$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa File: 6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa (raw, json) Hash identifier: loH+uNNIjS2hgGmVdMsyhNWQ26QszMUDI3dUjGlryow= Subject key identifier: 42:04:BD:13:EA:BE:40:4B:EA:4F:55:80:65:3C:49:67:DF:A0:F3:99 Certificate issuer: /CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db Certificate serial: 010D0C9F43285849B149F055CE5243CCC17C6D00 Authority key identifier: 82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 3066 IP address blocks: 192.148.252.0/23 maxlen: 23 192.148.252.0/24 maxlen: 24 192.148.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f0:55:ce:52:43:cc:c1:7c:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b12b3e41-6c25-4a5c-aa6c-b017f46ed6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:7b:1a:aa:f6:13:44:08:0d:3c:6e:95:4a: 02:c3:08:ce:33:0e:18:2d:35:63:6d:d8:2c:ba:c6: cf:94:d5:ef:35:49:99:26:5a:65:3e:1d:2c:7f:d3: 88:9f:4b:cd:e6:b6:63:e5:e5:09:a8:b4:f9:76:eb: ad:03:48:c3:66:50:2e:45:97:6e:b3:be:0e:a2:61: e2:ec:55:43:d1:61:41:d2:4a:f5:18:fa:4a:78:bd: 79:e2:c7:e4:b6:ee:01:97:d7:e5:cf:97:10:13:0c: 3a:3d:4e:56:c3:76:5e:cd:05:75:d6:f0:16:9f:f6: 57:09:fd:37:bf:7e:88:d6:3d:33:36:93:d2:df:01: 0d:bc:95:c1:33:3d:eb:f5:95:76:8d:a1:5a:ba:d5: 38:5a:92:2a:b2:88:49:1d:27:cb:ce:81:49:eb:7b: ba:df:1a:b2:fd:90:75:e2:08:f4:40:bf:35:30:a6: fd:40:f1:79:1b:01:cb:b1:50:6f:04:cf:5b:be:db: a8:f6:ce:54:ac:ec:41:55:da:6a:4b:04:19:c0:ed: 71:38:2f:82:a7:23:a0:38:aa:74:7a:3c:d8:00:40: 09:94:c9:05:03:f1:36:aa:76:d5:1f:1a:24:93:e7: 8d:66:d8:37:53:17:23:9c:d2:d6:d5:48:de:a8:76: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:04:BD:13:EA:BE:40:4B:EA:4F:55:80:65:3C:49:67:DF:A0:F3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl X509v3 Authority Key Identifier: keyid:82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer sbgp-ipAddrBlock: critical IPv4: 192.148.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c3:f2:72:f0:f6:51:01:82:12:0b:72:4c:b6:46:54:98:9c: 05:69:94:81:70:b9:ad:a3:2d:b1:f6:0e:dc:2d:ef:3a:1f:0c: f2:3a:b5:5c:de:ca:45:47:dd:7c:6d:8b:e4:13:1b:48:5a:98: a1:6f:84:cc:f6:b9:62:5c:7e:fd:05:33:b3:b0:cf:3e:4d:2e: 61:a9:25:5b:77:fe:a6:25:3e:99:d0:83:bc:77:14:b9:8e:f4: f5:99:4e:45:94:68:07:7e:0e:eb:ac:66:f8:36:60:b4:54:89: c3:b8:c8:c6:0c:ad:dd:fb:02:81:a2:86:bf:78:d6:2e:53:f9: a0:e9:a2:e3:05:76:e5:52:fc:78:c4:31:f2:30:51:bf:66:96: 49:b5:cf:57:73:72:fe:c7:91:da:64:dc:6b:80:62:b6:c7:37: cc:4c:2f:a9:12:12:7a:25:05:28:0d:d6:fc:72:1a:cf:a1:02: 62:f9:a8:da:45:31:da:96:fe:09:16:f9:81:10:18:39:c8:7f: fb:0b:8a:46:7e:fc:d5:2a:25:0e:3a:2f:df:8f:fa:4a:6e:28: 62:30:a1:d8:9c:88:dc:d3:22:34:5a:bd:59:b9:44:d7:01:a3: ae:ee:e4:83:c6:69:19:87:75:ba:fc:96:a5:c4:ee:ac:57:43: 2d:db:f6:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfBVzlJDzMF8bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTExZTBmNDMtN2Q4NC00ZWNjLWE2OTQtODczYjNkOTJh OGRiMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjEyYjNlNDEtNmMyNS00YTVjLWFhNmMtYjAxN2Y0NmVkNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ17Gqr2E0QIDTxulUoCwwjOMw4YLTVjbdgs usbPlNXvNUmZJlplPh0sf9OIn0vN5rZj5eUJqLT5duutA0jDZlAuRZdus74OomHi 7FVD0WFB0kr1GPpKeL154sfktu4Bl9flz5cQEww6PU5Ww3ZezQV11vAWn/ZXCf03 v36I1j0zNpPS3wENvJXBMz3r9ZV2jaFautU4WpIqsohJHSfLzoFJ63u63xqy/ZB1 4gj0QL81MKb9QPF5GwHLsVBvBM9bvtuo9s5UrOxBVdpqSwQZwO1xOC+CpyOgOKp0 ejzYAEAJlMkFA/E2qnbVHxokk+eNZtg3UxcjnNLW1UjeqHbZ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIEvRPqvkBL6k9VgGU8SWffoPOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMTFl MGY0My03ZDg0LTRlY2MtYTY5NC04NzNiM2Q5MmE4ZGIvNmYyMGEwNWQtN2NiMi0z OTI1LTgwMTUtMGQxMDBiYzg3YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTExZTBmNDMtN2Q4NC00ZWNjLWE2 OTQtODczYjNkOTJhOGRiL2UxMWUwZjQzLTdkODQtNGVjYy1hNjk0LTg3M2IzZDky YThkYi5jcmwwHwYDVR0jBBgwFoAUgmtHOUBlXkI/M9GOPXo9rLS58t4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMTFlMGY0My03ZDg0LTRlY2MtYTY5NC04NzNi M2Q5MmE4ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXD8nLw9lEBghILcky2RlSYnAVplIFwua2jLbH2Dtwt7zofDPI6tVze ykVH3Xxti+QTG0hamKFvhMz2uWJcfv0FM7Owzz5NLmGpJVt3/qYlPpnQg7x3FLmO 9PWZTkWUaAd+DuusZvg2YLRUicO4yMYMrd37AoGihr941i5T+aDpouMFduVS/HjE MfIwUb9mlkm1z1dzcv7Hkdpk3GuAYrbHN8xML6kSEnolBSgN1vxyGs+hAmL5qNpF MdqW/gkW+YEQGDnIf/sLikZ+/NUqJQ46L9+P+kpuKGIwodiciNzTIjRavVm5RNcB o67u5IPGaRmHdbr8lqXE7qxXQy3b9l4= -----END CERTIFICATE-----Generated at Mon Jun 30 05:38:05 2025 by rpki-client