$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa File: dab71fff-cbac-3e27-9fc7-f12b013a750a.roa (raw, json) Hash identifier: HQxC489NTsh52MwSIgdzHkrovZdYq931X3B9GCR5MP4= Subject key identifier: AE:6C:5E:12:37:26:84:26:1E:E6:55:24:5B:6F:B3:34:3E:2E:10:0C Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F43285849C79F60B56B9B901EC3BB1860 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 55178 IP address blocks: 192.230.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:60:b5:6b:9b:90:1e:c3:bb:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=d697b93e-751d-48e5-8f41-0bf28dbf0ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:97:f3:38:96:3e:f5:f4:46:56:8f:b0:c9: af:6a:93:f2:b2:30:d2:b6:dc:e6:7d:b1:24:3d:aa: 01:00:23:ad:92:3c:6f:bd:cd:90:80:78:22:9a:da: ea:e0:d2:72:59:5b:1b:fd:d7:54:3f:d0:18:f2:5d: e6:11:80:1a:e3:90:44:8a:fc:e1:98:58:d6:9d:a1: 0a:21:94:93:2f:9a:ac:9e:5d:85:90:d6:6f:28:ca: 28:3a:52:c3:2f:24:4b:79:16:73:a4:54:73:1d:55: ee:42:70:28:54:6b:54:79:ec:da:63:d0:5e:d5:5a: 23:6e:24:c7:da:a4:ea:0e:02:9c:3f:c9:3a:5b:a6: 1f:25:b8:a2:e5:9d:c7:23:08:95:38:c3:93:2b:8b: ff:24:a9:33:8c:61:31:78:f3:5f:3b:c6:2e:1e:02: 82:1e:80:18:cb:0b:7c:c0:c1:b0:25:d0:95:17:bb: 0d:10:4f:7e:71:e6:ac:4b:2b:9a:a3:63:55:17:e9: a7:02:18:de:36:cb:ac:7c:35:70:a3:07:76:d9:a1: 5d:2b:13:de:84:ab:c7:dc:f6:34:54:3a:02:ae:b5: 09:43:b4:14:2d:90:52:24:5d:79:df:60:11:ae:91: bb:6f:8c:8e:4e:f2:ac:2e:4e:47:1c:78:ac:77:41: 79:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6C:5E:12:37:26:84:26:1E:E6:55:24:5B:6F:B3:34:3E:2E:10:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:76:05:a5:14:77:61:a7:75:fc:b1:4e:8f:d4:c9:d8:d7:3b: 46:9f:0d:d4:15:06:93:33:b5:38:a5:2b:d9:f8:91:97:b1:cf: fa:3d:05:d6:2c:25:cc:84:55:14:d8:d3:43:d7:69:36:27:bd: 98:af:d4:a1:44:ff:a3:a7:6a:01:58:f1:0a:b5:1b:7e:7b:7f: 06:52:c2:00:93:10:ee:74:4b:8d:2f:c7:b0:46:78:32:c5:c7: fe:32:99:a9:94:4a:e8:38:0e:55:39:8a:e8:94:84:75:55:aa: 91:2a:1f:48:70:a7:08:f3:71:d3:8a:8f:e2:5e:79:ae:9e:e5: 0d:09:73:d6:dc:55:fb:c1:36:a6:c1:c5:49:e5:85:c2:2b:8d: ec:f8:4e:b5:24:87:21:c7:4f:04:87:86:07:1b:fb:07:fe:17: 97:18:74:69:75:7e:cc:35:80:d0:f5:0d:2b:06:e5:f5:ad:e5: e4:30:9e:c4:2e:04:d9:b9:9c:d3:8d:93:72:fa:c9:82:fe:95: 71:52:10:f9:ce:af:f6:a2:27:6b:22:3a:6e:e2:83:05:c6:91: 48:63:37:b6:34:4b:09:0d:a8:99:a8:82:8a:6c:dc:dc:f4:af: 53:a7:4f:e6:4d:db:26:be:9f:0e:65:4b:ec:31:b3:43:b9:79: 8e:26:8f:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2C1a5uQHsO7GGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZDY5N2I5M2UtNzUxZC00OGU1LThmNDEtMGJmMjhkYmYwYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8mX8ziWPvX0RlaPsMmvapPysjDSttzmfbEk PaoBACOtkjxvvc2QgHgimtrq4NJyWVsb/ddUP9AY8l3mEYAa45BEivzhmFjWnaEK IZSTL5qsnl2FkNZvKMooOlLDLyRLeRZzpFRzHVXuQnAoVGtUeezaY9Be1VojbiTH 2qTqDgKcP8k6W6YfJbii5Z3HIwiVOMOTK4v/JKkzjGExePNfO8YuHgKCHoAYywt8 wMGwJdCVF7sNEE9+ceasSyuao2NVF+mnAhjeNsusfDVwowd22aFdKxPehKvH3PY0 VDoCrrUJQ7QULZBSJF1532ARrpG7b4yOTvKsLk5HHHisd0F5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5sXhI3JoQmHuZVJFtvszQ+LhAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvZGFiNzFmZmYtY2JhYy0z ZTI3LTlmYzctZjEyYjAxM2E3NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh2BaUUd2GndfyxTo/UydjXO0afDdQVBpMztTilK9n4kZexz/o9BdYs JcyEVRTY00PXaTYnvZiv1KFE/6OnagFY8Qq1G357fwZSwgCTEO50S40vx7BGeDLF x/4ymamUSug4DlU5iuiUhHVVqpEqH0hwpwjzcdOKj+Jeea6e5Q0Jc9bcVfvBNqbB xUnlhcIrjez4TrUkhyHHTwSHhgcb+wf+F5cYdGl1fsw1gND1DSsG5fWt5eQwnsQu BNm5nNONk3L6yYL+lXFSEPnOr/aiJ2siOm7igwXGkUhjN7Y0SwkNqJmogops3Nz0 r1OnT+ZN2ya+nw5lS+wxs0O5eY4mjx4= -----END CERTIFICATE-----Generated at Fri May 9 23:46:40 2025 by rpki-client