$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa File: d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa (raw, json) Hash identifier: YySnB0vSJ2Ru5PN1PWH98sDYSzWEbaw9rdEYSk7ZUqE= Subject key identifier: 0F:2B:58:D9:2E:9F:AB:1A:E2:7B:41:C5:5B:D4:29:D6:C6:79:29:3A Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F43285848F2AA6568C95DC8CB91A59DC0 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa Signing time: Thu 20 Feb 2025 18:15:50 +0000 ROA not before: Thu 20 Feb 2025 18:15:50 +0000 ROA not after: Wed 21 May 2025 17:15:50 +0000 asID: 40232 IP address blocks: 192.82.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:65:68:c9:5d:c8:cb:91:a5:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Feb 20 18:15:50 2025 GMT Not After : May 21 17:15:50 2025 GMT Subject: CN=9f1f86f0-45d5-4d19-8655-d1311aee041d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:ec:e9:a8:a9:de:58:1e:67:3e:a0:44:17: 9f:3a:6d:54:99:fb:50:91:cd:1c:fd:13:82:c1:b1: d0:ff:0b:ab:df:d0:00:cc:73:3a:8c:ac:82:e2:6a: b1:2d:ec:e6:19:8f:d1:51:86:84:c3:44:4b:c8:d6: d8:52:d6:6d:b8:ec:cf:2a:8c:8c:77:81:0e:23:b3: 16:19:09:4b:02:37:59:de:96:20:b8:c1:1d:57:9f: 34:16:89:29:35:88:69:d4:7c:0d:d0:09:7d:d4:6a: 4a:cd:91:bc:41:04:7e:2b:e7:a8:d9:6c:34:0d:ff: e2:d9:b7:d4:20:45:86:89:95:49:ee:a9:08:56:30: 33:6c:6f:ba:ad:ca:29:5d:1e:73:4e:ed:a6:79:06: aa:bd:ac:d8:bb:cf:b1:f8:18:a8:8a:98:a4:36:56: f1:94:84:e5:4b:cc:0b:4b:a5:db:7c:b4:99:5a:9d: 4e:47:c5:1d:64:8e:e2:14:2a:d9:51:14:ab:b0:6d: 91:0f:84:0a:ea:80:72:a6:88:69:14:02:7b:9d:a5: 8d:4e:88:9f:c6:c7:55:df:ad:43:23:68:66:86:b2: a8:b1:11:78:e4:c7:8f:12:f9:4a:1c:66:dd:37:62: 24:74:8b:61:d3:60:e0:1a:e3:1d:3b:8b:2e:eb:c6: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2B:58:D9:2E:9F:AB:1A:E2:7B:41:C5:5B:D4:29:D6:C6:79:29:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 192.82.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:55:85:05:24:c8:41:57:dd:8e:3a:c0:31:d2:de:2e:fb:5e: 20:08:a6:ff:a5:e3:17:f3:b1:ec:fd:56:77:c3:28:6d:92:aa: 6d:eb:35:73:48:2b:75:82:f5:1a:7d:ff:07:d7:65:f4:17:de: 44:c9:62:5c:09:b6:2d:41:5e:45:cd:80:5c:97:7c:46:14:2d: 90:5c:b8:f9:71:5a:5b:ae:b4:fe:b2:f0:74:af:08:11:1e:b1: 99:1c:0d:39:d8:6b:fa:47:04:f8:22:da:e0:9d:31:41:3a:dd: 04:b9:44:39:f3:da:dc:70:67:5b:e9:99:4c:c0:bb:c1:85:b1: 1e:b2:72:e5:f2:30:b4:8e:13:e4:77:50:6a:e5:50:83:72:b6: a0:00:7d:f9:18:47:32:59:dc:31:76:03:b6:f3:1a:85:22:ae: 2f:ba:56:f0:38:4f:89:13:62:cd:93:2a:fb:63:a2:0c:1e:40: 6f:ac:86:93:c1:1f:0f:bc:92:66:95:1c:50:a3:d4:f4:9d:60: 47:30:80:e0:f6:cf:97:ed:3a:89:b9:ad:af:27:17:6e:72:8d: 61:9b:d6:c3:61:80:32:4e:bd:d9:0f:7c:d1:00:3d:a9:7a:f3: 01:e5:15:2d:99:e9:ed:61:db:61:83:6b:09:80:c7:e9:57:99: 30:af:bc:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqmVoyV3Iy5GlncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI1MDIyMDE4MTU1MFoXDTI1MDUyMTE3MTU1MFowLzEtMCsGA1UEAxMk OWYxZjg2ZjAtNDVkNS00ZDE5LTg2NTUtZDEzMTFhZWUwNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8Hs6aip3lgeZz6gRBefOm1UmftQkc0c/ROC wbHQ/wur39AAzHM6jKyC4mqxLezmGY/RUYaEw0RLyNbYUtZtuOzPKoyMd4EOI7MW GQlLAjdZ3pYguMEdV580FokpNYhp1HwN0Al91GpKzZG8QQR+K+eo2Ww0Df/i2bfU IEWGiZVJ7qkIVjAzbG+6rcopXR5zTu2meQaqvazYu8+x+BioipikNlbxlITlS8wL S6XbfLSZWp1OR8UdZI7iFCrZURSrsG2RD4QK6oBypohpFAJ7naWNToifxsdV361D I2hmhrKosRF45MePEvlKHGbdN2IkdIth02DgGuMdO4su68YvpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8rWNkun6sa4ntBxVvUKdbGeSk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvZDhmYzQ5YzktMTQzMi0z YWQ1LTlhMTctYzNkZjI4MGNjNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwFIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpVhQUkyEFX3Y46wDHS3i77XiAIpv+l4xfzsez9VnfDKG2Sqm3rNXNI K3WC9Rp9/wfXZfQX3kTJYlwJti1BXkXNgFyXfEYULZBcuPlxWluutP6y8HSvCBEe sZkcDTnYa/pHBPgi2uCdMUE63QS5RDnz2txwZ1vpmUzAu8GFsR6ycuXyMLSOE+R3 UGrlUINytqAAffkYRzJZ3DF2A7bzGoUiri+6VvA4T4kTYs2TKvtjogweQG+shpPB Hw+8kmaVHFCj1PSdYEcwgOD2z5ftOom5ra8nF25yjWGb1sNhgDJOvdkPfNEAPal6 8wHlFS2Z6e1h22GDawmAx+lXmTCvvNk= -----END CERTIFICATE-----Generated at Sun May 11 20:59:24 2025 by rpki-client