$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa File: 436267ae-bf59-3390-b958-3a31c5690391.roa (raw, json) Hash identifier: 3gmMDT3hLsnQb69b+JEAfhRG/HK1eTvDNBjJNqvM5HM= Subject key identifier: 8D:41:99:D4:B5:91:B4:EA:A9:E7:45:9A:DF:E1:AE:15:D0:40:99:55 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F432858496CE44A986913F92B8AE92680 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 18994 IP address blocks: 162.134.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:4a:98:69:13:f9:2b:8a:e9:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=641a2d36-d817-402c-b072-1b7cb38e005c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c5:69:cc:a3:48:8f:8f:fa:bf:31:be:80:b5: f1:64:16:76:b5:d0:90:2c:ac:20:4e:e0:de:84:ea: 04:14:10:8d:c5:d5:e1:62:4b:36:bd:f0:bc:c0:88: e6:e2:41:11:57:99:0e:d6:bb:ff:e2:2d:ec:48:a3: da:fe:3b:08:0b:85:c7:bd:ac:f2:78:44:39:a4:cc: 89:26:f0:cc:3d:c6:46:58:1e:60:61:83:41:26:06: ca:ff:0f:e5:8a:b2:25:3c:3a:27:5d:0b:3d:7a:26: 39:d0:25:11:0f:8f:47:fa:67:87:f8:28:5e:75:b1: f2:49:f8:a6:3c:d0:c0:b5:d8:d2:d8:ad:8a:a1:c9: ff:81:b8:46:e2:4b:45:42:80:64:02:51:b7:42:4e: 7d:29:16:e9:23:f2:54:41:cb:76:41:a2:2b:66:ea: 46:a3:20:aa:a6:55:5c:ca:17:d5:24:ba:31:b3:e2: f4:69:80:8c:dc:b5:b0:91:85:86:42:6e:97:be:cf: c2:19:dc:7f:f7:40:dc:e6:d7:3d:38:7f:45:4a:57: d1:23:a4:1d:32:b6:b1:dd:95:72:73:75:d9:cf:9e: a1:48:86:76:c6:3c:59:5f:f1:bf:84:5d:d8:1a:3f: a2:53:05:81:a6:4c:34:a0:3f:d3:89:8a:d4:2d:dd: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:41:99:D4:B5:91:B4:EA:A9:E7:45:9A:DF:E1:AE:15:D0:40:99:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a3:7f:49:ba:64:e4:41:b1:0d:bd:26:77:3a:85:d4:04:b4: d1:cd:43:2e:6f:e3:ce:66:38:40:0a:1b:00:8c:78:99:a4:28: bc:10:63:f0:cd:f0:71:f2:95:7e:de:95:6b:0d:c2:b3:4a:33: ba:c6:bb:2c:4e:be:ec:82:b2:8d:1b:3c:99:c8:6f:e5:ce:39: de:65:c4:f0:eb:50:92:8c:98:fe:0d:88:21:7d:21:64:7d:ff: 29:aa:f6:25:42:60:65:91:15:00:39:12:e7:68:f3:8f:82:27: d6:3f:b5:3f:69:fb:8a:b4:65:21:5c:69:1f:5e:0e:08:4d:22: 99:9c:92:23:9f:df:07:ac:56:00:5e:de:df:6e:a7:4b:a0:49: 72:7c:60:99:be:e2:8e:f8:2c:82:97:4f:24:c5:d1:90:de:7f: 3d:07:1a:d7:e9:5c:ca:c1:0f:a7:0a:76:8f:2a:e9:8f:be:9a: a2:c7:20:17:ae:72:c7:7d:00:81:27:79:83:36:5c:c8:a9:8a: 97:53:60:ca:61:09:59:a0:3d:4b:af:cc:d7:44:11:7a:53:80: cb:32:0d:33:d2:d4:01:c6:b4:4d:53:7a:14:75:a7:d5:80:d0: 1a:38:55:8d:41:6e:e5:c6:4e:d0:9e:18:3a:35:0c:93:e7:17: 20:11:1f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5EqYaRP5K4rpJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NjQxYTJkMzYtZDgxNy00MDJjLWIwNzItMWI3Y2IzOGUwMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78VpzKNIj4/6vzG+gLXxZBZ2tdCQLKwgTuDe hOoEFBCNxdXhYks2vfC8wIjm4kERV5kO1rv/4i3sSKPa/jsIC4XHvazyeEQ5pMyJ JvDMPcZGWB5gYYNBJgbK/w/lirIlPDonXQs9eiY50CURD49H+meH+ChedbHySfim PNDAtdjS2K2Kocn/gbhG4ktFQoBkAlG3Qk59KRbpI/JUQct2QaIrZupGoyCqplVc yhfVJLoxs+L0aYCM3LWwkYWGQm6Xvs/CGdx/90Dc5tc9OH9FSlfRI6QdMrax3ZVy c3XZz56hSIZ2xjxZX/G/hF3YGj+iUwWBpkw0oD/TiYrULd0v1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1BmdS1kbTqqedFmt/hrhXQQJlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvNDM2MjY3YWUtYmY1OS0z MzkwLWI5NTgtM2EzMWM1NjkwMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGjf0m6ZORBsQ29Jnc6hdQEtNHNQy5v485mOEAKGwCMeJmkKLwQY/DN 8HHylX7elWsNwrNKM7rGuyxOvuyCso0bPJnIb+XOOd5lxPDrUJKMmP4NiCF9IWR9 /ymq9iVCYGWRFQA5Eudo84+CJ9Y/tT9p+4q0ZSFcaR9eDghNIpmckiOf3wesVgBe 3t9up0ugSXJ8YJm+4o74LIKXTyTF0ZDefz0HGtfpXMrBD6cKdo8q6Y++mqLHIBeu csd9AIEneYM2XMipipdTYMphCVmgPUuvzNdEEXpTgMsyDTPS1AHGtE1TehR1p9WA 0Bo4VY1BbuXGTtCeGDo1DJPnFyARH0E= -----END CERTIFICATE-----Generated at Mon Apr 7 06:31:00 2025 by rpki-client