUQf/n0sSj2l6eAK6xDBgHHcWcEsLMwUWIUyBWurVUMkIDXeQa/1XETY1Wy7q8nQ 6JSm014KpylVj7kCw2en9s+Z2HOcX61RpCUdavu3ScZc7/lHHGAv1I0xeUzxlBu1 R5TLQn2jKYvmmVNVq0kDQevCTc+f3/6oeVIsztT4XY0yQRjG68IHOiznegJB/H2u 8isoniGxaNRFm5BCHtSdcHvog0jXdxUZim+InO8fEk6qIcj94nbhExYZloSsvsM+ xBHOSzYaEyJPPH2Gp+5poEB64S3CaLaJsliLi9i96D6oMUmH0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6/rsaOvIw9U1tM84kqYP/NB+8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvZGIxNTVkMjUtZjQzMi0z ZjM0LTlmMTAtMzBmNDk1NThiMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1S0sJa8n4+vZoblkqAZsX5A/a40ihzho4j/5Vjh8AzqqBsowuYb2uH jpFEurxWrtuKOVaQydYJtHxG87ey47F2LOs+zDrrdbA/SslrEtuhEQMHA4qI4Ywr O2vHnWOujT21kaKT+lESFZJ5xj7N1iChDll0ZsovrOguCm79f7QmO8Xzj6SwBlR4 /4MbiCg6+TT5fsY9RMjntkl7eTV9OD0n2gLpP3IAYpmErXo8GmdLxb4H6oaiCHz3 Q4FWV9gkqhlY6sP2oQhrOScAIAIM07rg1ypVCsqJaBpvGrVpFx+wq5pFs7Qj4T6s WyPBOw/l1eieoKShkOlnIEBp7T0qbsM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:50 2025 by rpki-client