$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa File: cafde11a-c375-36a5-a218-aad0aa1a246b.roa (raw, json) Hash identifier: cmysMjRo2S+i4CvG9DIzTsOpvL+3kocDl6aYKaQ6FTg= Subject key identifier: EC:71:C3:5F:71:6C:B4:C7:8D:56:1A:8E:54:AC:A7:4A:34:8D:77:E9 Certificate issuer: /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6 Certificate serial: 010D0C9F4328584964843C819F3DE9F7C1D77EE0 Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 135.109.194.0/24 maxlen: 24 135.109.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3c:81:9f:3d:e9:f7:c1:d7:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=4ae1c3de-4653-4bf8-bf74-b7881a95a197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:2c:6e:cf:42:fb:00:61:f3:2a:6a:fe:63: 1c:15:d7:16:ce:1b:2f:b5:40:23:d9:81:10:7d:d1: 62:34:1f:2f:53:7f:71:f1:df:0d:27:5e:0a:d3:8e: 4b:ce:07:69:1a:33:89:14:c4:51:6c:a8:7b:21:eb: 0c:37:9d:1d:55:45:96:01:97:0c:38:1d:77:dc:70: 0d:60:63:dc:9f:81:6d:de:b3:50:99:6c:a7:0d:ca: c9:6a:75:c8:df:0f:ca:a2:e8:6f:25:12:ff:58:fa: be:29:7a:22:d2:66:82:ec:26:55:ae:77:a1:aa:59: c7:38:be:c1:94:1a:c8:8a:70:c6:3b:39:e1:b3:70: c2:bb:6f:d1:00:96:6c:18:c4:42:bc:16:c6:ed:a3: e5:91:25:3c:ad:dc:5d:b9:2f:02:07:13:94:91:05: 5b:79:2a:95:cc:c6:fd:42:87:90:ae:29:c1:f9:72: f2:96:e6:f7:91:da:2a:dd:0b:3e:90:6c:6e:ca:e5: 69:9b:56:64:5f:51:6c:bb:9a:f8:81:0f:62:29:96: 25:3c:26:90:b1:67:16:41:6b:24:12:98:85:89:ce: b8:20:e0:c2:0e:86:fd:8e:f3:20:66:e6:91:ff:c3: 2b:67:73:d0:50:5d:d6:45:d2:4d:3a:49:3d:69:6f: ee:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:71:C3:5F:71:6C:B4:C7:8D:56:1A:8E:54:AC:A7:4A:34:8D:77:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl X509v3 Authority Key Identifier: keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer sbgp-ipAddrBlock: critical IPv4: 135.109.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:16:d4:aa:b5:f6:b4:76:aa:25:c6:a2:dc:9d:bf:44:6a:b6: c3:b5:d6:2f:f5:57:83:d7:b7:15:26:a3:d4:9a:77:a9:d4:5e: 79:c5:e9:1a:7c:33:87:d9:45:4d:74:2c:29:53:82:fe:4c:5c: dc:c3:37:cf:fe:d9:bf:09:c4:8b:ed:1f:5f:6d:49:f0:18:53: 06:55:b2:ab:32:ab:64:98:62:c5:e8:53:7f:86:af:16:d3:d7: f2:15:23:83:4c:9e:3d:41:b1:4f:a2:1e:41:0b:03:22:7a:eb: 3f:14:46:09:fb:e0:7d:26:fa:3a:6c:8c:ce:f1:92:7e:72:fa: 5f:f8:26:db:02:da:8d:ae:1b:11:12:9f:82:3d:35:1e:dc:91: 6a:e4:9b:4f:ef:19:a7:2a:c7:cd:35:ae:64:e4:3f:ae:11:53: 61:d3:2e:c3:c1:62:78:cb:f0:4b:23:35:66:0d:f8:34:f0:15: c1:0a:d3:b5:41:19:67:98:b0:ce:e1:08:bb:38:33:b7:01:72: e6:59:91:7d:ef:59:41:aa:fe:19:1b:83:ad:0f:7a:fa:75:2a: 45:21:bc:c2:29:6f:68:26:17:b3:fe:72:39:55:d3:01:f8:c1: 95:c0:0d:05:a7:61:76:cc:60:df:5c:31:d9:59:60:d0:13:2f: 41:e3:91:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhDyBnz3p98HXfuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzYzc0MzMtNmQ1ZC00ZjdjLWIyZWYtOThjY2IxZDEw OGQ2MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NGFlMWMzZGUtNDY1My00YmY4LWJmNzQtYjc4ODFhOTVhMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT8sbs9C+wBh8ypq/mMcFdcWzhsvtUAj2YEQ fdFiNB8vU39x8d8NJ14K045LzgdpGjOJFMRRbKh7IesMN50dVUWWAZcMOB133HAN YGPcn4Ft3rNQmWynDcrJanXI3w/KouhvJRL/WPq+KXoi0maC7CZVrnehqlnHOL7B lBrIinDGOznhs3DCu2/RAJZsGMRCvBbG7aPlkSU8rdxduS8CBxOUkQVbeSqVzMb9 QoeQrinB+XLylub3kdoq3Qs+kGxuyuVpm1ZkX1Fsu5r4gQ9iKZYlPCaQsWcWQWsk EpiFic64IODCDob9jvMgZuaR/8MrZ3PQUF3WRdJNOkk9aW/uIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxxw19xbLTHjVYajlSsp0o0jXfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNj NzQzMy02ZDVkLTRmN2MtYjJlZi05OGNjYjFkMTA4ZDYvY2FmZGUxMWEtYzM3NS0z NmE1LWEyMTgtYWFkMGFhMWEyNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTMzYzc0MzMtNmQ1ZC00ZjdjLWIy ZWYtOThjY2IxZDEwOGQ2L2UzM2M3NDMzLTZkNWQtNGY3Yy1iMmVmLTk4Y2NiMWQx MDhkNi5jcmwwHwYDVR0jBBgwFoAUFlvmbqkKMt6CtBNVP7s4vgT3Z9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNjNzQzMy02ZDVkLTRmN2MtYjJlZi05OGNj YjFkMTA4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh23CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkW1Kq19rR2qiXGotydv0RqtsO11i/1V4PXtxUmo9Sad6nUXnnF6Rp8 M4fZRU10LClTgv5MXNzDN8/+2b8JxIvtH19tSfAYUwZVsqsyq2SYYsXoU3+GrxbT 1/IVI4NMnj1BsU+iHkELAyJ66z8URgn74H0m+jpsjM7xkn5y+l/4JtsC2o2uGxES n4I9NR7ckWrkm0/vGacqx801rmTkP64RU2HTLsPBYnjL8EsjNWYN+DTwFcEK07VB GWeYsM7hCLs4M7cBcuZZkX3vWUGq/hkbg60Pevp1KkUhvMIpb2gmF7P+cjlV0wH4 wZXADQWnYXbMYN9cMdlZYNATL0HjkYY= -----END CERTIFICATE-----Generated at Fri Apr 4 23:38:19 2025 by rpki-client