$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa File: 19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa (raw, json) Hash identifier: QUkf0VXf7DDWkb66IEpk1Iz+4sgoYEF7yJg0vzE8V4I= Subject key identifier: 05:F8:7A:DE:39:5D:BF:F2:F2:04:2A:BE:C1:E6:EC:C9:9B:2F:A0:3B Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F43285849B9AA0820FA245E439ECF50E0 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 192.252.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:08:20:fa:24:5e:43:9e:cf:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=56939ef9-e83f-46a2-807d-c3ad2c39101a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:25:33:ce:44:28:e7:d0:f4:e4:19:a8:25: fd:0f:24:8d:44:ad:77:b8:a3:b9:ff:a6:63:d9:bb: 05:c8:24:0f:fa:35:67:14:d0:fb:31:f3:29:64:e6: 42:16:58:d7:05:84:75:55:2b:1d:19:c2:9e:0f:6b: 97:ff:bc:41:12:aa:67:ba:24:43:da:d9:20:81:92: 98:d4:4b:81:9d:38:f4:14:71:b9:1d:8a:21:fd:b3: 62:66:11:d6:03:64:50:4e:18:00:3f:72:6e:ff:de: 81:6c:58:81:70:cf:03:b9:2c:40:63:19:05:73:46: a9:04:c1:14:5d:ed:30:56:58:b1:50:9f:b3:31:53: 7a:6e:35:4d:07:cc:4b:90:31:6f:1e:fc:16:3f:33: d8:32:ce:cb:25:ac:49:00:82:23:01:eb:9c:7a:34: bc:2f:87:24:37:50:17:3d:68:4f:2e:90:f0:f2:7c: af:e2:f7:4e:72:44:8f:d5:c9:18:13:0d:ce:ab:75: bf:6a:75:35:30:a6:97:05:68:5f:cf:37:78:35:0a: af:f4:e1:a8:15:98:67:50:89:38:c9:a2:1a:d1:a7: cc:ca:5d:9b:3e:ba:fc:ce:d9:0c:af:91:7d:5b:b7: 62:14:63:d9:14:a7:49:c6:30:28:3e:37:76:5e:97: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F8:7A:DE:39:5D:BF:F2:F2:04:2A:BE:C1:E6:EC:C9:9B:2F:A0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 192.252.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:66:be:35:ac:61:ce:66:b6:e9:27:17:6f:78:37:8a:ce:35: 25:03:44:b0:f8:23:d6:b4:65:f3:cc:27:a6:81:d3:8f:da:cf: fd:77:20:eb:87:44:ee:57:ac:ab:27:0e:8a:78:67:60:5b:1c: 20:39:a2:2c:b2:71:fb:5a:87:74:91:41:ff:3f:6a:48:24:cc: 48:33:21:c7:5c:2a:86:90:0f:e5:79:61:a1:59:3f:c9:67:39: a1:91:cd:15:c1:8d:36:f6:8b:31:18:e2:b8:cc:03:c9:7a:d0: e8:af:83:7d:ef:0f:07:6d:bf:e8:75:c6:b1:09:62:d3:78:7a: a3:8d:53:25:de:d0:39:6d:13:cd:2e:da:39:64:47:77:5d:f7: 1b:dc:1d:a1:c1:d1:bf:b6:bf:66:3c:25:94:0a:39:e9:80:2a: f3:6c:a7:a3:09:d3:ea:e4:15:81:77:8a:69:47:c0:cb:a3:29: ac:17:9c:30:fb:92:fc:05:5f:43:d9:39:75:80:fd:30:d3:05: 17:30:7c:a5:05:b0:03:9b:f2:16:0a:77:55:1f:1a:d3:51:84: 19:c9:17:46:4b:d2:80:04:70:58:66:0b:d4:90:c0:c7:b7:73: ca:11:42:ef:c9:82:8e:2d:54:98:44:48:69:f1:c3:7f:bb:92: d3:22:1c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qggg+iReQ57PUOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NTY5MzllZjktZTgzZi00NmEyLTgwN2QtYzNhZDJjMzkxMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVMlM85EKOfQ9OQZqCX9DySNRK13uKO5/6Zj 2bsFyCQP+jVnFND7MfMpZOZCFljXBYR1VSsdGcKeD2uX/7xBEqpnuiRD2tkggZKY 1EuBnTj0FHG5HYoh/bNiZhHWA2RQThgAP3Ju/96BbFiBcM8DuSxAYxkFc0apBMEU Xe0wVlixUJ+zMVN6bjVNB8xLkDFvHvwWPzPYMs7LJaxJAIIjAeucejS8L4ckN1AX PWhPLpDw8nyv4vdOckSP1ckYEw3Oq3W/anU1MKaXBWhfzzd4NQqv9OGoFZhnUIk4 yaIa0afMyl2bPrr8ztkMr5F9W7diFGPZFKdJxjAoPjd2XpeD9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX4et45Xb/y8gQqvsHm7MmbL6A7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMTljNWZhMGEtNGM5NC0z Y2ZlLWE5MTAtOGRlZmZiYWJkYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANdmvjWsYc5mtuknF294N4rONSUDRLD4I9a0ZfPMJ6aB04/az/13IOuH RO5XrKsnDop4Z2BbHCA5oiyycftah3SRQf8/akgkzEgzIcdcKoaQD+V5YaFZP8ln OaGRzRXBjTb2izEY4rjMA8l60Oivg33vDwdtv+h1xrEJYtN4eqONUyXe0DltE80u 2jlkR3dd9xvcHaHB0b+2v2Y8JZQKOemAKvNsp6MJ0+rkFYF3imlHwMujKawXnDD7 kvwFX0PZOXWA/TDTBRcwfKUFsAOb8hYKd1UfGtNRhBnJF0ZL0oAEcFhmC9SQwMe3 c8oRQu/Jgo4tVJhESGnxw3+7ktMiHKU= -----END CERTIFICATE-----Generated at Wed May 7 11:44:45 2025 by rpki-client