$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/af148437-f470-3c6d-8f10-fb37aabe9f71.roa File: af148437-f470-3c6d-8f10-fb37aabe9f71.roa (raw, json) Hash identifier: MlikrNVjF+sqtWUsH3uZZubUsVg9GKhkU/RT+ZvJkgw= Subject key identifier: 65:16:DC:F5:FF:4D:2B:7C:D4:04:98:FB:88:C2:B8:EC:72:2C:0A:EB Certificate issuer: /CN=e085fa70-312c-4786-b587-bdb5fc87c36e Certificate serial: 010D0C9F43285848F4F697CB69404CC3DB6B9C88 Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/af148437-f470-3c6d-8f10-fb37aabe9f71.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 32098 IP address blocks: 192.34.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:97:cb:69:40:4c:c3:db:6b:9c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b80ac6bf-b430-4e4e-9662-1573081c196f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:18:9a:1f:3f:5e:d4:05:fc:17:8a:e3:c9:eb: e4:eb:b5:5a:09:fa:5a:27:a6:4b:26:f3:a9:04:5c: 14:f8:1a:99:87:f5:90:af:8f:8f:0e:9a:85:28:e2: bf:9d:2b:17:81:99:8f:81:06:92:ed:4b:83:1e:ee: bd:ad:85:af:4b:d4:6a:ad:35:09:64:0f:0c:56:c8: 02:3a:ee:cd:a4:0e:f0:b1:79:99:e6:0d:c3:9b:34: 6f:11:af:97:61:c4:be:59:53:c8:a0:44:ca:3b:d8: 04:09:8e:af:d9:a3:e4:5e:d2:2b:2a:31:62:50:c6: c5:6b:14:c5:cc:d4:d0:8c:eb:f5:d4:73:76:1a:c3: c9:3e:a8:83:a2:76:33:28:6a:17:91:a9:2b:ba:bf: 6b:b6:4a:65:76:03:2c:ac:f1:37:7c:5f:92:67:90: 92:91:b1:ab:c1:4e:b2:9c:3a:cc:16:72:9f:1b:0e: d3:2f:61:ea:63:de:7b:32:4b:81:bd:f9:a8:df:0b: fa:02:4c:0c:7e:7a:e9:d2:cb:a3:0b:93:9c:9d:75: d4:1c:9b:74:09:be:91:16:67:49:70:eb:8b:8c:09: 16:bd:9a:f6:bd:29:3d:5a:8b:cd:22:7b:ff:b2:56: cf:bd:d8:11:0d:40:da:24:b9:c6:39:b5:65:c3:65: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:16:DC:F5:FF:4D:2B:7C:D4:04:98:FB:88:C2:B8:EC:72:2C:0A:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/af148437-f470-3c6d-8f10-fb37aabe9f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl X509v3 Authority Key Identifier: keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer sbgp-ipAddrBlock: critical IPv4: 192.34.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:cb:f3:4f:ea:09:31:74:61:84:9b:23:f6:56:76:18:fa:64: f5:da:d1:aa:8a:8e:be:af:76:6d:03:52:72:14:75:80:28:d1: 40:50:27:9b:3d:6d:a1:d6:bf:68:42:6f:66:33:7b:f1:17:fc: 2e:d0:cc:97:97:0b:90:df:45:34:dd:d0:81:19:f6:7f:ea:65: 3c:b3:0e:0b:84:e9:76:f1:e1:f7:e8:a3:d7:d0:ec:45:dd:cb: 11:77:b5:3f:e6:8b:b8:2e:eb:12:81:da:c3:d1:e3:59:06:e7: a6:05:60:4f:9e:24:c8:47:a7:96:d0:a4:49:55:9f:8d:e8:6a: 40:4a:b1:72:2c:92:fa:4c:10:7a:55:6b:ec:99:57:e2:2e:c9: 58:9c:38:23:a0:8e:32:02:8b:ae:f6:e0:7f:b9:cb:ba:84:5a: 4f:ec:3f:d8:02:37:13:2f:2d:58:cd:36:7a:38:48:3a:c4:8f: 96:2b:c8:6c:87:af:ac:65:1c:8f:f0:bd:01:ce:09:68:99:d1: 72:18:28:2f:a8:35:62:0d:c0:3e:c9:a8:af:c3:20:3b:3b:c2: b0:95:bc:e6:88:cf:57:42:84:c1:62:e9:cd:2b:b9:8c:02:8c: 96:18:64:88:26:30:22:75:47:9f:35:3c:eb:17:d5:ad:ae:fd: 57:d1:c9:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pfLaUBMw9trnIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA4NWZhNzAtMzEyYy00Nzg2LWI1ODctYmRiNWZjODdj MzZlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjgwYWM2YmYtYjQzMC00ZTRlLTk2NjItMTU3MzA4MWMxOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhiaHz9e1AX8F4rjyevk67VaCfpaJ6ZLJvOp BFwU+BqZh/WQr4+PDpqFKOK/nSsXgZmPgQaS7UuDHu69rYWvS9RqrTUJZA8MVsgC Ou7NpA7wsXmZ5g3DmzRvEa+XYcS+WVPIoETKO9gECY6v2aPkXtIrKjFiUMbFaxTF zNTQjOv11HN2GsPJPqiDonYzKGoXkakrur9rtkpldgMsrPE3fF+SZ5CSkbGrwU6y nDrMFnKfGw7TL2HqY957MkuBvfmo3wv6AkwMfnrp0sujC5OcnXXUHJt0Cb6RFmdJ cOuLjAkWvZr2vSk9WovNInv/slbPvdgRDUDaJLnGObVlw2W3mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUW3PX/TSt81ASY+4jCuOxyLArrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1 ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4N2MzNmUvYWYxNDg0MzctZjQ3MC0z YzZkLThmMTAtZmIzN2FhYmU5ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTA4NWZhNzAtMzEyYy00Nzg2LWI1 ODctYmRiNWZjODdjMzZlL2UwODVmYTcwLTMxMmMtNDc4Ni1iNTg3LWJkYjVmYzg3 YzM2ZS5jcmwwHwYDVR0jBBgwFoAU+wFZJiVq4yf4fvzRnFfiezQbWG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1 ZmM4N2MzNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANzL80/qCTF0YYSbI/ZWdhj6ZPXa0aqKjr6vdm0DUnIUdYAo0UBQJ5s9 baHWv2hCb2Yze/EX/C7QzJeXC5DfRTTd0IEZ9n/qZTyzDguE6Xbx4ffoo9fQ7EXd yxF3tT/mi7gu6xKB2sPR41kG56YFYE+eJMhHp5bQpElVn43oakBKsXIskvpMEHpV a+yZV+IuyVicOCOgjjICi6724H+5y7qEWk/sP9gCNxMvLVjNNno4SDrEj5YryGyH r6xlHI/wvQHOCWiZ0XIYKC+oNWINwD7JqK/DIDs7wrCVvOaIz1dChMFi6c0ruYwC jJYYZIgmMCJ1R581POsX1a2u/VfRyb4= -----END CERTIFICATE-----Generated at Sun May 11 16:54:42 2025 by rpki-client