$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa File: daab1a35-5ba6-3617-8f32-534a11d5dd38.roa (raw, json) Hash identifier: c2fCiNHl1y9HAgx0aAqpf6Jk62DjdusZRKxzbPQxVfk= Subject key identifier: 79:06:59:AA:DF:A3:FF:42:BF:ED:56:DE:3E:DE:9D:F5:C1:06:31:CB Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F432858498769B4A111BA299DBC55DB80 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 192.84.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b4:a1:11:ba:29:9d:bc:55:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=9ea6fb6b-0c7e-4e90-a5c7-651c2c1ea1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:00:6f:4f:72:a5:dc:84:d2:08:cf:7c:74: 03:d3:08:94:0a:1d:37:f2:73:b1:14:1d:17:8e:f2: 82:55:83:15:88:1a:15:62:be:66:87:a4:d0:be:f8: 26:25:d3:44:76:0d:69:99:e8:3a:fd:2b:18:4a:fd: 7f:07:03:0f:9b:a4:7f:65:e3:a4:3e:e6:a5:7e:12: 44:31:a8:08:57:34:0f:62:d9:1b:b8:0e:36:3e:6e: 1c:78:bf:71:63:74:04:bb:75:86:70:3f:bf:9c:32: 74:97:91:aa:df:4f:59:91:c4:03:fb:65:cb:ec:e1: 3e:29:12:37:e0:d5:8f:dc:62:8c:15:ed:42:84:e5: f1:cc:88:34:2e:64:04:a4:6c:c9:28:6c:7f:ed:a5: 7f:b6:8f:23:8a:86:91:f4:a5:65:e2:70:e5:e0:91: 8b:4e:12:cd:55:4f:49:c5:11:b1:62:1e:2c:4b:1f: ed:de:05:22:47:5f:9d:d4:14:ab:4f:17:25:51:a7: c9:0a:26:40:6a:72:27:22:2d:6e:5f:bf:5a:bd:bd: 6e:5e:12:bd:fb:f9:fe:ee:03:df:97:d1:8a:00:81: aa:d2:cb:06:db:b5:a4:aa:de:d4:85:d5:9b:8f:be: 13:99:36:0a:34:7c:18:f7:d4:87:23:59:e8:04:d3: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:06:59:AA:DF:A3:FF:42:BF:ED:56:DE:3E:DE:9D:F5:C1:06:31:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 192.84.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9f:9a:e7:eb:4d:3e:d5:93:86:74:5b:49:0b:78:2d:d3:4d: 6a:07:8e:11:54:ab:86:95:f3:d5:89:be:53:85:ca:c1:53:6c: 42:c8:83:0d:ff:62:5d:e8:d8:ed:1e:a6:6d:e1:aa:28:fe:20: 94:d0:a5:12:33:2e:53:c9:ac:41:f7:0a:59:8d:ac:b4:5e:f1: 5b:f2:c4:f5:3b:14:67:8e:55:88:ef:e7:98:d9:88:f9:f8:15: a0:03:92:19:d7:58:ce:aa:88:7f:0e:f1:42:2b:6e:e3:93:4e: 80:f9:aa:06:95:4c:0b:97:9d:4c:60:f7:80:f7:ac:6b:82:ac: a5:50:b5:4b:a5:b7:6d:b6:af:aa:9f:71:7a:33:1b:dc:29:7b: 13:17:1b:6e:08:bf:29:c0:e3:7d:5b:9f:5e:0a:9e:dd:37:78: e0:1f:f5:8b:6f:9b:2a:c2:36:eb:4a:d6:e6:7c:92:1e:aa:ba: 25:e3:c5:67:bf:1b:cf:65:e2:c2:94:2e:f6:1d:8a:7b:e7:4d: d9:cf:4e:a9:d6:df:67:dd:cb:47:f3:dd:3a:b0:7c:b3:b6:3c: 9e:9b:e5:b0:82:07:fe:84:04:91:38:01:88:86:82:3d:6e:d1: 09:ad:65:10:59:cc:9e:13:54:21:2c:b6:35:f1:05:46:20:82: db:c1:13:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabShEbopnbxV24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OWVhNmZiNmItMGM3ZS00ZTkwLWE1YzctNjUxYzJjMWVhMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjIAb09ypdyE0gjPfHQD0wiUCh038nOxFB0X jvKCVYMViBoVYr5mh6TQvvgmJdNEdg1pmeg6/SsYSv1/BwMPm6R/ZeOkPualfhJE MagIVzQPYtkbuA42Pm4ceL9xY3QEu3WGcD+/nDJ0l5Gq309ZkcQD+2XL7OE+KRI3 4NWP3GKMFe1ChOXxzIg0LmQEpGzJKGx/7aV/to8jioaR9KVl4nDl4JGLThLNVU9J xRGxYh4sSx/t3gUiR1+d1BSrTxclUafJCiZAanInIi1uX79avb1uXhK9+/n+7gPf l9GKAIGq0ssG27Wkqt7UhdWbj74TmTYKNHwY99SHI1noBNPtHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkGWarfo/9Cv+1W3j7enfXBBjHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvZGFhYjFhMzUtNWJhNi0z NjE3LThmMzItNTM0YTExZDVkZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFTnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABufmufrTT7Vk4Z0W0kLeC3TTWoHjhFUq4aV89WJvlOFysFTbELIgw3/ Yl3o2O0epm3hqij+IJTQpRIzLlPJrEH3ClmNrLRe8VvyxPU7FGeOVYjv55jZiPn4 FaADkhnXWM6qiH8O8UIrbuOTToD5qgaVTAuXnUxg94D3rGuCrKVQtUult222r6qf cXozG9wpexMXG24IvynA431bn14Knt03eOAf9YtvmyrCNutK1uZ8kh6quiXjxWe/ G89l4sKULvYdinvnTdnPTqnW32fdy0fz3TqwfLO2PJ6b5bCCB/6EBJE4AYiGgj1u 0QmtZRBZzJ4TVCEstjXxBUYggtvBE3U= -----END CERTIFICATE-----Generated at Sat May 10 20:56:17 2025 by rpki-client