$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa File: 101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa (raw, json) Hash identifier: yNSPneCuDWyAfBOj5B7x0+LbBFVOomqp7TTH5towl3w= Subject key identifier: 38:4C:C0:F9:FD:A9:A7:49:89:D8:05:B6:EF:89:C6:A2:02:C9:31:7E Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F432858487755DFA15AAFF09F50CA2FB4 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 109 IP address blocks: 192.135.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:df:a1:5a:af:f0:9f:50:ca:2f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=ece33215-7eef-409a-8a79-5b27d275d2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:43:d0:53:11:96:7f:8f:50:64:9a:59:1e: 1c:9c:fa:e9:70:c9:7d:74:a8:0a:6b:1e:c1:39:ac: 58:82:0b:50:21:d4:9a:e0:ae:6b:cf:e3:cf:71:39: ee:c4:fe:b8:09:b2:8a:5a:06:69:78:26:6c:ca:d7: a5:fd:7f:e5:25:f4:6d:6d:2c:b6:73:b3:d0:25:e0: 19:c2:61:06:12:33:f0:de:ae:2a:79:0c:2c:62:89: 95:c2:a8:a3:21:74:ca:ae:d9:af:06:d6:10:e7:e2: b3:c8:51:36:5d:1f:a3:8b:d6:74:8e:d8:5e:16:00: 16:d3:80:f6:39:1c:23:24:d8:f1:c7:39:0a:0d:44: 80:9f:65:2d:6f:fe:50:56:02:57:9d:a2:78:be:d0: 0d:da:f5:96:ae:98:a8:62:b4:58:c2:66:07:73:d8: d6:5a:e0:c1:68:51:ab:c3:08:38:76:41:d7:29:ca: 8a:b7:52:ee:69:e0:ba:43:e4:af:8c:31:7a:94:66: d3:19:82:45:ea:69:c7:e5:77:23:8a:71:23:a4:c0: 2f:2b:e5:90:98:af:9d:48:b5:5f:df:24:98:96:0e: 6d:26:db:15:ab:9b:4b:1b:fb:3f:9f:ae:ae:74:b2: b8:13:f1:33:2c:fb:de:f5:71:88:be:d9:93:8e:67: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4C:C0:F9:FD:A9:A7:49:89:D8:05:B6:EF:89:C6:A2:02:C9:31:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:54:d2:cf:9b:51:16:64:e1:b2:48:96:cb:0f:4d:7f:19:9f: 76:3d:54:de:84:e5:ae:6b:f3:5a:2a:c3:9f:5e:ac:4a:98:d0: e9:b6:b2:30:4b:28:14:fc:44:ed:33:ca:4c:82:3f:13:b7:1d: 68:8f:e6:f6:7a:fd:c7:06:4e:64:e8:d5:b3:b5:c4:75:c1:f5: 3d:fa:63:ea:3f:e5:e6:ef:f0:0a:70:1b:16:1d:dd:c1:1d:df: a7:fb:95:dc:a3:e5:5e:ae:74:70:cd:02:83:b1:aa:37:7c:74: 2d:23:8b:68:a4:dc:ce:24:9e:f9:20:75:46:4f:ff:fd:13:13: 90:9b:45:2a:61:98:ea:0a:1e:84:4e:f6:11:14:04:4a:25:83: a2:e9:5f:71:d1:c1:17:91:46:5e:5f:74:6d:7a:0f:ef:2e:a9: 75:43:d9:5f:d1:03:95:64:4f:83:ce:00:4e:68:e9:c4:c7:96: b3:92:84:8c:39:c6:5a:c0:4e:1e:1c:e1:f2:6e:97:cb:89:b0: 69:60:4b:26:d4:51:8b:1a:54:e6:3d:e1:b4:59:eb:64:e0:31: 5a:91:5a:69:43:e2:51:1f:d4:dd:df:6f:86:30:d6:3b:7e:48: bd:17:72:93:d4:75:bc:78:75:4d:59:91:72:c7:ea:78:f8:a3: 6d:61:ea:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3Vd+hWq/wn1DKL7QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ZWNlMzMyMTUtN2VlZi00MDlhLThhNzktNWIyN2QyNzVkMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtRD0FMRln+PUGSaWR4cnPrpcMl9dKgKax7B OaxYggtQIdSa4K5rz+PPcTnuxP64CbKKWgZpeCZsytel/X/lJfRtbSy2c7PQJeAZ wmEGEjPw3q4qeQwsYomVwqijIXTKrtmvBtYQ5+KzyFE2XR+ji9Z0jtheFgAW04D2 ORwjJNjxxzkKDUSAn2Utb/5QVgJXnaJ4vtAN2vWWrpioYrRYwmYHc9jWWuDBaFGr wwg4dkHXKcqKt1LuaeC6Q+SvjDF6lGbTGYJF6mnH5XcjinEjpMAvK+WQmK+dSLVf 3ySYlg5tJtsVq5tLG/s/n66udLK4E/EzLPve9XGIvtmTjmdH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhMwPn9qadJidgFtu+JxqICyTF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvMTAxZTg0YWEtOGFmYy0z ZGQ1LThmYzAtMGM5YmU2ZDFhZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRU0s+bURZk4bJIlssPTX8Zn3Y9VN6E5a5r81oqw59erEqY0Om2sjBL KBT8RO0zykyCPxO3HWiP5vZ6/ccGTmTo1bO1xHXB9T36Y+o/5ebv8ApwGxYd3cEd 36f7ldyj5V6udHDNAoOxqjd8dC0ji2ik3M4knvkgdUZP//0TE5CbRSphmOoKHoRO 9hEUBEolg6LpX3HRwReRRl5fdG16D+8uqXVD2V/RA5VkT4POAE5o6cTHlrOShIw5 xlrATh4c4fJul8uJsGlgSybUUYsaVOY94bRZ62TgMVqRWmlD4lEf1N3fb4Yw1jt+ SL0XcpPUdbx4dU1ZkXLH6nj4o21h6tA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:08 2025 by rpki-client