$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa File: 2ddb1419-5806-328e-baef-d46939f17218.roa (raw, json) Hash identifier: uQ86LY+0ZlXHnVxVkGBd+36PTGNCaW5uMcSlWsNMKFI= Subject key identifier: 72:41:28:24:81:6A:1E:11:0F:93:5A:1C:1C:0E:62:DE:08:4A:81:FC Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F43285849C36F7D5FC28CA80B40A90390 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa Signing time: Tue 06 May 2025 13:01:01 +0000 ROA not before: Tue 06 May 2025 13:01:01 +0000 ROA not after: Mon 04 Aug 2025 13:01:01 +0000 asID: 393844 IP address blocks: 192.24.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:6f:7d:5f:c2:8c:a8:0b:40:a9:03:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: May 6 13:01:01 2025 GMT Not After : Aug 4 13:01:01 2025 GMT Subject: CN=07ed36e7-47df-4b6d-b363-c622704c14ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:19:7c:45:dc:40:63:c0:c3:6a:16:8e:38: 95:cc:c9:fc:d6:85:66:fe:45:0c:20:ef:09:49:5f: 61:a1:98:6c:5e:3b:7e:b2:8a:19:37:48:9a:d5:4f: 02:17:7e:6d:2f:cd:e3:8b:36:2a:90:35:14:06:cf: 33:5c:82:dc:fb:38:32:39:27:0c:8a:af:c8:87:1d: 32:68:ed:3c:a5:33:bc:4c:66:db:2e:76:d4:ee:51: 4d:0a:3a:1a:89:22:60:e5:8b:c4:dd:01:48:b7:05: 7c:6f:7c:03:e6:39:71:ed:3c:44:a0:6b:68:19:8e: d0:03:35:6b:7c:06:74:0e:bc:06:65:0e:ca:5a:77: 89:a9:64:55:8e:0e:95:6a:57:53:4b:ae:46:78:22: f9:65:3b:db:70:00:48:4e:92:61:6c:c8:2d:43:d1: 09:d7:6b:f1:3d:85:c3:b3:95:e9:fc:38:78:c9:33: 5c:c2:c8:92:7a:32:46:59:e0:7a:c1:3e:52:b5:e4: 7a:01:cb:83:c6:25:f5:56:31:24:f3:3d:5e:3d:98: 84:59:43:7f:55:05:f3:fb:a6:d8:6c:8b:bc:f8:83: c5:0c:fd:f4:31:42:ed:5d:39:a9:95:73:83:d4:b8: 3e:a9:8a:d9:38:1a:8f:db:37:20:fc:62:cd:86:b3: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:41:28:24:81:6A:1E:11:0F:93:5A:1C:1C:0E:62:DE:08:4A:81:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 192.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9c:13:94:e5:71:c9:77:ea:31:61:26:12:63:61:9e:bc:73: 83:b3:85:c5:0e:84:a3:ee:91:ab:cd:5d:3e:76:c0:e2:13:39: f9:f6:07:21:9d:29:f1:3f:c5:bf:6f:77:e3:4f:8c:98:c2:7a: b4:f3:68:1c:4b:da:a3:e5:7d:e4:7e:2f:42:18:b6:5f:b3:18: 15:5a:19:37:44:86:69:ac:04:11:d4:1e:32:f8:d8:ed:13:64: 6a:65:e2:58:b9:86:bf:30:bb:ee:a2:15:8f:5f:f2:ad:c1:17: 5b:d5:39:34:d3:a5:b9:46:e9:5a:89:d3:ec:ad:23:13:0b:96: 73:e5:8d:51:b0:a7:20:e5:ae:a6:c2:ca:f9:6a:3c:63:e1:36: 6a:9d:5f:53:61:b0:55:6c:05:67:c9:b1:44:63:1e:0a:6c:3a: b5:b9:7e:a6:83:0c:eb:af:79:0c:42:6e:fb:b2:3c:8f:56:b3: 9e:0e:98:db:0f:09:63:f1:34:ed:28:c2:72:23:71:f9:c5:c8: 4e:4b:b5:75:9b:ec:3d:ef:23:43:41:ca:22:4e:71:85:e8:ab: 6f:e8:74:6a:83:e2:ee:30:5a:44:cb:77:55:aa:08:a1:63:ac: e8:32:59:a9:46:15:e0:92:47:68:dc:b2:81:d0:70:19:8f:27: 5c:35:3a:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb31fwoyoC0CpA5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk MDdlZDM2ZTctNDdkZi00YjZkLWIzNjMtYzYyMjcwNGMxNGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKMZfEXcQGPAw2oWjjiVzMn81oVm/kUMIO8J SV9hoZhsXjt+sooZN0ia1U8CF35tL83jizYqkDUUBs8zXILc+zgyOScMiq/Ihx0y aO08pTO8TGbbLnbU7lFNCjoaiSJg5YvE3QFItwV8b3wD5jlx7TxEoGtoGY7QAzVr fAZ0DrwGZQ7KWneJqWRVjg6ValdTS65GeCL5ZTvbcABITpJhbMgtQ9EJ12vxPYXD s5Xp/Dh4yTNcwsiSejJGWeB6wT5SteR6AcuDxiX1VjEk8z1ePZiEWUN/VQXz+6bY bIu8+IPFDP30MULtXTmplXOD1Lg+qYrZOBqP2zcg/GLNhrM01QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJBKCSBah4RD5NaHBwOYt4ISoH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvMmRkYjE0MTktNTgwNi0z MjhlLWJhZWYtZDQ2OTM5ZjE3MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwBgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmcE5Tlccl36jFhJhJjYZ68c4OzhcUOhKPukavNXT52wOITOfn2ByGd KfE/xb9vd+NPjJjCerTzaBxL2qPlfeR+L0IYtl+zGBVaGTdEhmmsBBHUHjL42O0T ZGpl4li5hr8wu+6iFY9f8q3BF1vVOTTTpblG6VqJ0+ytIxMLlnPljVGwpyDlrqbC yvlqPGPhNmqdX1NhsFVsBWfJsURjHgpsOrW5fqaDDOuveQxCbvuyPI9Ws54OmNsP CWPxNO0ownIjcfnFyE5LtXWb7D3vI0NByiJOcYXoq2/odGqD4u4wWkTLd1WqCKFj rOgyWalGFeCSR2jcsoHQcBmPJ1w1Ouw= -----END CERTIFICATE-----Generated at Tue May 13 05:16:06 2025 by rpki-client