$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257/50da0c92-0f0a-3428-bab6-b3ea60f7bd3a.roa File: 50da0c92-0f0a-3428-bab6-b3ea60f7bd3a.roa (raw, json) Hash identifier: xDOzqLMrdBU+Jj9Iy9Oz/AdU7+48qq7a2rmwBCsiQuQ= Subject key identifier: EC:90:F5:50:79:48:EC:C8:12:CA:44:10:39:10:3D:1C:03:83:89:6B Certificate issuer: /CN=a6a7836a-4a83-457c-842d-483525cb7257 Certificate serial: 010D0C9F43285848D0ABAE97ABDB3F574E65FDEC Authority key identifier: D5:30:DE:C4:A2:0C:AC:D2:07:FE:90:9B:BF:0A:CA:ED:41:85:9B:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257/50da0c92-0f0a-3428-bab6-b3ea60f7bd3a.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 394004 IP address blocks: 192.135.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257/a6a7836a-4a83-457c-842d-483525cb7257.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257/a6a7836a-4a83-457c-842d-483525cb7257.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:ae:97:ab:db:3f:57:4e:65:fd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a7836a-4a83-457c-842d-483525cb7257 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=1f2b50fb-8ab5-47d0-8629-337d90bd79e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:9d:70:1f:0e:1c:bb:c7:11:5c:bd:8a:7c: 5f:8e:f5:cc:28:25:06:dd:3f:44:84:9e:de:b6:b2: c7:3a:31:ee:19:51:80:20:21:de:87:be:82:80:ef: 3c:9f:95:47:7c:b4:c6:94:8c:67:d3:a5:49:c8:4e: f3:74:24:7b:fa:0b:76:bc:ac:fa:e3:af:1b:e4:b5: de:49:a7:b9:77:4d:5c:b9:9c:68:4d:c7:2a:a0:49: e4:55:ee:5f:5e:c7:b9:f7:18:2c:82:66:07:c1:d4: df:59:9b:f5:7d:38:a7:21:6c:01:68:ec:94:27:e8: 17:71:6c:35:ec:e0:8c:22:d7:3e:38:1e:5f:63:00: 9c:bc:20:d0:6a:20:a8:e3:b1:c5:1c:20:d6:88:42: 5e:74:6d:75:b7:b9:9c:2a:8c:1e:a8:8b:36:c0:62: be:2b:6a:36:fa:ad:ee:c1:ab:78:0e:fc:93:bc:5b: 3a:ea:aa:27:94:e8:7f:6e:3e:4d:47:ac:72:2b:86: e1:63:fa:55:8c:8a:5f:7a:b8:97:76:cd:b2:ba:98: 1e:70:a6:44:4f:98:c0:00:bc:54:79:ce:b9:8c:9c: 41:9b:25:2a:13:8d:0b:0d:23:b9:9f:d2:bc:17:df: e2:20:85:c7:3e:4c:50:82:e6:2e:fd:2b:1f:31:59: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:90:F5:50:79:48:EC:C8:12:CA:44:10:39:10:3D:1C:03:83:89:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257/50da0c92-0f0a-3428-bab6-b3ea60f7bd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257/a6a7836a-4a83-457c-842d-483525cb7257.crl X509v3 Authority Key Identifier: keyid:D5:30:DE:C4:A2:0C:AC:D2:07:FE:90:9B:BF:0A:CA:ED:41:85:9B:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a6a7836a-4a83-457c-842d-483525cb7257.cer sbgp-ipAddrBlock: critical IPv4: 192.135.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3a:26:32:8c:cc:c4:79:83:86:08:00:f3:55:dd:af:09:ee: b4:28:6c:da:f3:be:dd:2e:55:67:c3:91:48:9b:ac:6f:3a:34: cb:e9:6c:de:d0:3c:34:30:76:8c:3a:61:7e:8f:f5:d9:75:2a: 4d:72:62:f5:d9:5d:67:29:54:08:3d:59:49:91:2a:5f:cc:28: 98:37:7a:90:03:26:0b:76:00:99:31:af:c1:db:0a:4e:a7:20: d4:f5:47:90:96:85:9e:c0:46:ed:df:5c:51:13:42:5a:e2:fb: 5e:f8:16:11:15:57:81:35:1e:db:70:0e:66:0c:ae:a4:b5:87: 77:25:b2:3f:6b:a1:31:9f:a8:07:2a:72:15:dd:2b:b0:cf:44: a3:36:3e:fd:4d:9e:14:84:ee:1a:b4:37:4c:39:13:ba:90:88: 70:07:94:ca:81:20:c6:f0:e1:14:73:69:fd:94:73:18:15:35: 63:3c:ce:2a:9a:2d:c6:c9:5f:ed:8a:68:2e:46:31:d6:66:97: e0:c6:1c:26:7a:59:68:fa:2d:17:da:56:b9:6d:14:90:e7:fa: e2:08:1f:e5:4e:df:eb:24:d9:9d:d8:ab:95:d5:cd:ea:b9:2a: a8:51:a2:b8:f9:77:36:05:ec:c0:72:6c:5d:b2:f8:c0:1d:7c: 00:ae:7f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq66Xq9s/V05l/ewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZhNzgzNmEtNGE4My00NTdjLTg0MmQtNDgzNTI1Y2I3 MjU3MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MWYyYjUwZmItOGFiNS00N2QwLTg2MjktMzM3ZDkwYmQ3OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUqdcB8OHLvHEVy9inxfjvXMKCUG3T9EhJ7e trLHOjHuGVGAICHeh76CgO88n5VHfLTGlIxn06VJyE7zdCR7+gt2vKz6468b5LXe Sae5d01cuZxoTccqoEnkVe5fXse59xgsgmYHwdTfWZv1fTinIWwBaOyUJ+gXcWw1 7OCMItc+OB5fYwCcvCDQaiCo47HFHCDWiEJedG11t7mcKoweqIs2wGK+K2o2+q3u wat4DvyTvFs66qonlOh/bj5NR6xyK4bhY/pVjIpferiXds2yupgecKZET5jAALxU ec65jJxBmyUqE40LDSO5n9K8F9/iIIXHPkxQguYu/SsfMVnBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyQ9VB5SOzIEspEEDkQPRwDg4lrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNmE3 ODM2YS00YTgzLTQ1N2MtODQyZC00ODM1MjVjYjcyNTcvNTBkYTBjOTItMGYwYS0z NDI4LWJhYjYtYjNlYTYwZjdiZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTZhNzgzNmEtNGE4My00NTdjLTg0 MmQtNDgzNTI1Y2I3MjU3L2E2YTc4MzZhLTRhODMtNDU3Yy04NDJkLTQ4MzUyNWNi NzI1Ny5jcmwwHwYDVR0jBBgwFoAU1TDexKIMrNIH/pCbvwrK7UGFm6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNmE3ODM2YS00YTgzLTQ1N2MtODQyZC00ODM1 MjVjYjcyNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY6JjKMzMR5g4YIAPNV3a8J7rQobNrzvt0uVWfDkUibrG86NMvpbN7Q PDQwdow6YX6P9dl1Kk1yYvXZXWcpVAg9WUmRKl/MKJg3epADJgt2AJkxr8HbCk6n INT1R5CWhZ7ARu3fXFETQlri+174FhEVV4E1HttwDmYMrqS1h3clsj9roTGfqAcq chXdK7DPRKM2Pv1NnhSE7hq0N0w5E7qQiHAHlMqBIMbw4RRzaf2UcxgVNWM8ziqa LcbJX+2KaC5GMdZml+DGHCZ6WWj6LRfaVrltFJDn+uIIH+VO3+sk2Z3Yq5XVzeq5 KqhRorj5dzYF7MBybF2y+MAdfACuf1Y= -----END CERTIFICATE-----Generated at Fri Apr 11 21:48:57 2025 by rpki-client