$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa File: c07d9477-bd5d-310a-b557-4b0b4a46506e.roa (raw, json) Hash identifier: bCyO6xENonFRQ6KE0oOmFRdcLHpVMSJhV5YlLl8L9ZU= Subject key identifier: F2:4D:53:7B:01:50:95:D1:3D:2E:B2:21:6F:90:B1:08:65:80:7E:FE Certificate issuer: /CN=219f6136-3599-4e41-920e-eccbe6592210 Certificate serial: 010D0C9F43285849AE7F4022F0ACB97E98821400 Authority key identifier: CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 17001 IP address blocks: 192.139.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:40:22:f0:ac:b9:7e:98:82:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219f6136-3599-4e41-920e-eccbe6592210 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=bb94f8a4-3852-4433-b6f1-c3e8fdfde10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:2e:83:22:20:4f:c0:84:45:eb:ec:04:be: 15:58:23:7b:58:c3:c8:5d:28:a5:0c:b4:02:85:cb: b5:40:0d:49:9d:20:83:ed:81:b7:f5:9c:7c:5b:1f: 64:ef:b2:10:42:94:1a:20:69:c9:08:62:6b:af:1a: 7f:24:37:c7:84:ba:0a:aa:52:13:cd:6a:20:c8:ea: af:b4:21:3a:1e:00:55:8c:9a:0a:d7:97:37:32:16: d2:bd:12:9e:fd:83:69:38:8f:27:70:54:bf:35:ba: 93:43:ac:fc:d8:1f:68:ea:95:8b:2e:c6:b0:f0:3c: 15:b0:9d:8b:1f:37:83:73:e8:31:0b:c3:67:d0:b3: 24:49:ab:bc:6a:e1:59:02:39:7a:69:2b:24:e3:27: f2:be:bd:cb:8f:64:18:42:fc:f7:d2:17:fa:2c:66: 4c:98:45:f6:99:1d:55:b0:6c:3e:17:0b:bc:f9:04: b9:64:62:55:13:41:b0:e2:56:43:fa:d6:50:b3:35: 88:ce:f3:b5:e3:2e:5f:68:4d:aa:46:ee:49:98:3a: 1f:e3:cb:33:ce:7f:4d:2d:f6:e2:05:e2:7e:6f:8e: 7e:8e:7f:9e:d3:b5:2b:92:bb:0a:aa:c9:41:9d:cf: 90:6f:34:6e:d7:d0:f1:2f:1f:48:23:53:57:54:6f: fc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4D:53:7B:01:50:95:D1:3D:2E:B2:21:6F:90:B1:08:65:80:7E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl X509v3 Authority Key Identifier: keyid:CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer sbgp-ipAddrBlock: critical IPv4: 192.139.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:71:d2:3f:45:1a:a1:61:74:33:3a:b2:b0:20:89:98:f1:3e: 62:c3:8a:1f:c9:b6:00:72:b7:ed:1b:b7:cf:72:ad:89:d9:b9: 52:68:70:7a:d3:62:85:31:ee:d5:b5:22:70:c2:07:29:77:d2: 9a:49:cb:38:e4:c4:92:f8:c5:1b:bc:a2:6e:dc:3f:c8:e8:a5: 6b:53:78:12:ed:1a:d2:2f:60:38:02:14:d8:a1:fb:72:ce:f1: 15:09:dd:99:a6:f1:bb:0f:28:b8:da:f8:4f:bf:05:15:cf:d0: 06:85:69:ac:3c:de:47:fa:32:e5:79:f4:d2:31:20:27:99:b0: 22:da:f1:7d:9c:69:fa:f6:02:4c:40:24:e3:fe:a6:36:87:0a: a9:59:d2:d1:9f:6c:43:a0:2b:8c:64:d2:2a:6c:4c:53:c8:7f: 82:a4:72:16:d8:f0:31:37:a4:7b:6c:1b:4e:4f:1b:25:39:d0: 77:14:a2:ee:12:7a:3e:02:d2:6b:6f:56:db:ca:43:4d:d3:a0: b4:7c:fe:33:e5:91:24:31:cf:5f:2f:0c:e2:44:5b:b2:22:c3: 6e:53:97:89:e6:b0:c6:b2:7c:cc:7a:cc:71:35:d5:c4:1e:19: 46:62:0c:dc:e9:76:9b:f6:0a:a2:77:a6:ac:34:21:bc:7e:02: 49:54:69:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0Ai8Ky5fpiCFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5ZjYxMzYtMzU5OS00ZTQxLTkyMGUtZWNjYmU2NTky MjEwMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk YmI5NGY4YTQtMzg1Mi00NDMzLWI2ZjEtYzNlOGZkZmRlMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKcugyIgT8CERevsBL4VWCN7WMPIXSilDLQC hcu1QA1JnSCD7YG39Zx8Wx9k77IQQpQaIGnJCGJrrxp/JDfHhLoKqlITzWogyOqv tCE6HgBVjJoK15c3MhbSvRKe/YNpOI8ncFS/NbqTQ6z82B9o6pWLLsaw8DwVsJ2L HzeDc+gxC8Nn0LMkSau8auFZAjl6aSsk4yfyvr3Lj2QYQvz30hf6LGZMmEX2mR1V sGw+Fwu8+QS5ZGJVE0Gw4lZD+tZQszWIzvO14y5faE2qRu5JmDof48szzn9NLfbi BeJ+b45+jn+e07UrkrsKqslBnc+QbzRu19DxLx9II1NXVG/8WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJNU3sBUJXRPS6yIW+QsQhlgH7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTlm NjEzNi0zNTk5LTRlNDEtOTIwZS1lY2NiZTY1OTIyMTAvYzA3ZDk0NzctYmQ1ZC0z MTBhLWI1NTctNGIwYjRhNDY1MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE5ZjYxMzYtMzU5OS00ZTQxLTky MGUtZWNjYmU2NTkyMjEwLzIxOWY2MTM2LTM1OTktNGU0MS05MjBlLWVjY2JlNjU5 MjIxMC5jcmwwHwYDVR0jBBgwFoAUyhdSDYxsDgXKcSyx4klt/fBxRK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTlmNjEzNi0zNTk5LTRlNDEtOTIwZS1lY2Ni ZTY1OTIyMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwItyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5x0j9FGqFhdDM6srAgiZjxPmLDih/JtgByt+0bt89yrYnZuVJocHrT YoUx7tW1InDCByl30ppJyzjkxJL4xRu8om7cP8jopWtTeBLtGtIvYDgCFNih+3LO 8RUJ3Zmm8bsPKLja+E+/BRXP0AaFaaw83kf6MuV59NIxICeZsCLa8X2cafr2AkxA JOP+pjaHCqlZ0tGfbEOgK4xk0ipsTFPIf4KkchbY8DE3pHtsG05PGyU50HcUou4S ej4C0mtvVtvKQ03ToLR8/jPlkSQxz18vDOJEW7Iiw25Tl4nmsMayfMx6zHE11cQe GUZiDNzpdpv2CqJ3pqw0Ibx+AklUaZo= -----END CERTIFICATE-----Generated at Mon May 12 08:22:01 2025 by rpki-client