$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa File: 5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa (raw, json) Hash identifier: Yosv4KhrR1mGktV7JLC9/M3AxUQrS7Q/Y/NgiPrC09s= Subject key identifier: 4B:6D:68:C4:2B:CB:88:81:89:9C:D5:14:29:ED:34:73:A4:C2:D9:E0 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F43285848F4F6A33A3E8FFA979D02E780 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3477 IP address blocks: 192.153.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a3:3a:3e:8f:fa:97:9d:02:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=254289ed-20ac-40ad-be45-5cfc1de98fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:e6:6b:5b:7f:de:50:d1:0c:4a:05:d0:24: 01:cd:1d:a6:28:da:00:f2:10:36:3b:eb:d0:f2:2c: 21:d1:ef:74:35:9a:e3:3e:be:2b:3f:80:84:d1:de: 0c:df:48:ac:b0:cc:c4:95:86:28:85:cb:e6:c8:82: a1:8b:a5:3c:40:7e:30:b2:93:fc:9a:d9:5d:ea:04: 1b:32:bc:d3:79:59:de:ca:d3:71:e5:62:0a:d1:25: 5b:9b:b9:db:92:0b:04:79:a0:1b:1e:52:62:4a:6b: 04:4f:b0:c4:16:d6:65:18:83:32:5a:e8:c4:b2:9f: 7c:91:a2:f8:65:1a:ef:67:c6:f1:cd:f8:35:3c:44: b5:7c:fa:21:a5:49:e7:ca:62:49:d5:65:4b:18:4d: b3:ec:e3:52:16:1b:bb:6c:11:c3:f0:88:d9:54:c1: 68:56:53:2a:f1:a9:92:14:dd:7a:01:25:38:4c:ee: 55:bb:41:e7:da:0e:65:4b:82:67:ef:1e:f5:d6:ba: a7:f6:95:ad:95:7d:92:c2:bf:d1:6e:c2:c5:e9:59: 0b:5e:0d:e7:44:a0:63:b4:e5:68:df:1a:67:fa:91: cb:cc:57:fd:64:fe:59:3d:d1:eb:c8:5a:25:e6:df: bb:76:c8:49:f2:20:aa:8a:c2:c9:9e:a7:d0:b6:7a: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6D:68:C4:2B:CB:88:81:89:9C:D5:14:29:ED:34:73:A4:C2:D9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.153.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b0:1f:1f:31:a0:4c:d2:83:d9:f1:55:83:65:42:cd:a6:c2: 80:0f:72:83:86:f3:5e:4e:35:45:0b:84:db:fe:c8:79:a2:c8: d6:e9:6e:68:17:71:42:0f:3a:40:c6:ce:6d:34:6e:1d:c4:20: 91:f0:99:5d:46:92:41:71:66:ac:6c:df:8f:f4:95:fd:1d:e3: 4e:24:d6:38:77:4b:fc:1f:08:51:c8:a9:4e:02:be:bf:ac:12: 63:c9:90:1c:00:a4:2e:b8:fa:55:d4:1d:95:c8:f3:f1:6f:96: ee:0e:d6:62:ff:bf:94:f4:ee:12:98:c7:23:23:76:46:00:c0: be:30:2f:e8:e5:5c:e0:be:7e:02:98:4d:57:a8:c5:35:3f:f6: 0f:74:de:36:d4:e4:8b:c9:58:84:a2:99:f1:1f:b9:34:8a:d9: 2f:08:e8:bf:0e:24:80:8d:18:ef:62:7d:37:67:3e:a6:95:ae: a1:99:80:4c:8e:91:f3:a5:73:ea:92:43:ac:3b:23:68:7a:27: b7:40:e3:b9:e0:cd:6e:93:58:87:61:6d:25:33:8d:9e:22:ed: 74:5c:b7:cd:93:cd:93:9f:81:37:64:93:10:36:9b:bd:3c:21: 9b:38:54:cb:3f:c8:74:be:a2:a0:68:88:40:8f:30:5c:3d:44: 7a:2f:60:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qM6Po/6l50C54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjU0Mjg5ZWQtMjBhYy00MGFkLWJlNDUtNWNmYzFkZTk4ZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49/ma1t/3lDRDEoF0CQBzR2mKNoA8hA2O+vQ 8iwh0e90NZrjPr4rP4CE0d4M30issMzElYYohcvmyIKhi6U8QH4wspP8mtld6gQb MrzTeVneytNx5WIK0SVbm7nbkgsEeaAbHlJiSmsET7DEFtZlGIMyWujEsp98kaL4 ZRrvZ8bxzfg1PES1fPohpUnnymJJ1WVLGE2z7ONSFhu7bBHD8IjZVMFoVlMq8amS FN16ASU4TO5Vu0Hn2g5lS4Jn7x711rqn9pWtlX2Swr/RbsLF6VkLXg3nRKBjtOVo 3xpn+pHLzFf9ZP5ZPdHryFol5t+7dshJ8iCqisLJnqfQtnrTKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEttaMQry4iBiZzVFCntNHOkwtngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNWQwMDEwYzUtZDY5Yy0z ZDMwLWJjNjEtZGNhYWM1NTc5ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+wHx8xoEzSg9nxVYNlQs2mwoAPcoOG815ONUULhNv+yHmiyNbpbmgX cUIPOkDGzm00bh3EIJHwmV1GkkFxZqxs34/0lf0d404k1jh3S/wfCFHIqU4Cvr+s EmPJkBwApC64+lXUHZXI8/Fvlu4O1mL/v5T07hKYxyMjdkYAwL4wL+jlXOC+fgKY TVeoxTU/9g903jbU5IvJWISimfEfuTSK2S8I6L8OJICNGO9ifTdnPqaVrqGZgEyO kfOlc+qSQ6w7I2h6J7dA47ngzW6TWIdhbSUzjZ4i7XRct82TzZOfgTdkkxA2m708 IZs4VMs/yHS+oqBoiECPMFw9RHovYJg= -----END CERTIFICATE-----Generated at Sat Apr 5 03:41:58 2025 by rpki-client