$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/558cd0b8-faa3-3998-acb5-de42660f361a.roa File: 558cd0b8-faa3-3998-acb5-de42660f361a.roa (raw, json) Hash identifier: RK0L8wxa+ifgK/pklFzgpi2WB472+/4Vvwc4619wzZg= Subject key identifier: D2:1F:8B:30:5E:93:28:D8:49:46:BC:3F:A2:27:42:A8:21:17:0C:0D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849ABB497C43A64D163AC83C580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/558cd0b8-faa3-3998-acb5-de42660f361a.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 30036 IP address blocks: 192.119.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:97:c4:3a:64:d1:63:ac:83:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=5953f50c-1e9f-43c8-b80d-dd9c3ab5140e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:06:f9:6b:51:18:6c:07:db:29:a9:b8:c1: 5c:b7:a2:9d:52:ad:e4:0a:3c:91:a7:fb:3d:7f:5a: ef:1c:be:0f:55:d5:5e:d7:5c:ba:d6:08:73:a0:57: fe:af:f5:c6:e7:5a:72:79:33:f6:07:78:8c:a6:d7: c9:58:1b:53:1b:37:40:be:8b:29:62:1d:e8:64:2a: 8a:dc:ac:c5:95:6d:e7:be:d8:42:ee:ff:36:fa:1c: 43:f0:4e:47:db:2f:f3:56:a1:d2:16:35:fe:b3:82: cb:81:60:bc:d7:82:c0:69:e7:9e:4a:d4:34:25:c9: 60:10:6b:52:dc:4a:6b:1d:8d:5c:a1:95:11:fa:78: e0:f7:88:9e:05:f9:c4:3a:18:99:d7:61:d0:71:25: bc:04:22:c4:c6:b9:79:14:33:ea:73:45:6e:19:fc: 3d:c6:4c:de:5b:e2:cf:74:d9:3a:50:2c:7b:ce:f4: 9b:ee:0e:3c:d7:a7:f9:2f:4b:96:b3:3e:09:c0:4a: b4:3d:cf:52:6e:f9:ec:df:61:8c:a1:01:44:b6:3a: ad:67:bd:42:87:fa:fb:e4:15:6b:d1:e7:7b:8d:6b: 61:22:b6:61:52:1e:dc:a3:b7:38:89:90:da:24:e6: af:31:17:fe:4e:b7:a0:4a:64:dc:c0:84:4a:aa:ef: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:8B:30:5E:93:28:D8:49:46:BC:3F:A2:27:42:A8:21:17:0C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/558cd0b8-faa3-3998-acb5-de42660f361a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8b:e0:14:d3:ba:23:cc:66:38:d5:49:dc:cd:71:4e:b3:4d: 27:4b:c9:45:49:a0:4b:dc:89:9b:f5:55:54:60:b4:28:15:3e: f2:2b:6e:12:9c:6e:de:9a:35:86:20:c8:8d:53:fd:88:25:04: 8f:5b:01:cb:7a:bd:0e:d8:10:0c:0f:40:bb:cc:03:cb:f6:36: b7:01:af:41:8a:7a:7c:e1:73:e1:df:f2:0b:c1:d6:9f:17:65: fc:1e:bc:df:5b:12:71:56:64:85:75:53:07:23:2d:ea:53:09: 41:de:3a:74:f4:32:e7:71:6c:68:dc:ac:9d:d7:99:c9:3a:be: 64:d7:c2:3b:fc:7f:ab:c7:a8:78:4d:72:92:24:ff:5f:53:1b: 27:d5:0f:af:a5:e8:3a:ab:94:03:da:76:f6:5c:2a:69:32:8b: 5b:89:db:34:b2:a2:4c:93:1e:ab:50:e7:1c:7c:3f:bb:3d:fb: 7d:9a:d2:21:38:97:e1:fa:28:74:21:93:76:3f:28:da:bb:03: d7:32:c8:de:48:7c:a6:1c:28:4c:bd:05:71:d1:f4:85:61:92: 03:74:bd:45:b7:32:71:42:d7:7c:cb:9f:18:a9:e8:c2:a2:a6: 8d:ee:7a:52:f2:9e:7c:10:e7:79:fb:ea:4e:29:aa:bc:94:42: 63:4a:aa:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJfEOmTRY6yDxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NTk1M2Y1MGMtMWU5Zi00M2M4LWI4MGQtZGQ5YzNhYjUxNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp68G+WtRGGwH2ympuMFct6KdUq3kCjyRp/s9 f1rvHL4PVdVe11y61ghzoFf+r/XG51pyeTP2B3iMptfJWBtTGzdAvospYh3oZCqK 3KzFlW3nvthC7v82+hxD8E5H2y/zVqHSFjX+s4LLgWC814LAaeeeStQ0JclgEGtS 3EprHY1coZUR+njg94ieBfnEOhiZ12HQcSW8BCLExrl5FDPqc0VuGfw9xkzeW+LP dNk6UCx7zvSb7g4816f5L0uWsz4JwEq0Pc9Sbvns32GMoQFEtjqtZ71Ch/r75BVr 0ed7jWthIrZhUh7co7c4iZDaJOavMRf+TregSmTcwIRKqu9SEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIfizBekyjYSUa8P6InQqghFwwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTU4Y2QwYjgtZmFhMy0z OTk4LWFjYjUtZGU0MjY2MGYzNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqL4BTTuiPMZjjVSdzNcU6zTSdLyUVJoEvciZv1VVRgtCgVPvIrbhKc bt6aNYYgyI1T/YglBI9bAct6vQ7YEAwPQLvMA8v2NrcBr0GKenzhc+Hf8gvB1p8X ZfwevN9bEnFWZIV1UwcjLepTCUHeOnT0MudxbGjcrJ3Xmck6vmTXwjv8f6vHqHhN cpIk/19TGyfVD6+l6DqrlAPadvZcKmkyi1uJ2zSyokyTHqtQ5xx8P7s9+32a0iE4 l+H6KHQhk3Y/KNq7A9cyyN5IfKYcKEy9BXHR9IVhkgN0vUW3MnFC13zLnxip6MKi po3uelLynnwQ53n76k4pqryUQmNKqhE= -----END CERTIFICATE-----Generated at Thu May 15 01:49:53 2025 by rpki-client