$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa File: ab4a7e1a-4ce4-327a-b528-184e489b447c.roa (raw, json) Hash identifier: qHPpH5ehruDBdIJzTMSi9Q0HEyS9gNTpq/vt9RAvoxA= Subject key identifier: 3E:45:9A:62:45:D8:85:04:2C:6B:63:BA:29:CD:EA:5B:9A:E8:59:E3 Certificate issuer: /CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Certificate serial: 010D0C9F43285848E16BD570D3AB52FD39F4F1C0 Authority key identifier: 1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 394090 IP address blocks: 192.136.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d5:70:d3:ab:52:fd:39:f4:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=f785f176-49cb-4c01-97df-e2d36dfd2649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:71:a2:9f:8a:2f:08:cd:24:6d:49:c9:6d: 53:98:bb:9b:63:cf:8a:8d:92:5d:4d:7e:32:2b:29: 4e:7a:52:ec:a4:4b:cc:46:7b:21:cf:d0:09:7c:20: bf:85:e7:13:16:bc:b4:bb:84:cc:b7:82:fa:0e:a4: 28:e5:e0:6b:70:bf:a9:36:52:09:b4:69:c8:78:0c: 86:ba:bb:ad:63:ab:ae:7c:37:e5:37:5d:e7:18:0f: cf:0c:d5:52:b0:33:2a:80:bb:5c:ca:cc:ed:33:d6: 34:39:25:d1:c5:38:f2:7c:5e:4f:8c:98:36:ab:ae: ec:ee:40:3b:ba:65:e7:d6:03:2b:f7:ce:1a:2b:53: c8:85:3d:2b:42:94:0e:26:54:07:c6:d0:58:26:c5: 31:0a:b5:ff:cb:91:c1:a8:89:bb:00:65:0b:94:c2: b7:57:da:12:63:44:be:c9:87:fa:ee:1c:7c:d2:cc: 3e:17:1a:ae:ba:ab:c4:b1:d7:48:94:a8:6b:d9:58: 68:2f:73:c6:a7:b4:82:ea:ea:59:a6:d3:44:22:9d: 2a:b3:f0:35:f4:31:02:a3:f0:4d:44:96:29:89:18: 6a:39:a7:2f:37:a8:d8:14:c5:0f:28:98:3d:c6:f7: a7:55:fc:41:c2:a4:01:73:b0:bd:99:e7:42:41:67: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:45:9A:62:45:D8:85:04:2C:6B:63:BA:29:CD:EA:5B:9A:E8:59:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl X509v3 Authority Key Identifier: keyid:1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer sbgp-ipAddrBlock: critical IPv4: 192.136.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:09:ff:c6:56:0d:75:8f:f2:ca:34:9d:1c:d5:7c:30:52:7f: f7:79:12:d0:18:13:92:0b:da:f8:03:81:2e:44:57:dd:01:c4: e0:20:43:bc:37:d1:49:58:d1:6a:55:1a:39:41:46:21:75:ef: 05:4f:32:5c:f1:53:fa:70:9c:ee:52:8b:1a:a1:b1:70:21:e1: d3:67:7e:b1:2c:fa:97:42:a7:dc:ef:19:d4:d4:03:d1:da:65: db:63:6d:02:1c:85:08:f9:6e:12:82:72:c7:c7:ad:d4:a9:67: fc:e6:1c:c0:42:16:04:74:eb:26:4d:db:78:80:36:84:f9:be: ec:45:6c:2c:a8:f1:51:05:b7:91:86:f1:c3:16:65:18:3e:07: 29:13:d6:76:0b:b0:3f:31:b6:ba:45:31:6a:ef:bf:d6:5b:99: 00:93:b5:70:5e:95:0f:87:53:f1:72:57:c6:d2:ac:1c:08:51: 0b:cb:c3:a3:99:e0:4b:d9:33:43:b6:3d:86:09:95:38:48:7f: cc:7a:59:b0:0e:e3:14:aa:09:53:af:f8:39:05:5c:cc:cf:44: 66:1a:9d:5c:a9:65:c5:dd:86:b3:e2:46:1e:ab:76:80:90:78: 71:05:fb:0f:14:4e:27:99:a0:6e:3c:e7:3c:62:69:37:6d:2e: af:a8:ac:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9Vw06tS/Tn08cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzZjY3MTctMjA0OC00NGMxLWFlNzctNTBlNWNlNmU5 ZGVhMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk Zjc4NWYxNzYtNDljYi00YzAxLTk3ZGYtZTJkMzZkZmQyNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGJxop+KLwjNJG1JyW1TmLubY8+KjZJdTX4y KylOelLspEvMRnshz9AJfCC/hecTFry0u4TMt4L6DqQo5eBrcL+pNlIJtGnIeAyG urutY6uufDflN13nGA/PDNVSsDMqgLtcysztM9Y0OSXRxTjyfF5PjJg2q67s7kA7 umXn1gMr984aK1PIhT0rQpQOJlQHxtBYJsUxCrX/y5HBqIm7AGULlMK3V9oSY0S+ yYf67hx80sw+FxquuqvEsddIlKhr2VhoL3PGp7SC6upZptNEIp0qs/A19DECo/BN RJYpiRhqOacvN6jYFMUPKJg9xvenVfxBwqQBc7C9medCQWdvNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5FmmJF2IUELGtjuinN6lua6FnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNm NjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1Y2U2ZTlkZWEvYWI0YTdlMWEtNGNlNC0z MjdhLWI1MjgtMTg0ZTQ4OWI0NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGMzZjY3MTctMjA0OC00NGMxLWFl NzctNTBlNWNlNmU5ZGVhLzRjM2Y2NzE3LTIwNDgtNDRjMS1hZTc3LTUwZTVjZTZl OWRlYS5jcmwwHwYDVR0jBBgwFoAUGznG6Jb5p5VqOxqjxSoENpY+TaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNmNjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1 Y2U2ZTlkZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEJ/8ZWDXWP8so0nRzVfDBSf/d5EtAYE5IL2vgDgS5EV90BxOAgQ7w3 0UlY0WpVGjlBRiF17wVPMlzxU/pwnO5SixqhsXAh4dNnfrEs+pdCp9zvGdTUA9Ha ZdtjbQIchQj5bhKCcsfHrdSpZ/zmHMBCFgR06yZN23iANoT5vuxFbCyo8VEFt5GG 8cMWZRg+BykT1nYLsD8xtrpFMWrvv9ZbmQCTtXBelQ+HU/FyV8bSrBwIUQvLw6OZ 4EvZM0O2PYYJlThIf8x6WbAO4xSqCVOv+DkFXMzPRGYanVypZcXdhrPiRh6rdoCQ eHEF+w8UTieZoG485zxiaTdtLq+orLI= -----END CERTIFICATE-----Generated at Fri Apr 18 02:01:18 2025 by rpki-client