$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa File: d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa (raw, json) Hash identifier: xNljlfnqZaPXY28ZtT6IZtoBBXtDkwCnFlR3zu0db4M= Subject key identifier: 38:A0:81:6C:38:DC:4F:E3:0F:EF:08:4F:F0:85:72:37:B2:55:AD:1F Certificate issuer: /CN=1fd804af-5006-4871-96a7-e7dfad97b8b5 Certificate serial: 010D0C9F43285849B32D9B92374DDAF555EAB480 Authority key identifier: 74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa Signing time: Wed 30 Apr 2025 17:15:25 +0000 ROA not before: Wed 30 Apr 2025 17:15:25 +0000 ROA not after: Tue 29 Jul 2025 17:15:25 +0000 asID: 395036 IP address blocks: 192.225.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:2d:9b:92:37:4d:da:f5:55:ea:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd804af-5006-4871-96a7-e7dfad97b8b5 Validity Not Before: Apr 30 17:15:25 2025 GMT Not After : Jul 29 17:15:25 2025 GMT Subject: CN=d1745f83-2361-4328-b0f8-8cd3e90703d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:69:e4:2b:84:18:83:47:00:bd:c3:93:44: f0:28:9f:1a:3f:82:f6:d8:c6:43:c2:05:17:0d:1c: ea:49:43:20:18:33:d8:99:74:b5:31:bb:a1:45:bd: 55:e0:49:c0:9e:f5:00:61:a0:44:e6:4d:35:13:ef: e6:8a:42:79:61:e7:15:0b:a1:a4:1c:4c:df:31:bf: 6e:47:24:b3:17:51:b1:54:e2:1d:f2:ec:84:29:ea: 97:8a:88:41:a7:83:a5:30:18:bd:5a:4e:e5:aa:2a: c7:47:96:d3:9f:df:c0:9c:db:ab:75:5d:ec:d1:f7: 6d:c4:1b:46:46:0b:d3:8d:ac:2c:b7:a4:43:ea:b7: 58:88:79:a7:67:d9:b0:70:b8:61:99:be:87:cf:b0: 70:df:db:79:86:61:07:d9:90:ad:ac:ee:1d:2f:ad: 1a:18:e2:16:1c:71:8a:fa:a7:97:07:8a:02:69:10: 94:60:20:df:e5:4a:99:24:21:4f:8b:c9:6a:bf:92: d3:ad:a4:f8:dc:f8:f7:e6:63:ed:16:36:ec:15:38: b3:4b:7b:ea:63:fa:d9:67:b4:5a:35:37:6e:52:1d: 42:48:90:54:bc:f8:cd:f2:60:0e:1c:ff:c0:a3:d0: de:6c:ce:0a:1a:f4:a4:f6:96:77:9c:54:1a:b1:55: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A0:81:6C:38:DC:4F:E3:0F:EF:08:4F:F0:85:72:37:B2:55:AD:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl X509v3 Authority Key Identifier: keyid:74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer sbgp-ipAddrBlock: critical IPv4: 192.225.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0d:df:f1:7a:98:6f:b0:0c:f8:22:57:41:28:8f:67:31:a1: e8:c6:ac:a1:63:9b:f3:44:4b:7f:f2:ba:0e:2c:5e:6f:3f:77: 53:35:51:6c:b1:29:4a:b5:0a:38:f3:77:85:df:73:66:19:65: 93:b6:b9:7c:d0:1a:f2:9a:d9:86:42:c1:6d:c9:68:2f:50:36: 63:d6:86:aa:2c:f2:79:f4:c9:fe:40:d6:18:35:82:8c:03:71: 8d:88:4e:8e:8a:42:8b:82:c9:de:2c:6c:66:fb:f0:1a:62:8b: e2:b1:64:5c:a6:d0:e8:3d:ae:b1:8c:2d:1e:ee:77:18:ef:7c: dc:d0:c5:d7:82:fb:40:73:05:57:6c:db:f7:8f:fa:e0:06:64: 28:78:9f:c7:86:e2:19:99:73:a2:bd:00:5f:d4:5f:fd:8d:bf: 97:82:c6:f6:8c:cf:09:47:3f:20:3d:b3:a7:2c:08:aa:97:ad: 2d:1e:32:9f:c5:6f:02:f5:3e:5b:70:0e:2f:cc:17:17:e3:28: d8:07:b1:d4:41:68:17:e0:a0:06:04:91:08:bc:81:64:4e:b5: d2:db:71:7f:85:d0:2e:d4:86:3a:6f:eb:72:ee:58:8c:d7:79: 4c:3d:2b:27:29:b9:18:d4:71:42:39:39:ea:8f:c4:cc:fd:44: 7d:40:c9:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmzLZuSN03a9VXqtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZkODA0YWYtNTAwNi00ODcxLTk2YTctZTdkZmFkOTdi OGI1MB4XDTI1MDQzMDE3MTUyNVoXDTI1MDcyOTE3MTUyNVowLzEtMCsGA1UEAxMk ZDE3NDVmODMtMjM2MS00MzI4LWIwZjgtOGNkM2U5MDcwM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Jp5CuEGINHAL3Dk0TwKJ8aP4L22MZDwgUX DRzqSUMgGDPYmXS1MbuhRb1V4EnAnvUAYaBE5k01E+/mikJ5YecVC6GkHEzfMb9u RySzF1GxVOId8uyEKeqXiohBp4OlMBi9Wk7lqirHR5bTn9/AnNurdV3s0fdtxBtG RgvTjawst6RD6rdYiHmnZ9mwcLhhmb6Hz7Bw39t5hmEH2ZCtrO4dL60aGOIWHHGK +qeXB4oCaRCUYCDf5UqZJCFPi8lqv5LTraT43Pj35mPtFjbsFTizS3vqY/rZZ7Ra NTduUh1CSJBUvPjN8mAOHP/Ao9DebM4KGvSk9pZ3nFQasVXg1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiggWw43E/jD+8IT/CFcjeyVa0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmQ4 MDRhZi01MDA2LTQ4NzEtOTZhNy1lN2RmYWQ5N2I4YjUvZDljNGY0OTktOGRmYi0z ZmU5LThmMmUtNmFjNzQzNmY2MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZkODA0YWYtNTAwNi00ODcxLTk2 YTctZTdkZmFkOTdiOGI1LzFmZDgwNGFmLTUwMDYtNDg3MS05NmE3LWU3ZGZhZDk3 YjhiNS5jcmwwHwYDVR0jBBgwFoAUdELMmvH4xJQrc6BuHC931ugwvT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmQ4MDRhZi01MDA2LTQ4NzEtOTZhNy1lN2Rm YWQ5N2I4YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwN3/F6mG+wDPgiV0Eoj2cxoejGrKFjm/NES3/yug4sXm8/d1M1UWyx KUq1Cjjzd4Xfc2YZZZO2uXzQGvKa2YZCwW3JaC9QNmPWhqos8nn0yf5A1hg1gowD cY2ITo6KQouCyd4sbGb78Bpii+KxZFym0Og9rrGMLR7udxjvfNzQxdeC+0BzBVds 2/eP+uAGZCh4n8eG4hmZc6K9AF/UX/2Nv5eCxvaMzwlHPyA9s6csCKqXrS0eMp/F bwL1PltwDi/MFxfjKNgHsdRBaBfgoAYEkQi8gWROtdLbcX+F0C7Uhjpv63LuWIzX eUw9KycpuRjUcUI5OeqPxMz9RH1AyWM= -----END CERTIFICATE-----Generated at Tue May 13 17:28:14 2025 by rpki-client