$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa File: 149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa (raw, json) Hash identifier: kP30y8jiiXb95NUtz2VHTgdFJh/o3ruh00ZePtXdi0A= Subject key identifier: 8F:72:D6:2E:D9:54:42:FC:C9:B7:49:D6:02:6E:CC:A0:E9:8C:85:04 Certificate issuer: /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Certificate serial: 010D0C9F4328584953C40888900B9F94E9749800 Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.135.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:08:88:90:0b:9f:94:e9:74:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=eb10e659-cfed-4b6c-a1d1-0e76381d10a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:a6:24:7e:a0:13:fa:1c:c0:10:bf:48:bc: 1f:0a:7d:16:4e:b1:11:a2:33:58:23:3d:7b:ac:65: 79:01:ab:56:9c:83:13:42:44:28:d5:8a:5f:04:b6: 33:2a:1a:a3:c5:c4:8d:1e:a9:08:cf:9c:35:25:78: 46:af:6a:61:2f:be:e3:f9:da:7e:96:10:fb:57:ee: 31:28:38:a9:3c:32:84:cc:94:a2:f4:f5:eb:1d:b7: 25:e8:56:62:00:fd:88:6c:3b:0c:2e:e6:a1:0f:27: 8d:d5:51:50:ad:bc:ab:07:24:c3:3b:8a:5c:97:8e: 15:3e:99:52:fd:77:00:f2:f4:a1:6e:57:d8:f4:83: 3a:10:8c:94:9f:b3:9b:30:ad:df:7e:c0:03:55:f0: dd:59:39:bf:72:0f:57:24:3a:c7:4f:1b:12:7c:d9: 0f:c4:0b:de:77:b4:4f:c6:9a:61:8e:6d:90:60:a2: 36:cf:b0:16:39:17:11:61:2e:21:29:85:53:41:03: c3:d1:2a:17:28:d2:42:de:e0:8f:63:7b:8f:db:36: c5:6e:d8:45:6f:da:cc:c5:67:43:b2:02:45:69:02: 00:65:a3:bf:e0:9d:93:28:9b:9b:8f:82:3e:5a:ec: a6:c4:d3:53:b7:cc:67:10:a8:a6:c6:1a:c1:8d:b6: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:72:D6:2E:D9:54:42:FC:C9:B7:49:D6:02:6E:CC:A0:E9:8C:85:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl X509v3 Authority Key Identifier: keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer sbgp-ipAddrBlock: critical IPv4: 192.135.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c5:26:8d:3b:30:15:22:cd:cb:a9:f0:72:94:1f:8a:24:1c: 81:e6:82:df:8d:0b:cf:05:4a:52:34:eb:de:6d:94:4f:00:bb: 68:dd:52:23:78:96:2d:10:bb:46:33:f8:8c:93:a0:43:a5:fd: a0:59:50:9c:2b:1e:04:61:13:23:e0:5b:42:d1:fc:a4:ef:b7: 55:1c:36:54:5b:73:72:3a:48:23:af:bd:9a:9f:0a:2c:57:ae: ab:44:94:6c:66:95:b4:29:bf:5c:67:05:90:72:f6:b7:34:a6: 34:84:d5:a3:57:85:ae:d0:bd:cb:82:aa:eb:22:ff:ed:3b:67: e2:da:81:46:a6:5e:08:97:65:a3:c0:2a:60:93:44:75:ad:f3: 1c:06:aa:31:f7:50:a7:1f:7d:a6:db:25:f6:fc:ce:70:5f:49: fa:99:48:d7:b7:40:6c:d8:55:8e:a5:7a:f3:93:03:50:ad:65: 09:12:4c:b9:4b:02:19:e0:7c:c9:de:30:da:38:19:52:9f:d9: 6c:03:98:9f:b9:1b:e1:7b:4c:b3:5c:60:82:21:80:42:47:e2: cf:b3:a0:3c:70:03:9c:30:98:3b:d4:cb:9c:f8:f1:b0:aa:2c: 9a:11:50:fb:af:85:df:72:f0:64:2c:13:6c:2f:af:78:9a:0d: 3d:6f:f2:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxAiIkAuflOl0mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MWZkN2QtMzdkNy00ZGE2LThkZTgtN2QzNDZlMDAw NmFhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWIxMGU2NTktY2ZlZC00YjZjLWExZDEtMGU3NjM4MWQxMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsWmJH6gE/ocwBC/SLwfCn0WTrERojNYIz17 rGV5AatWnIMTQkQo1YpfBLYzKhqjxcSNHqkIz5w1JXhGr2phL77j+dp+lhD7V+4x KDipPDKEzJSi9PXrHbcl6FZiAP2IbDsMLuahDyeN1VFQrbyrByTDO4pcl44VPplS /XcA8vShblfY9IM6EIyUn7ObMK3ffsADVfDdWTm/cg9XJDrHTxsSfNkPxAved7RP xpphjm2QYKI2z7AWORcRYS4hKYVTQQPD0SoXKNJC3uCPY3uP2zbFbthFb9rMxWdD sgJFaQIAZaO/4J2TKJubj4I+WuymxNNTt8xnEKimxhrBjbZ5MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9y1i7ZVEL8ybdJ1gJuzKDpjIUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUx ZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0NmUwMDA2YWEvMTQ5YWYzY2UtY2I0ZC0z ZGYxLWE3ZGYtMWE3ODQ1ZGQzNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGU1MWZkN2QtMzdkNy00ZGE2LThk ZTgtN2QzNDZlMDAwNmFhL2RlNTFmZDdkLTM3ZDctNGRhNi04ZGU4LTdkMzQ2ZTAw MDZhYS5jcmwwHwYDVR0jBBgwFoAUHYsjQJQ4f91apjmhU9JAQqG/3KMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUxZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0 NmUwMDA2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbFJo07MBUizcup8HKUH4okHIHmgt+NC88FSlI0695tlE8Au2jdUiN4 li0Qu0Yz+IyToEOl/aBZUJwrHgRhEyPgW0LR/KTvt1UcNlRbc3I6SCOvvZqfCixX rqtElGxmlbQpv1xnBZBy9rc0pjSE1aNXha7QvcuCqusi/+07Z+LagUamXgiXZaPA KmCTRHWt8xwGqjH3UKcffabbJfb8znBfSfqZSNe3QGzYVY6levOTA1CtZQkSTLlL AhngfMneMNo4GVKf2WwDmJ+5G+F7TLNcYIIhgEJH4s+zoDxwA5wwmDvUy5z48bCq LJoRUPuvhd9y8GQsE2wvr3iaDT1v8tI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:31 2025 by rpki-client