$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/0059afbf-c64a-3c76-afa3-75508b064e07.roa File: 0059afbf-c64a-3c76-afa3-75508b064e07.roa (raw, json) Hash identifier: aUwrmBmBeVLeg2ow4rk4AWiXDKGmpKWZgksWrlsNI/g= Subject key identifier: 22:BE:D9:C5:06:CF:91:6D:2B:F4:37:DC:AD:4C:5F:32:7D:AF:46:76 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F432858492CB216D653075324C0DFB880 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/0059afbf-c64a-3c76-afa3-75508b064e07.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 397635 IP address blocks: 192.231.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:16:d6:53:07:53:24:c0:df:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b3597d69-9f64-46ea-981a-3891a1ac2880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:89:84:7f:d3:80:0b:e9:87:be:24:9c:9e: 27:99:99:c8:1b:70:0b:58:ac:20:41:42:cc:0a:f4: 0c:d7:96:3d:7d:a5:1e:f7:d1:08:01:f4:f0:2e:41: 24:28:2f:0e:bd:71:01:e6:c3:23:9f:76:1e:e9:cc: ef:1b:13:e5:73:c2:0a:54:6c:10:a5:fa:49:88:23: e8:ec:9c:61:af:75:d3:7f:17:0d:59:ed:9a:81:17: 6e:9d:c8:41:8f:ef:3e:4f:00:64:a3:74:a1:ad:3c: 6d:65:4f:fe:39:34:13:ac:e6:a4:cd:0e:c3:72:a7: 84:ad:cb:e8:b0:79:e3:e4:9e:b0:e3:28:9b:e7:1f: 50:1e:f6:b6:c9:93:bf:a0:3d:17:37:cd:b1:27:01: 26:5a:ee:3d:7d:b8:7c:9e:8f:1e:d7:e9:38:96:f4: 84:b9:49:70:48:e0:81:4f:66:ab:19:87:3b:36:a4: 49:3c:41:e6:1e:e2:f7:d9:d7:10:ac:b4:51:b4:2b: 35:4e:dd:6a:5f:74:0b:c3:b2:cf:b5:1a:ca:8d:8f: 08:5d:64:74:78:68:5a:32:d9:fe:b2:8f:83:a6:45: c4:4c:db:11:0b:eb:b5:a7:11:94:78:65:8f:f6:1c: 82:5e:de:1d:8c:34:71:34:b6:d7:44:f0:d0:7d:41: 99:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BE:D9:C5:06:CF:91:6D:2B:F4:37:DC:AD:4C:5F:32:7D:AF:46:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/0059afbf-c64a-3c76-afa3-75508b064e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 192.231.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2d:0b:82:fd:b2:5a:69:83:80:06:06:61:1a:f3:6a:8a:8e: 87:c1:72:39:64:0e:cb:2a:90:b7:cf:dc:22:f3:f4:1c:47:7a: 7c:41:7d:30:3e:ac:ce:d9:49:ba:61:7d:6a:7b:3d:32:2d:44: e2:a8:36:ab:b2:ef:d9:47:03:e6:c4:96:8e:70:73:82:05:4b: a3:82:ef:a1:e6:52:a1:f8:91:5a:d1:9b:19:46:ad:cf:fc:c4: 71:95:db:55:76:71:86:82:98:80:fb:8c:92:cf:93:87:5d:f1: 91:e3:07:5d:cd:be:cb:51:4b:57:59:0f:14:ea:71:42:78:b9: 1b:82:d1:a7:28:0d:a0:fc:a5:a9:56:0b:19:b8:46:f4:42:04: b9:56:46:91:cf:19:12:4a:a9:5a:10:50:47:ad:e8:d2:9a:94: 1f:d4:1e:98:f8:51:eb:76:fa:1e:af:b7:08:d6:73:26:09:00: 95:9b:26:06:e0:58:f6:e5:0a:fb:b8:1f:01:f9:0d:6c:0b:44: 5f:c2:f0:e1:ac:f6:24:c9:8b:b5:ba:50:9f:d2:9a:23:43:db: c2:c3:ad:7f:b0:8b:f0:e4:c6:af:67:dd:75:77:cb:33:a5:8e: 26:86:1c:ba:30:bb:98:6a:51:0c:f4:e9:dd:46:39:7e:87:4f: 6c:81:a8:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshbWUwdTJMDfuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjM1OTdkNjktOWY2NC00NmVhLTk4MWEtMzg5MWExYWMyODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF2JhH/TgAvph74knJ4nmZnIG3ALWKwgQULM CvQM15Y9faUe99EIAfTwLkEkKC8OvXEB5sMjn3Ye6czvGxPlc8IKVGwQpfpJiCPo 7Jxhr3XTfxcNWe2agRdunchBj+8+TwBko3ShrTxtZU/+OTQTrOakzQ7DcqeErcvo sHnj5J6w4yib5x9QHva2yZO/oD0XN82xJwEmWu49fbh8no8e1+k4lvSEuUlwSOCB T2arGYc7NqRJPEHmHuL32dcQrLRRtCs1Tt1qX3QLw7LPtRrKjY8IXWR0eGhaMtn+ so+DpkXETNsRC+u1pxGUeGWP9hyCXt4djDRxNLbXRPDQfUGZmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK+2cUGz5FtK/Q33K1MXzJ9r0Z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMDA1OWFmYmYtYzY0YS0z Yzc2LWFmYTMtNzU1MDhiMDY0ZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8tC4L9slppg4AGBmEa82qKjofBcjlkDssqkLfP3CLz9BxHenxBfTA+ rM7ZSbphfWp7PTItROKoNquy79lHA+bElo5wc4IFS6OC76HmUqH4kVrRmxlGrc/8 xHGV21V2cYaCmID7jJLPk4dd8ZHjB13NvstRS1dZDxTqcUJ4uRuC0acoDaD8palW Cxm4RvRCBLlWRpHPGRJKqVoQUEet6NKalB/UHpj4Uet2+h6vtwjWcyYJAJWbJgbg WPblCvu4HwH5DWwLRF/C8OGs9iTJi7W6UJ/SmiND28LDrX+wi/Dkxq9n3XV3yzOl jiaGHLowu5hqUQz06d1GOX6HT2yBqIY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:51 2025 by rpki-client