$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa File: 9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa (raw, json) Hash identifier: 8mdRnkTvCQBTh7tLmBL2TEyjnOp0YePQ0j/gPnK7maw= Subject key identifier: 75:B7:36:6C:FC:D0:88:4F:09:5E:70:12:F5:01:0B:B9:C1:29:98:9C Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F43285848DEA120EA7D12DC066A65DA80 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 13807 IP address blocks: 192.189.248.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:20:ea:7d:12:dc:06:6a:65:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=1d0160ec-3048-4ba8-9e18-7915acfb576c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:be:b5:7c:a8:5e:33:20:a8:42:cb:b2:8e: bb:65:a2:03:6d:6f:de:fe:c0:8f:82:4d:03:b2:a0: bc:28:eb:2a:d1:b2:ba:31:73:a8:06:0c:2a:0a:98: 24:00:69:47:14:2e:af:e2:22:45:af:e0:3c:69:75: 03:77:ba:25:7b:35:08:c3:a5:a6:4e:88:ad:5e:db: 61:29:ec:72:23:a3:e5:71:6e:b8:f5:39:d6:75:08: 97:43:40:58:fb:02:88:a1:4f:05:b4:63:38:c3:6e: 5b:cc:9b:df:0f:bd:90:3e:f1:94:99:d6:6f:ac:74: 07:33:5b:66:a3:07:a9:3c:72:73:03:3e:0b:67:36: 24:5b:6c:ae:31:c9:eb:3f:8f:b4:75:a2:cd:0b:61: 3a:21:f1:82:52:28:69:aa:0c:33:ca:8e:87:a2:01: 67:d5:0c:f1:77:57:79:cb:60:bc:d6:a5:e6:e2:9c: c2:4b:f8:e1:05:52:a1:f1:70:f9:36:68:54:ac:50: 1a:9f:31:fa:04:c5:06:f1:d2:ee:51:1b:4e:14:74: 7c:5e:02:29:40:43:63:44:8a:6c:46:4a:d3:1e:b4: fe:31:30:53:ed:f6:a9:df:ec:b0:23:9e:5e:20:b6: 22:e8:30:b9:2a:a1:32:bc:60:8e:bd:f0:eb:62:60: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B7:36:6C:FC:D0:88:4F:09:5E:70:12:F5:01:0B:B9:C1:29:98:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 192.189.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:26:7e:91:5b:ef:52:27:74:37:11:cb:fe:b3:be:8c:d5:ae: 41:8f:21:3a:f9:1b:9b:9d:57:8f:8f:3e:77:33:76:6e:4f:4a: c2:2c:c7:fa:b5:6c:db:56:87:de:1c:e4:37:95:29:3a:64:13: 9a:f0:72:46:0e:8b:60:e1:f2:5c:49:4d:f9:9c:36:11:e1:50: f9:43:af:4f:6a:65:13:c0:c1:a5:8e:95:8c:02:3a:ff:e2:5a: 7b:a4:1f:0d:4e:ff:57:c2:e0:ce:1c:3e:cb:8a:f3:ef:da:06: d6:7b:7f:9d:c5:8a:61:a3:cc:d3:85:67:10:2f:05:7a:73:2e: 4d:2b:97:58:9b:e6:e5:83:32:38:c5:d3:9e:ff:4a:3f:56:f9: 43:c9:92:3c:c4:48:51:ce:10:03:35:83:64:79:ec:ab:82:eb: b1:b8:80:cf:28:bd:91:60:ad:4c:d1:73:da:70:37:e8:33:02: 32:15:04:56:37:76:21:e9:24:0f:9d:b2:39:3c:0d:d6:d8:8a: a1:18:09:5f:81:ad:e3:ab:94:23:33:55:0e:ae:65:b0:2a:b3: e3:32:0b:ff:14:cf:a6:28:61:f7:73:c6:3c:7a:31:1e:2a:c4: 92:7f:f1:61:c8:ea:8d:21:67:37:39:65:a5:f7:7f:be:da:90: 39:24:8d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSDqfRLcBmpl2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MWQwMTYwZWMtMzA0OC00YmE4LTllMTgtNzkxNWFjZmI1NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwa+tXyoXjMgqELLso67ZaIDbW/e/sCPgk0D sqC8KOsq0bK6MXOoBgwqCpgkAGlHFC6v4iJFr+A8aXUDd7olezUIw6WmToitXtth KexyI6PlcW649TnWdQiXQ0BY+wKIoU8FtGM4w25bzJvfD72QPvGUmdZvrHQHM1tm owepPHJzAz4LZzYkW2yuMcnrP4+0daLNC2E6IfGCUihpqgwzyo6HogFn1Qzxd1d5 y2C81qXm4pzCS/jhBVKh8XD5NmhUrFAanzH6BMUG8dLuURtOFHR8XgIpQENjRIps RkrTHrT+MTBT7fap3+ywI55eILYi6DC5KqEyvGCOvfDrYmBSKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW3Nmz80IhPCV5wEvUBC7nBKZicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvOWFmMmM4YjYtNTM1ZS0z ZmQ4LWE4YjktYjgwNTcyZjhkMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0mfpFb71IndDcRy/6zvozVrkGPITr5G5udV4+PPnczdm5PSsIsx/q1 bNtWh94c5DeVKTpkE5rwckYOi2Dh8lxJTfmcNhHhUPlDr09qZRPAwaWOlYwCOv/i WnukHw1O/1fC4M4cPsuK8+/aBtZ7f53FimGjzNOFZxAvBXpzLk0rl1ib5uWDMjjF 057/Sj9W+UPJkjzESFHOEAM1g2R57KuC67G4gM8ovZFgrUzRc9pwN+gzAjIVBFY3 diHpJA+dsjk8DdbYiqEYCV+BreOrlCMzVQ6uZbAqs+MyC/8Uz6YoYfdzxjx6MR4q xJJ/8WHI6o0hZzc5ZaX3f77akDkkjTY= -----END CERTIFICATE-----Generated at Tue Apr 15 17:01:14 2025 by rpki-client