$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/745636c2-ac99-35a4-b899-f64b23092830.roa File: 745636c2-ac99-35a4-b899-f64b23092830.roa (raw, json) Hash identifier: x6ewRKnFPt5iqOFj3ZdPr6olKAqbG47RnTuqAicEWtI= Subject key identifier: 83:FF:8C:66:F0:08:12:48:C9:5D:8C:AC:21:81:FC:DE:8A:CF:C5:C4 Certificate issuer: /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55 Certificate serial: 010D0C9F43285848A996290CEC14ED610CB52700 Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/745636c2-ac99-35a4-b899-f64b23092830.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 54665 IP address blocks: 192.195.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:29:0c:ec:14:ed:61:0c:b5:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d8a5a41d-fd89-4fa6-bcea-b66adf948f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a1:34:e3:42:45:12:66:79:5a:1d:a8:f1:9f: a3:a7:0a:2a:ba:52:2a:6b:3d:f1:fc:ce:52:ab:39: 17:43:3b:ff:7b:a0:b9:25:3e:9a:75:c0:c2:17:3d: aa:f3:5c:a0:35:ab:d0:17:2b:86:c9:a7:3a:f6:ca: 6f:85:23:39:9f:dd:62:6b:17:05:13:35:0b:36:9b: bb:33:5a:65:69:aa:dd:3b:92:be:7c:82:06:8b:79: 0d:3a:a6:e8:39:65:d3:ec:b7:48:f4:5b:60:c4:be: b6:6b:1d:37:7b:40:0f:20:59:48:17:4b:90:30:ea: f6:58:4c:ca:e7:5a:bc:81:35:90:35:ba:5c:b1:71: f1:8c:08:18:f3:96:05:56:d9:0c:ad:38:4d:da:98: 71:f5:58:37:e2:7d:1a:86:90:42:5b:60:cc:af:46: 71:0d:3f:4b:83:85:0d:de:0c:56:b9:72:37:09:4e: be:08:bb:11:6e:21:4e:67:9e:a8:fa:2a:0b:66:ab: 16:bc:39:db:36:08:b3:2d:1b:32:03:20:ea:e7:00: b7:7e:be:95:a0:01:5d:95:03:3d:77:9a:de:b8:0a: 3a:4a:5b:c1:b5:55:59:e6:f5:06:b1:a2:8b:b3:ba: 19:61:e0:e7:6e:c3:ce:ef:c4:37:0b:1a:ae:d1:bd: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FF:8C:66:F0:08:12:48:C9:5D:8C:AC:21:81:FC:DE:8A:CF:C5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/745636c2-ac99-35a4-b899-f64b23092830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl X509v3 Authority Key Identifier: keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer sbgp-ipAddrBlock: critical IPv4: 192.195.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5d:54:b0:f8:3f:42:a9:15:4f:ba:96:c4:db:4a:87:21:a6: 4d:fe:3b:4e:23:0d:4d:30:23:99:a1:0f:cf:06:64:14:2d:6a: b4:cf:6d:9b:e4:6b:04:b3:5b:23:e2:bd:94:c7:a3:8a:30:b6: d6:b6:0f:da:f8:23:63:14:84:49:d8:de:2f:12:7a:3e:f2:fb: b0:5a:92:b9:48:a4:85:8f:a8:70:61:d7:34:59:b4:ab:31:ad: 96:0f:65:50:3a:ee:c8:53:30:64:bd:22:69:18:7f:b9:f0:3c: 80:5f:e1:ef:8f:8a:d1:4b:ea:ab:ca:ca:ec:02:92:ed:b4:79: 36:59:a4:ab:07:99:5a:aa:73:4b:b5:6e:77:78:4b:c7:d3:02: 2d:51:df:bd:83:01:7d:14:11:4b:8b:ed:d4:3b:1c:4f:a5:eb: 6a:61:25:68:0b:cf:53:2a:92:b1:d5:d8:d0:d6:28:52:8c:aa: ea:7a:11:36:27:e8:6b:0b:3b:d4:d7:10:51:28:e9:8a:32:33: a0:87:a8:ca:d7:ab:94:cb:9c:88:d0:92:57:d5:cf:12:d8:73: 59:c4:94:1c:9d:42:59:57:e1:ea:3b:ca:1f:a7:7f:f4:ea:11: ee:de:34:e5:7c:bf:af:6e:e1:e7:12:d4:8f:c8:85:a9:ab:85: 46:77:33:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplikM7BTtYQy1JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDM1YzU3NzktMGUwYi00Y2E1LTkyMTMtNmVkZGRhZDli YzU1MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDhhNWE0MWQtZmQ4OS00ZmE2LWJjZWEtYjY2YWRmOTQ4ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaE040JFEmZ5Wh2o8Z+jpwoqulIqaz3x/M5S qzkXQzv/e6C5JT6adcDCFz2q81ygNavQFyuGyac69spvhSM5n91iaxcFEzULNpu7 M1plaardO5K+fIIGi3kNOqboOWXT7LdI9FtgxL62ax03e0APIFlIF0uQMOr2WEzK 51q8gTWQNbpcsXHxjAgY85YFVtkMrThN2phx9Vg34n0ahpBCW2DMr0ZxDT9Lg4UN 3gxWuXI3CU6+CLsRbiFOZ56o+ioLZqsWvDnbNgizLRsyAyDq5wC3fr6VoAFdlQM9 d5reuAo6SlvBtVVZ5vUGsaKLs7oZYeDnbsPO78Q3Cxqu0b2ZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP/jGbwCBJIyV2MrCGB/N6Kz8XEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MzVj NTc3OS0wZTBiLTRjYTUtOTIxMy02ZWRkZGFkOWJjNTUvNzQ1NjM2YzItYWM5OS0z NWE0LWI4OTktZjY0YjIzMDkyODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDM1YzU3NzktMGUwYi00Y2E1LTky MTMtNmVkZGRhZDliYzU1LzQzNWM1Nzc5LTBlMGItNGNhNS05MjEzLTZlZGRkYWQ5 YmM1NS5jcmwwHwYDVR0jBBgwFoAU26ZuQp5FEmEMtvQhWDW9hgEVBgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MzVjNTc3OS0wZTBiLTRjYTUtOTIxMy02ZWRk ZGFkOWJjNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMNUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpdVLD4P0KpFU+6lsTbSochpk3+O04jDU0wI5mhD88GZBQtarTPbZvk awSzWyPivZTHo4owtta2D9r4I2MUhEnY3i8Sej7y+7BakrlIpIWPqHBh1zRZtKsx rZYPZVA67shTMGS9ImkYf7nwPIBf4e+PitFL6qvKyuwCku20eTZZpKsHmVqqc0u1 bnd4S8fTAi1R372DAX0UEUuL7dQ7HE+l62phJWgLz1MqkrHV2NDWKFKMqup6ETYn 6GsLO9TXEFEo6YoyM6CHqMrXq5TLnIjQklfVzxLYc1nElBydQllX4eo7yh+nf/Tq Ee7eNOV8v69u4ecS1I/IhamrhUZ3Mzc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:55 2025 by rpki-client