$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa File: c0cae52e-f020-3204-8c02-c98f21b83298.roa (raw, json) Hash identifier: Yl3VJSYv23DYKZTNsis/10VltZqNCo9UYvHTOawxQhw= Subject key identifier: 3C:2F:66:C9:1B:13:17:C6:67:96:96:D3:40:A1:B9:28:FC:63:A2:02 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285848A1361069732D12C6B7E25800 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:10:69:73:2d:12:c6:b7:e2:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=ceaee18a-3947-4c0a-8c48-0c8b21d6a017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:5e:fc:d4:e1:3d:de:8a:67:b1:11:0c:4c: 56:27:29:dd:df:89:15:61:17:19:d3:b9:e7:2c:e1: 84:45:0b:43:e9:42:cd:ae:78:9e:7f:9f:ce:16:0a: 9a:a7:5e:c5:64:6a:04:4e:30:09:a8:47:03:94:8e: 04:9a:46:cb:70:6e:61:78:92:28:59:6b:f7:d0:7b: 88:ed:5a:88:cb:8d:dc:43:60:a3:90:80:cb:83:4d: e2:4c:3c:8d:28:81:b4:90:a2:72:48:17:a1:06:ae: e2:21:04:86:97:14:bb:19:8f:2a:47:8a:c3:1f:30: 2e:be:db:61:f2:d3:66:04:61:2c:49:3a:33:c0:85: bc:b6:0d:0b:93:1e:db:65:00:4d:09:60:f7:2f:1f: a7:f3:31:6e:1e:53:78:e1:5d:5f:72:a7:05:48:0d: 64:f7:e3:1a:fe:89:68:01:7c:e5:df:a2:aa:fd:0f: 38:4a:49:81:22:21:01:e1:f2:c9:d7:f8:90:9d:29: 48:5d:2e:fe:9a:a2:f2:a1:1f:a0:d0:dd:d2:34:cd: 4d:f0:32:01:9e:bf:0f:17:fa:f6:d4:94:a4:a3:3f: 1e:83:a6:ab:7d:88:d8:82:fc:7f:fb:b2:f0:08:3d: 5d:1e:28:76:d2:1d:c8:24:4b:26:9c:28:05:b9:12: ab:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2F:66:C9:1B:13:17:C6:67:96:96:D3:40:A1:B9:28:FC:63:A2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:36:69:59:64:28:b9:1c:6d:c2:74:1a:b7:0d:f3:d4:f1:10: dc:2d:51:df:38:84:74:1b:a3:4b:38:3c:60:bf:9f:0e:d4:e6: db:8b:9c:8b:f6:f9:81:30:7d:cd:10:5e:23:b2:0e:38:87:e2: 71:9a:f0:93:11:55:72:4f:2c:4a:e6:8e:b9:20:45:cb:fe:35: c4:5e:a8:29:75:b5:52:80:05:bc:12:c8:2f:d1:05:21:eb:24: 43:1b:cc:46:95:d1:e4:f0:cf:6b:e8:a9:ff:cd:95:e0:04:47: 5f:de:98:ef:97:2c:6a:b7:37:cb:a6:26:07:78:6c:18:94:8a: 75:b7:7c:4b:45:2f:2f:a6:15:9c:4c:8d:68:d3:69:4b:55:cf: 85:4f:dd:24:3e:09:7b:91:87:1f:42:42:91:f3:c8:2a:49:43: 86:ed:41:de:dc:a3:1e:e9:0f:ac:bd:e9:c3:90:52:b5:99:85: 0b:43:9f:ab:23:2f:5a:1f:68:64:d0:34:43:dc:a7:c1:12:39: 54:4f:29:f2:20:f4:c1:13:12:6d:6b:f3:a3:bc:be:25:9a:f1: 64:df:67:f1:d1:b1:86:24:4b:ef:46:18:0e:c2:43:90:5d:97: 74:3c:b9:59:73:55:6d:b7:e8:b9:fb:27:fa:f3:f2:cf:af:64: fb:66:fa:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhBpcy0SxrfiWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk Y2VhZWUxOGEtMzk0Ny00YzBhLThjNDgtMGM4YjIxZDZhMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQBe/NThPd6KZ7ERDExWJynd34kVYRcZ07nn LOGERQtD6ULNrnief5/OFgqap17FZGoETjAJqEcDlI4EmkbLcG5heJIoWWv30HuI 7VqIy43cQ2CjkIDLg03iTDyNKIG0kKJySBehBq7iIQSGlxS7GY8qR4rDHzAuvtth 8tNmBGEsSTozwIW8tg0Lkx7bZQBNCWD3Lx+n8zFuHlN44V1fcqcFSA1k9+Ma/olo AXzl36Kq/Q84SkmBIiEB4fLJ1/iQnSlIXS7+mqLyoR+g0N3SNM1N8DIBnr8PF/r2 1JSkoz8eg6arfYjYgvx/+7LwCD1dHih20h3IJEsmnCgFuRKrgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwvZskbExfGZ5aW00ChuSj8Y6ICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvYzBjYWU1MmUtZjAyMC0z MjA0LThjMDItYzk4ZjIxYjgzMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk2aVlkKLkcbcJ0GrcN89TxENwtUd84hHQbo0s4PGC/nw7U5tuLnIv2 +YEwfc0QXiOyDjiH4nGa8JMRVXJPLErmjrkgRcv+NcReqCl1tVKABbwSyC/RBSHr JEMbzEaV0eTwz2voqf/NleAER1/emO+XLGq3N8umJgd4bBiUinW3fEtFLy+mFZxM jWjTaUtVz4VP3SQ+CXuRhx9CQpHzyCpJQ4btQd7cox7pD6y96cOQUrWZhQtDn6sj L1ofaGTQNEPcp8ESOVRPKfIg9METEm1r86O8viWa8WTfZ/HRsYYkS+9GGA7CQ5Bd l3Q8uVlzVW236Ln7J/rz8s+vZPtm+us= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:31 2025 by rpki-client