$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/acf06b81-4edb-3409-af0c-4d8acc2f8a55.roa File: acf06b81-4edb-3409-af0c-4d8acc2f8a55.roa (raw, json) Hash identifier: Pg6YAsX3YuBPtfsesG9ti8CEjCmpWQyyMGaH5YS5zGg= Subject key identifier: CB:AB:4A:D3:A0:C6:AF:77:8B:1F:5E:5E:C6:C5:3E:20:69:F3:45:E2 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584973DEE8F2863BBE3ED81B0F80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/acf06b81-4edb-3409-af0c-4d8acc2f8a55.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 11427 IP address blocks: 192.242.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e8:f2:86:3b:be:3e:d8:1b:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=d29d56e6-e1c7-407c-9713-5bfa95ab1915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:90:c4:b2:bb:c3:69:cc:2c:9c:c0:be:55:5c: a0:7a:58:76:3a:33:e2:a1:5a:d4:24:5d:f7:fe:59: 12:da:6b:1b:e5:fd:d1:60:ea:ee:5b:b5:5b:8b:4c: 71:5c:1f:20:88:9d:d1:25:b8:42:ef:e0:79:3b:96: b9:38:db:11:02:49:d1:6a:ed:81:3e:72:e8:ba:87: 87:b7:d5:c7:db:46:a2:e1:b0:70:13:a5:93:89:9f: 91:9c:5d:a1:63:29:46:0f:ed:7e:54:9d:bf:41:68: ba:d5:f1:10:20:92:4d:2f:0b:bd:eb:22:cf:fc:1e: 3b:21:d9:9e:f6:4a:2f:db:ae:36:6e:86:3d:0d:27: 3d:4e:7b:59:35:34:52:91:58:e9:88:95:d9:a4:29: 2a:39:cf:01:d7:8e:22:ca:d4:0d:72:95:5e:d8:58: d2:67:90:94:a3:aa:b0:fb:41:03:0d:10:71:d8:42: 2a:a3:35:c1:a8:a1:7d:6d:1a:ea:99:b2:c8:a9:66: 6c:a7:3f:84:9a:91:eb:44:82:59:bb:d1:14:19:7c: bc:f2:e3:1a:ad:52:27:cc:cc:af:72:d4:a8:9d:ca: a9:83:0a:eb:cd:4d:bb:8f:d4:8e:bc:1b:ba:61:1f: fd:de:a6:0f:d5:fd:3b:e0:65:73:26:12:f4:b6:b6: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AB:4A:D3:A0:C6:AF:77:8B:1F:5E:5E:C6:C5:3E:20:69:F3:45:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/acf06b81-4edb-3409-af0c-4d8acc2f8a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 192.242.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:a6:1b:58:85:87:ec:18:65:5a:e3:3f:3a:93:26:ec:c7:0d: 6c:db:84:75:d1:b4:2f:50:89:ce:10:4f:df:d9:ce:20:5b:0a: 6a:e9:be:95:a9:82:af:c3:0b:d4:58:ae:7f:b5:e5:21:c3:26: 49:4e:1c:1f:ed:bb:ca:63:4d:9d:69:22:f2:ab:dd:37:88:3e: a4:c2:f5:d9:ef:6b:2b:40:35:61:5b:89:cc:07:8d:ed:b7:85: 6c:e9:d0:bf:6e:d1:ba:c0:85:e1:8a:dd:d2:30:4a:6d:54:18: 28:3f:ce:96:1f:d9:49:f6:b1:c3:04:96:55:69:92:6d:09:a5: 69:09:f4:96:ea:2c:b4:55:57:4c:49:9c:a2:ef:97:69:5e:53: dc:74:b5:06:26:9c:b8:f5:47:66:dc:42:67:8c:8d:5b:17:a0: ba:7a:6c:6d:cc:af:0f:9e:19:63:a2:a0:2b:bd:84:ff:17:bd: dc:8c:a4:35:02:4a:6f:00:48:a7:2c:a9:02:37:e6:0a:60:ff: 01:80:63:2e:42:41:97:72:92:e7:0d:63:d7:89:82:62:c2:55: bb:2d:81:a1:2c:2c:a5:6e:ca:92:e6:f0:25:5a:8d:72:8a:c8: 4e:e4:24:8f:a3:54:87:b7:9a:c1:2a:4a:e1:a0:8f:1b:cd:7f: c8:ad:24:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3ujyhju+PtgbD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk ZDI5ZDU2ZTYtZTFjNy00MDdjLTk3MTMtNWJmYTk1YWIxOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipDEsrvDacwsnMC+VVygelh2OjPioVrUJF33 /lkS2msb5f3RYOruW7Vbi0xxXB8giJ3RJbhC7+B5O5a5ONsRAknRau2BPnLouoeH t9XH20ai4bBwE6WTiZ+RnF2hYylGD+1+VJ2/QWi61fEQIJJNLwu96yLP/B47Idme 9kov2642boY9DSc9TntZNTRSkVjpiJXZpCkqOc8B144iytQNcpVe2FjSZ5CUo6qw +0EDDRBx2EIqozXBqKF9bRrqmbLIqWZspz+EmpHrRIJZu9EUGXy88uMarVInzMyv ctSoncqpgwrrzU27j9SOvBu6YR/93qYP1f074GVzJhL0trbzyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMurStOgxq93ix9eXsbFPiBp80XiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWNmMDZiODEtNGVkYi0z NDA5LWFmMGMtNGQ4YWNjMmY4YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPK5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOmG1iFh+wYZVrjPzqTJuzHDWzbhHXRtC9Qic4QT9/ZziBbCmrpvpWp gq/DC9RYrn+15SHDJklOHB/tu8pjTZ1pIvKr3TeIPqTC9dnvaytANWFbicwHje23 hWzp0L9u0brAheGK3dIwSm1UGCg/zpYf2Un2scMEllVpkm0JpWkJ9JbqLLRVV0xJ nKLvl2leU9x0tQYmnLj1R2bcQmeMjVsXoLp6bG3Mrw+eGWOioCu9hP8XvdyMpDUC Sm8ASKcsqQI35gpg/wGAYy5CQZdykucNY9eJgmLCVbstgaEsLKVuypLm8CVajXKK yE7kJI+jVIe3msEqSuGgjxvNf8itJAE= -----END CERTIFICATE-----Generated at Tue May 6 13:08:48 2025 by rpki-client