$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa File: d51e2141-526f-3d50-85c1-f992569c4005.roa (raw, json) Hash identifier: LV4xxTCJ7l8dbAcEld1Ik9rlJXqH+zSzcz4wOklXrao= Subject key identifier: D9:23:94:37:8E:40:50:7F:34:1F:8C:F4:64:52:72:A8:A0:22:7C:06 Certificate issuer: /CN=a54703a4-3daa-455c-8724-7af942d1a391 Certificate serial: 010D0C9F432858487CEB31A270BC9E1412DC6AC0 Authority key identifier: C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 396982 IP address blocks: 192.107.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:31:a2:70:bc:9e:14:12:dc:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a54703a4-3daa-455c-8724-7af942d1a391 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=3312bffa-f6c3-4ed4-b8fd-99a6488a0779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:bf:98:0e:ea:0e:49:dd:0c:72:95:64:fb: 49:8b:81:f8:36:ef:ff:23:0d:4d:83:9e:51:63:c1: 4a:75:d0:bd:87:1b:dd:89:e8:37:cb:97:57:27:e0: 57:47:2d:a6:e7:62:4d:62:8a:5a:00:f9:b8:88:73: cd:73:4b:d0:8b:b4:73:53:d0:0a:a6:92:9c:8c:fd: 30:c7:0a:a0:b3:bd:35:d7:a3:50:bb:22:2a:03:c6: ed:e6:95:3c:57:c5:70:b0:7e:99:2c:a7:2e:21:1c: cb:f1:77:f3:00:53:20:b7:2b:76:61:58:ac:79:24: 1d:92:75:c9:55:bb:e8:5c:c9:f1:f2:6b:13:8a:ab: 9b:8f:37:6d:f1:2d:31:de:38:19:af:79:77:aa:87: f7:25:cd:09:1d:e7:e9:02:74:1e:51:fd:ac:85:fd: e8:6b:f3:4d:77:72:f6:e6:6e:1e:31:48:e9:4e:fb: d8:50:11:3b:98:05:a7:c1:9b:6f:9d:6f:eb:09:a9: 1c:19:75:be:6c:1e:08:34:71:91:2a:65:f1:c2:00: f0:90:cc:6b:40:ea:1f:1a:bf:0c:dc:f8:ed:67:a6: d5:d6:8f:ac:af:a2:38:39:01:dc:e8:bc:fe:28:ed: 77:61:ac:f8:a0:ff:eb:f2:24:13:24:a0:60:8b:8c: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:23:94:37:8E:40:50:7F:34:1F:8C:F4:64:52:72:A8:A0:22:7C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl X509v3 Authority Key Identifier: keyid:C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer sbgp-ipAddrBlock: critical IPv4: 192.107.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:78:58:32:98:b0:eb:85:19:39:8c:ec:d8:f8:20:43:80:af: 37:aa:ec:02:95:f1:c4:bb:51:0d:d6:e9:fc:c1:c0:44:41:34: e3:dc:8d:9e:ea:c5:b1:64:0f:03:cc:b7:66:93:b6:a0:44:b4: 7b:df:4a:c4:95:77:30:fc:d3:f1:88:1c:de:bd:95:d9:c3:73: 3c:89:a3:c3:c0:44:2f:d2:4e:66:b9:b6:61:0e:44:6b:1f:07: 35:8a:6e:59:aa:59:f5:ae:bc:76:4d:3f:33:5f:0a:7b:fd:80: 06:0a:c6:2b:93:8a:0a:89:15:9f:ad:32:f5:c0:3f:a5:03:02: b6:17:05:3f:6f:96:c7:f3:43:d5:a5:5f:85:41:fc:30:5f:89: ef:4d:59:63:47:ff:c6:34:33:5c:30:69:5a:a8:2a:c4:da:5d: 20:7e:63:ce:44:59:79:aa:21:42:6f:31:92:52:98:7c:05:68: 93:e5:62:97:86:ba:65:aa:43:81:35:f9:9d:4b:4c:1e:ea:74: 98:fb:16:ec:16:4c:df:18:94:84:59:32:fd:7a:df:75:9e:2f: 17:eb:b3:52:7b:41:cf:f0:30:1b:d2:cc:1d:c1:a6:51:98:4a: 47:ba:a3:e6:d3:65:81:6c:df:93:d5:2f:52:ad:5a:8d:f8:47: 86:24:7d:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zGicLyeFBLcasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0NzAzYTQtM2RhYS00NTVjLTg3MjQtN2FmOTQyZDFh MzkxMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk MzMxMmJmZmEtZjZjMy00ZWQ0LWI4ZmQtOTlhNjQ4OGEwNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPa/mA7qDkndDHKVZPtJi4H4Nu//Iw1Ng55R Y8FKddC9hxvdieg3y5dXJ+BXRy2m52JNYopaAPm4iHPNc0vQi7RzU9AKppKcjP0w xwqgs70116NQuyIqA8bt5pU8V8VwsH6ZLKcuIRzL8XfzAFMgtyt2YViseSQdknXJ VbvoXMnx8msTiqubjzdt8S0x3jgZr3l3qof3Jc0JHefpAnQeUf2shf3oa/NNd3L2 5m4eMUjpTvvYUBE7mAWnwZtvnW/rCakcGXW+bB4INHGRKmXxwgDwkMxrQOofGr8M 3PjtZ6bV1o+sr6I4OQHc6Lz+KO13Yaz4oP/r8iQTJKBgi4xA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkjlDeOQFB/NB+M9GRScqigInwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3 MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5NDJkMWEzOTEvZDUxZTIxNDEtNTI2Zi0z ZDUwLTg1YzEtZjk5MjU2OWM0MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTU0NzAzYTQtM2RhYS00NTVjLTg3 MjQtN2FmOTQyZDFhMzkxL2E1NDcwM2E0LTNkYWEtNDU1Yy04NzI0LTdhZjk0MmQx YTM5MS5jcmwwHwYDVR0jBBgwFoAUwWxcij939qkIJ9SgnYSA5N3d7fMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5 NDJkMWEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGuFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN4WDKYsOuFGTmM7Nj4IEOArzeq7AKV8cS7UQ3W6fzBwERBNOPcjZ7q xbFkDwPMt2aTtqBEtHvfSsSVdzD80/GIHN69ldnDczyJo8PARC/STma5tmEORGsf BzWKblmqWfWuvHZNPzNfCnv9gAYKxiuTigqJFZ+tMvXAP6UDArYXBT9vlsfzQ9Wl X4VB/DBfie9NWWNH/8Y0M1wwaVqoKsTaXSB+Y85EWXmqIUJvMZJSmHwFaJPlYpeG umWqQ4E1+Z1LTB7qdJj7FuwWTN8YlIRZMv1633WeLxfrs1J7Qc/wMBvSzB3BplGY Ske6o+bTZYFs35PVL1KtWo34R4Ykfcw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:48 2025 by rpki-client