$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa File: 9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa (raw, json) Hash identifier: YdRLtcGV5tc98U22v3UXBDmScVm+NGAJVThx7dpTZX4= Subject key identifier: 7A:42:4F:7D:9F:BE:AD:5E:4A:7A:B1:FD:E6:13:36:01:3E:E3:80:4A Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285848A13610451E875C3B99A78E80 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 395403 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:10:45:1e:87:5c:3b:99:a7:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=59ae734d-3f6b-4df3-bc3b-0e8ff3e345dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:df:10:92:c9:91:c6:e8:aa:1c:ba:a9:97: 2a:b6:0b:07:d8:73:3a:72:54:7a:ee:b9:b1:3d:21: 08:36:9c:d3:75:9f:f8:e2:38:58:91:21:9f:60:6a: a3:e9:a1:26:a0:ff:52:f5:9f:99:a0:9c:2a:fb:02: a4:b2:0e:13:16:a1:06:96:54:01:21:8c:2b:5a:ba: fb:d6:31:47:52:58:4b:d1:68:f0:0b:dc:97:80:f1: b0:2a:49:b6:54:9f:ae:ea:64:90:4e:ec:19:58:08: 59:5e:6a:47:68:64:ff:ee:02:92:43:0a:fa:44:76: e7:ef:8c:fb:be:25:87:c9:97:ca:29:79:f5:f9:cf: 5f:9a:44:c4:a5:9c:f0:54:89:30:b5:f9:8a:36:26: af:c0:8b:0a:71:0f:ad:4c:f8:ae:18:2e:f0:42:77: 56:b4:d2:c5:b6:28:fa:23:c3:33:c1:82:4c:89:69: fd:78:1c:ea:25:de:00:d5:ec:11:d6:5b:79:fa:56: 45:54:83:fd:b0:ee:14:a0:3e:94:23:a1:5b:6c:41: 31:52:f8:39:63:1e:d4:6f:4e:95:a7:78:14:9a:0b: a7:d6:6c:f9:a8:58:7f:70:7f:41:fd:b1:eb:32:8f: 24:fd:70:21:79:04:bd:77:db:b0:a7:17:ad:5f:0a: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:42:4F:7D:9F:BE:AD:5E:4A:7A:B1:FD:E6:13:36:01:3E:E3:80:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:68:c8:85:e9:10:ed:c8:ea:c5:07:ce:f4:13:15:7e:56:e0: 49:9c:67:76:72:5d:56:b2:23:f3:16:5c:78:8c:4e:50:cb:02: 16:33:03:b6:de:77:98:24:6f:40:b3:5c:8b:b1:2c:d9:96:a9: d3:0f:af:46:b1:19:64:73:4b:db:18:9e:93:56:fa:ff:ce:63: 33:e1:45:89:4c:88:bb:12:33:bd:c8:b0:8c:ae:03:9f:2e:79: a0:55:4a:72:57:c5:20:9e:9c:fc:4c:6b:45:3b:b8:0b:00:fc: 7c:6d:71:b1:7d:17:86:8d:56:20:6a:47:1b:36:28:f2:28:c5: ac:31:b0:7e:c6:7f:82:f6:86:f3:43:25:29:e2:4d:eb:a3:8d: 34:da:57:2b:ee:63:c7:ca:5a:95:fc:9e:da:fa:54:fc:ca:58: 64:b6:78:3f:27:03:d7:ee:2b:2d:96:4b:c5:4b:a5:fb:12:4d: f6:62:87:3d:34:cc:e6:b3:0e:03:22:89:54:00:3f:3e:3d:41: 09:96:01:96:df:5f:59:da:ad:59:7d:5b:3c:4a:e5:56:62:d6: 1d:2e:da:43:a0:b2:07:28:a0:fc:f1:d5:c1:32:7b:70:96:d1: 33:f9:53:8b:c4:2a:f1:97:1a:31:42:b3:63:00:71:6d:d0:ed: d3:4b:ef:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhBFHodcO5mnjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NTlhZTczNGQtM2Y2Yi00ZGYzLWJjM2ItMGU4ZmYzZTM0NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJDfEJLJkcboqhy6qZcqtgsH2HM6clR67rmx PSEINpzTdZ/44jhYkSGfYGqj6aEmoP9S9Z+ZoJwq+wKksg4TFqEGllQBIYwrWrr7 1jFHUlhL0WjwC9yXgPGwKkm2VJ+u6mSQTuwZWAhZXmpHaGT/7gKSQwr6RHbn74z7 viWHyZfKKXn1+c9fmkTEpZzwVIkwtfmKNiavwIsKcQ+tTPiuGC7wQndWtNLFtij6 I8MzwYJMiWn9eBzqJd4A1ewR1lt5+lZFVIP9sO4UoD6UI6FbbEExUvg5Yx7Ub06V p3gUmgun1mz5qFh/cH9B/bHrMo8k/XAheQS9d9uwpxetXwqrXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpCT32fvq1eSnqx/eYTNgE+44BKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvOWViMmRlYzItOTcwMC0z YTZhLThkOTEtNmQ5MGViNjJiODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtoyIXpEO3I6sUHzvQTFX5W4EmcZ3ZyXVayI/MWXHiMTlDLAhYzA7be d5gkb0CzXIuxLNmWqdMPr0axGWRzS9sYnpNW+v/OYzPhRYlMiLsSM73IsIyuA58u eaBVSnJXxSCenPxMa0U7uAsA/HxtcbF9F4aNViBqRxs2KPIoxawxsH7Gf4L2hvND JSniTeujjTTaVyvuY8fKWpX8ntr6VPzKWGS2eD8nA9fuKy2WS8VLpfsSTfZihz00 zOazDgMiiVQAPz49QQmWAZbfX1narVl9WzxK5VZi1h0u2kOgsgcooPzx1cEye3CW 0TP5U4vEKvGXGjFCs2MAcW3Q7dNL71E= -----END CERTIFICATE-----Generated at Sat Apr 5 19:13:04 2025 by rpki-client