$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa File: 176ba803-b4f1-3a57-804d-e734d0c025da.roa (raw, json) Hash identifier: tHW4mJmI0sZv4XQcrUcyOq4ZmTOkKN9OekeaV+CczBY= Subject key identifier: 42:42:A2:8D:CE:BD:4A:4F:F2:D5:D2:38:4F:09:8E:74:26:0A:95:02 Certificate issuer: /CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472 Certificate serial: 010D0C9F43285849002169154CB1280E379438B0 Authority key identifier: D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 136.175.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:69:15:4c:b1:28:0e:37:94:38:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=1f16888d-6496-4be0-94e1-4ed1035d90bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1b:1a:91:8e:52:e5:94:82:a3:23:8b:8d:ec: 34:a6:78:c1:90:5d:87:59:2b:a6:0e:34:27:ad:e6: b4:2f:53:64:59:d7:75:75:f3:93:8b:7c:c5:70:6e: 6e:03:f2:4c:92:c0:13:e7:35:29:c6:38:34:57:5a: b0:c3:44:fb:4a:0f:f9:6f:0c:99:7e:01:69:f5:19: 3f:97:20:a2:5a:3e:d4:a3:73:dd:f2:b0:f6:21:d9: a5:1b:ee:75:09:f1:81:26:54:da:21:9c:43:25:fb: ca:aa:a3:82:a3:11:8e:10:93:3a:93:83:ae:e0:25: fd:c8:1e:27:3f:9a:5c:83:47:cd:dc:e8:75:e6:18: 28:18:8b:6d:1f:e6:b6:dc:c8:de:d5:d5:ec:ed:08: bd:cf:ba:fa:0e:78:7c:3e:3f:85:04:c2:44:58:10: 5d:eb:05:78:68:69:61:50:a8:7e:fc:82:55:df:74: f4:08:39:ac:ca:77:23:b2:fe:64:7a:5d:88:10:38: ef:96:23:2c:5b:d5:4f:e0:1d:1f:2f:7d:6c:e3:43: 63:a6:be:31:bf:3f:81:28:a5:d3:93:bd:af:4f:26: 4b:49:a8:8a:b8:b4:2a:76:57:af:db:9b:ea:fa:53: e6:cc:a9:9c:fc:50:b6:53:ef:4a:88:9c:33:39:2a: 73:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:A2:8D:CE:BD:4A:4F:F2:D5:D2:38:4F:09:8E:74:26:0A:95:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl X509v3 Authority Key Identifier: keyid:D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer sbgp-ipAddrBlock: critical IPv4: 136.175.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7f:58:bb:83:e9:27:c1:1c:e5:60:16:d0:7b:0e:86:89:c9: e5:cf:79:16:75:29:a3:1b:7c:91:de:cf:15:8c:d7:11:a6:d0: b5:e9:88:88:33:30:3f:d2:ed:7b:d7:c2:db:d2:2d:86:6c:9c: 5a:f3:a9:f6:07:d5:97:57:a0:b8:b8:be:1c:31:9f:f4:0f:9a: d7:e7:09:6a:8f:af:e8:c5:20:40:75:1b:69:68:37:92:db:61: 9c:48:d9:e2:e9:98:6c:b2:e7:bd:ad:87:11:b9:3a:44:8e:bc: 50:59:59:6d:df:3f:8c:a2:f1:93:15:2d:a1:ca:82:1a:63:b3: f4:84:6d:8a:11:73:c5:2e:b9:10:3f:bd:24:1b:ad:8f:1e:58: 96:be:c0:8c:88:eb:3c:f9:0a:89:6b:0c:ed:f8:4f:0c:a5:d1: 73:ab:2e:03:b4:c5:23:01:b1:d0:a0:d7:e8:eb:13:c0:f6:ec: b7:fa:1b:48:a2:0c:f9:7d:27:72:72:dd:9f:64:21:4e:d3:94: a5:37:47:69:fc:14:82:14:5f:3e:1c:59:10:73:b6:cf:2d:e7: 46:59:a3:a6:bc:c0:03:dd:7d:0c:75:52:ba:a3:f1:82:89:62: c5:f1:00:23:46:8c:07:8d:29:57:75:ae:72:b1:39:48:d9:a3: cc:ba:6e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWkVTLEoDjeUOLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZmQxNGYtYjVjMy00NDFmLWIwOWMtZGFhZTJlYzQy NDcyMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MWYxNjg4OGQtNjQ5Ni00YmUwLTk0ZTEtNGVkMTAzNWQ5MGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRsakY5S5ZSCoyOLjew0pnjBkF2HWSumDjQn rea0L1NkWdd1dfOTi3zFcG5uA/JMksAT5zUpxjg0V1qww0T7Sg/5bwyZfgFp9Rk/ lyCiWj7Uo3Pd8rD2IdmlG+51CfGBJlTaIZxDJfvKqqOCoxGOEJM6k4Ou4CX9yB4n P5pcg0fN3Oh15hgoGIttH+a23Mje1dXs7Qi9z7r6Dnh8Pj+FBMJEWBBd6wV4aGlh UKh+/IJV33T0CDmsyncjsv5kel2IEDjvliMsW9VP4B0fL31s40Njpr4xvz+BKKXT k72vTyZLSaiKuLQqdlev25vq+lPmzKmc/FC2U+9KiJwzOSpzOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJCoo3OvUpP8tXSOE8JjnQmCpUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFm ZDE0Zi1iNWMzLTQ0MWYtYjA5Yy1kYWFlMmVjNDI0NzIvMTc2YmE4MDMtYjRmMS0z YTU3LTgwNGQtZTczNGQwYzAyNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZmQxNGYtYjVjMy00NDFmLWIw OWMtZGFhZTJlYzQyNDcyLzhjMWZkMTRmLWI1YzMtNDQxZi1iMDljLWRhYWUyZWM0 MjQ3Mi5jcmwwHwYDVR0jBBgwFoAU0DKnv4ClaoU6OPWCa/ct2r1/fWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFmZDE0Zi1iNWMzLTQ0MWYtYjA5Yy1kYWFl MmVjNDI0NzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF/WLuD6SfBHOVgFtB7DoaJyeXPeRZ1KaMbfJHezxWM1xGm0LXpiIgz MD/S7XvXwtvSLYZsnFrzqfYH1ZdXoLi4vhwxn/QPmtfnCWqPr+jFIEB1G2loN5Lb YZxI2eLpmGyy572thxG5OkSOvFBZWW3fP4yi8ZMVLaHKghpjs/SEbYoRc8UuuRA/ vSQbrY8eWJa+wIyI6zz5ColrDO34Twyl0XOrLgO0xSMBsdCg1+jrE8D27Lf6G0ii DPl9J3Jy3Z9kIU7TlKU3R2n8FIIUXz4cWRBzts8t50ZZo6a8wAPdfQx1Urqj8YKJ YsXxACNGjAeNKVd1rnKxOUjZo8y6bq4= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:06 2025 by rpki-client