$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa File: 82081b1c-a2de-357f-81fd-69a40673670c.roa (raw, json) Hash identifier: J+Srb9QNunFlkNeXNpP4Rf1Y706bAhOGb3y9CYuAfig= Subject key identifier: 35:24:41:30:7D:6B:0D:03:6C:CE:5D:70:0C:D4:50:97:2F:FA:BB:A3 Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F432858490B4C18DE9A147CB559CDA370 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 160 IP address blocks: 192.5.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:18:de:9a:14:7c:b5:59:cd:a3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=fd665d9b-2849-460b-ac2d-31fde7ccb707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:22:47:d2:1d:a0:bf:75:02:1d:8e:b4:d1: ea:13:0c:0f:94:a8:8c:07:14:f4:e5:2c:1f:f0:2e: eb:0d:f9:50:2f:dd:2b:68:8e:b4:6f:3d:be:3d:00: cb:25:54:38:07:82:f2:39:6c:75:b3:cd:0f:01:1b: 13:75:b6:dd:96:7e:5c:eb:43:19:c0:05:ee:e1:f6: ad:0b:ff:fb:d9:b4:80:ed:d6:37:ca:9b:c2:f7:11: 81:26:15:06:18:9e:b3:33:83:ad:9f:f8:9e:69:6e: b3:74:a8:60:0d:bb:77:ca:02:e8:8b:4b:2e:32:33: bf:b0:e2:4f:49:39:15:b4:3d:38:c1:65:05:cd:73: 36:5b:e3:ba:20:b5:3c:ac:1b:fb:1f:44:8f:9d:e3: ee:08:0c:6f:6d:ba:42:79:4f:51:f4:c7:19:26:ef: 86:5c:c6:5d:38:26:1b:64:00:13:35:c7:79:56:81: f3:e7:9d:f7:d7:0f:7c:cd:f8:14:c3:22:a3:fa:32: e9:32:e2:3a:6f:e9:9a:ed:00:d2:0e:f1:4a:73:2d: 79:45:4c:a8:bd:8b:f4:0d:a4:1a:e5:7b:3b:76:c1: 93:0d:67:32:cc:c1:03:34:f2:a1:c3:64:8a:50:ca: 46:5e:36:cf:ed:7b:20:92:a2:e4:71:33:39:ae:a9: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:41:30:7D:6B:0D:03:6C:CE:5D:70:0C:D4:50:97:2F:FA:BB:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 192.5.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:43:a7:d2:e3:24:70:77:8a:0b:38:94:23:1e:73:29:09:54: 9e:e1:1c:b8:15:f9:f8:91:74:a1:18:7e:b9:e1:4f:90:3c:52: 04:e2:e2:1a:ac:ee:0f:8e:71:e0:f4:5a:a5:64:df:c3:ec:fb: 05:50:2c:8e:a6:d8:c6:ae:52:9d:f4:71:6e:14:bc:84:64:eb: f4:85:23:c8:75:0e:de:17:a2:05:c1:34:74:1c:4d:75:54:f3: 8c:93:60:e3:d6:b0:e3:00:50:27:92:99:71:d5:16:2c:a8:5a: 2e:34:7b:16:06:87:5e:1c:7b:c3:2f:f9:a5:de:6f:5e:65:89: ab:fd:33:90:cd:de:84:16:1e:ac:67:06:a4:52:05:43:09:c0: 9d:a0:8d:17:a0:4e:fc:6f:ba:25:62:03:1f:0f:92:d9:83:6f: 2a:6d:75:79:01:d6:b7:2b:19:82:c6:0c:68:fc:f0:83:0a:1e: db:12:1e:01:52:de:08:6a:98:c5:cc:dd:4a:f9:5f:39:39:c7: 2b:94:60:3c:5e:c8:8e:7c:f9:72:e9:13:9a:f9:79:00:7f:30: c4:d8:49:ac:8f:83:ed:2f:88:90:aa:1e:93:05:a0:8b:7d:b3: 1c:2b:9f:af:5e:57:4c:3f:94:37:29:53:54:d7:e5:64:b3:21: 90:6e:76:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBjemhR8tVnNo3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZmQ2NjVkOWItMjg0OS00NjBiLWFjMmQtMzFmZGU3Y2NiNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxciR9IdoL91Ah2OtNHqEwwPlKiMBxT05Swf 8C7rDflQL90raI60bz2+PQDLJVQ4B4LyOWx1s80PARsTdbbdln5c60MZwAXu4fat C//72bSA7dY3ypvC9xGBJhUGGJ6zM4Otn/ieaW6zdKhgDbt3ygLoi0suMjO/sOJP STkVtD04wWUFzXM2W+O6ILU8rBv7H0SPnePuCAxvbbpCeU9R9McZJu+GXMZdOCYb ZAATNcd5VoHz55331w98zfgUwyKj+jLpMuI6b+ma7QDSDvFKcy15RUyovYv0DaQa 5Xs7dsGTDWcyzMEDNPKhw2SKUMpGXjbP7XsgkqLkcTM5rqlu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUkQTB9aw0DbM5dcAzUUJcv+rujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvODIwODFiMWMtYTJkZS0z NTdmLTgxZmQtNjlhNDA2NzM2NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5Dp9LjJHB3igs4lCMecykJVJ7hHLgV+fiRdKEYfrnhT5A8UgTi4hqs 7g+OceD0WqVk38Ps+wVQLI6m2MauUp30cW4UvIRk6/SFI8h1Dt4XogXBNHQcTXVU 84yTYOPWsOMAUCeSmXHVFiyoWi40exYGh14ce8Mv+aXeb15liav9M5DN3oQWHqxn BqRSBUMJwJ2gjRegTvxvuiViAx8PktmDbyptdXkB1rcrGYLGDGj88IMKHtsSHgFS 3ghqmMXM3Ur5Xzk5xyuUYDxeyI58+XLpE5r5eQB/MMTYSayPg+0viJCqHpMFoIt9 sxwrn69eV0w/lDcpU1TX5WSzIZBudgE= -----END CERTIFICATE-----Generated at Fri May 9 22:06:27 2025 by rpki-client