$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa File: d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa (raw, json) Hash identifier: +hnIZgSxE+GHh3EQvuPHUCdPB8fiwTMwDPcCbpldNVY= Subject key identifier: BA:76:88:CE:6B:20:4E:B5:E4:D3:27:BD:A9:5D:1E:DC:68:6F:F0:4C Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F43285848DEA117582693B9D0F5361B00 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 140731 IP address blocks: 174.136.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:17:58:26:93:b9:d0:f5:36:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=3ba8464c-082c-4f3a-81c1-9af4c856d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:c7:bf:8b:4d:97:ac:58:be:ee:d3:6a:b9: f7:aa:c9:22:3d:d4:98:bc:6b:1d:cf:94:55:8e:fe: 32:a9:71:74:8c:01:c6:53:a5:e6:65:d6:66:ff:e0: d7:20:c7:82:a8:69:22:20:30:f9:8e:4b:b5:3c:3d: ce:92:a8:dc:3b:09:ae:95:6f:b7:ba:94:48:14:73: f7:ae:1b:c8:40:01:07:2d:6f:d2:a4:fa:5f:37:f2: 5a:af:8d:c1:3b:54:9d:09:02:ed:27:db:c3:c9:72: 2d:f3:de:cb:c8:51:a5:db:98:fb:af:2d:70:6b:8d: 1f:0e:e4:f1:60:d2:3c:9a:2c:1d:16:e9:33:ba:da: a1:17:f1:f7:67:59:a8:8a:a1:ca:da:b3:dd:27:1e: 93:f3:05:40:34:f4:d0:32:d5:2f:34:6f:d5:21:d0: 73:e3:ba:58:dc:b5:39:1b:62:0f:69:ec:cd:7a:3d: 11:76:2f:b2:84:12:e4:72:5b:8f:10:6f:69:33:75: 07:a9:af:b7:a2:28:ea:69:c9:da:24:0f:13:dc:aa: be:d5:fd:d0:ac:de:c0:ec:db:20:4d:af:b3:60:6f: 1f:24:13:20:ec:4f:66:8f:3d:e4:b7:8f:57:a7:ea: 21:4e:f0:28:45:b3:2c:98:db:a2:41:b4:c0:46:d2: f6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:76:88:CE:6B:20:4E:B5:E4:D3:27:BD:A9:5D:1E:DC:68:6F:F0:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9e:2d:ad:97:53:d6:e9:d6:94:34:11:3c:21:b3:3d:34:b5: 4a:3d:b5:1d:9f:d9:5a:af:ff:d1:2f:17:c4:a9:ed:8e:f5:32: 29:6b:be:5e:c5:7b:c3:d9:8a:91:a3:5b:7b:79:b6:c7:a7:fb: aa:a5:09:de:44:56:2b:fc:d1:96:c1:80:7a:9a:9a:03:fe:5b: d2:11:c5:0d:6a:bf:3c:09:ca:ca:23:6d:06:f3:69:3e:46:3a: 79:51:d3:1d:b7:02:26:f8:7e:25:67:1e:aa:18:13:6f:d7:10: 41:f1:5d:18:6d:76:41:46:5b:f9:1d:fa:ca:a0:83:c7:b5:3d: 4e:63:24:46:8d:46:2e:5c:98:5e:bc:85:7e:e0:f7:20:43:2b: 0b:e4:01:0a:23:48:12:4e:83:0b:f7:4f:7e:5b:0f:c7:02:65: 1d:35:33:12:d9:7b:69:34:8a:eb:34:df:fb:49:82:11:98:2f: 61:ac:f3:5c:36:56:ef:bf:50:07:4b:f7:0f:b9:cd:49:9a:9f: 07:98:7d:c2:eb:b8:93:bb:22:5b:9d:cf:bf:a1:69:2d:43:34: 75:d3:e0:94:06:6c:fc:ab:9b:62:98:53:06:96:2e:a7:63:28: b2:86:d9:e2:ac:f3:6b:87:ea:cf:42:3b:87:14:72:f0:ed:75: d0:07:79:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoRdYJpO50PU2GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk M2JhODQ2NGMtMDgyYy00ZjNhLTgxYzEtOWFmNGM4NTZkMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJDHv4tNl6xYvu7Tarn3qskiPdSYvGsdz5RV jv4yqXF0jAHGU6XmZdZm/+DXIMeCqGkiIDD5jku1PD3OkqjcOwmulW+3upRIFHP3 rhvIQAEHLW/SpPpfN/Jar43BO1SdCQLtJ9vDyXIt897LyFGl25j7ry1wa40fDuTx YNI8miwdFukzutqhF/H3Z1moiqHK2rPdJx6T8wVANPTQMtUvNG/VIdBz47pY3LU5 G2IPaezNej0Rdi+yhBLkcluPEG9pM3UHqa+3oijqacnaJA8T3Kq+1f3QrN7A7Nsg Ta+zYG8fJBMg7E9mjz3kt49Xp+ohTvAoRbMsmNuiQbTARtL2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp2iM5rIE615NMnvaldHtxob/BMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvZDNkNTc3ZGYtYWE3NC0z YjlkLWJiODctMTg2MGNiMzQ0YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKeLa2XU9bp1pQ0ETwhsz00tUo9tR2f2Vqv/9EvF8Sp7Y71Milrvl7F e8PZipGjW3t5tsen+6qlCd5EViv80ZbBgHqamgP+W9IRxQ1qvzwJysojbQbzaT5G OnlR0x23Aib4fiVnHqoYE2/XEEHxXRhtdkFGW/kd+sqgg8e1PU5jJEaNRi5cmF68 hX7g9yBDKwvkAQojSBJOgwv3T35bD8cCZR01MxLZe2k0ius03/tJghGYL2Gs81w2 Vu+/UAdL9w+5zUmanweYfcLruJO7Iludz7+haS1DNHXT4JQGbPyrm2KYUwaWLqdj KLKG2eKs82uH6s9CO4cUcvDtddAHeWM= -----END CERTIFICATE-----Generated at Wed Apr 16 17:06:04 2025 by rpki-client