$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa File: 5965b031-ef34-3104-aae4-6e476d645778.roa (raw, json) Hash identifier: imMBB6Jp+fG9SZRZs/gWEbME3Mv8d0mP0uto9eA2itw= Subject key identifier: 65:C0:BE:AC:E2:CF:61:19:2B:23:50:32:C8:17:7E:61:30:A1:E2:E7 Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F432858490B4C26CFD77932AC35AAB300 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:26:cf:d7:79:32:ac:35:aa:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=63c7ced0-842a-476b-90a6-a9e95f48a5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:0b:6b:5e:2e:09:78:0e:1b:dd:55:18:1d: 0e:73:5b:af:00:77:cc:8a:9c:34:ee:67:60:88:95: 7a:e2:46:1a:76:08:fa:75:e4:8d:67:fd:38:e2:e4: 4e:b0:63:e9:2a:c5:9c:85:72:66:a3:f3:3b:5d:db: 0a:e2:a6:dd:d7:d3:75:f7:a2:16:36:8b:06:9c:86: 34:51:cc:1c:a0:e9:bb:e9:f6:c9:c5:46:0f:77:5d: 1f:f6:9e:eb:e0:e9:4e:c9:3a:62:6f:c1:f3:ff:64: 5f:89:38:21:95:25:12:bc:10:ee:63:5b:82:c7:21: e9:25:78:bb:1a:2e:46:c2:2f:92:1d:0b:43:98:34: 4d:12:36:87:31:79:b7:f6:71:9b:a6:ef:6e:ef:e3: a3:80:8e:e5:5b:67:da:01:bb:fa:59:70:03:7b:b7: 00:b2:49:14:f1:03:5d:ef:96:36:b4:bb:c3:13:11: 8b:78:ba:9f:8b:ff:53:2a:3c:a8:38:c9:00:19:ab: 2b:c9:eb:92:09:2d:81:5b:37:11:17:64:78:a4:5b: bf:be:72:70:2a:44:d0:19:67:34:38:36:4b:f9:e2: 37:e9:54:c5:b5:a7:79:b3:db:ed:fd:f1:7a:b5:f9: 35:7a:f3:17:af:5c:18:d1:67:2c:0f:81:3b:20:53: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C0:BE:AC:E2:CF:61:19:2B:23:50:32:C8:17:7E:61:30:A1:E2:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:23:1d:40:6c:6f:28:7d:8b:66:5d:e4:6d:19:86:6d:f7:81: e8:34:e3:07:70:c9:4f:e2:ee:7d:41:de:1b:8a:a8:d5:fe:1a: b2:d8:61:cf:07:9c:0c:f8:26:4b:b7:01:be:9c:f7:1c:72:33: b4:42:8e:64:e8:77:c4:ee:4c:ed:30:ef:4f:c9:01:51:af:e3: 37:22:b2:d2:10:3f:45:7c:0e:99:ec:09:03:d6:18:9e:4d:25: 98:fd:34:cf:4c:8e:f6:36:0b:5a:79:65:c2:f6:f6:5f:cd:0e: fc:65:b5:aa:b1:fb:0c:40:72:c9:d7:76:c3:b9:77:3a:17:e9: f1:74:13:3a:78:6a:ee:51:2e:e1:ce:43:9c:e2:bf:34:ca:ad: c0:6d:25:67:fb:cd:25:86:a5:5e:67:9c:d2:63:50:cc:b1:38: bf:cb:aa:3d:a3:4c:39:28:82:87:32:6c:68:45:8d:28:f8:3f: fb:94:d1:27:c9:8f:ca:10:4a:ca:aa:3d:9b:15:ad:28:a0:a1: f7:d4:3f:61:86:b0:8b:e7:5a:53:05:a1:99:f6:e4:67:23:7d: c7:d0:61:a7:19:f7:d3:f7:e9:7d:4e:f1:e1:dd:3f:57:59:b9: 83:d4:1a:e5:a1:3d:78:1a:47:06:60:30:ad:49:3f:56:79:4c: 2b:71:7f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCbP13kyrDWqswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NjNjN2NlZDAtODQyYS00NzZiLTkwYTYtYTllOTVmNDhhNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmQLa14uCXgOG91VGB0Oc1uvAHfMipw07mdg iJV64kYadgj6deSNZ/044uROsGPpKsWchXJmo/M7XdsK4qbd19N196IWNosGnIY0 UcwcoOm76fbJxUYPd10f9p7r4OlOyTpib8Hz/2RfiTghlSUSvBDuY1uCxyHpJXi7 Gi5Gwi+SHQtDmDRNEjaHMXm39nGbpu9u7+OjgI7lW2faAbv6WXADe7cAskkU8QNd 75Y2tLvDExGLeLqfi/9TKjyoOMkAGasryeuSCS2BWzcRF2R4pFu/vnJwKkTQGWc0 ODZL+eI36VTFtad5s9vt/fF6tfk1evMXr1wY0WcsD4E7IFN0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXAvqziz2EZKyNQMsgXfmEwoeLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvNTk2NWIwMzEtZWYzNC0z MTA0LWFhZTQtNmU0NzZkNjQ1Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQjHUBsbyh9i2Zd5G0Zhm33geg04wdwyU/i7n1B3huKqNX+GrLYYc8H nAz4Jku3Ab6c9xxyM7RCjmTod8TuTO0w70/JAVGv4zcistIQP0V8DpnsCQPWGJ5N JZj9NM9MjvY2C1p5ZcL29l/NDvxltaqx+wxAcsnXdsO5dzoX6fF0Ezp4au5RLuHO Q5zivzTKrcBtJWf7zSWGpV5nnNJjUMyxOL/Lqj2jTDkogocybGhFjSj4P/uU0SfJ j8oQSsqqPZsVrSigoffUP2GGsIvnWlMFoZn25GcjfcfQYacZ99P36X1O8eHdP1dZ uYPUGuWhPXgaRwZgMK1JP1Z5TCtxf5A= -----END CERTIFICATE-----Generated at Mon May 12 10:25:47 2025 by rpki-client