$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa File: c3caef46-c1ac-38a7-aaec-de2a302e391c.roa (raw, json) Hash identifier: mvTMVNRqDCWoN3evEc4NsOdusRpSLIQQu5p8jXmTKt8= Subject key identifier: 33:1E:4A:BF:ED:0E:41:37:40:90:1D:BE:B2:CE:F6:16:94:3A:6E:17 Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F43285848B4C0D6464640D2B3A0E1A380 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 192.131.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d6:46:46:40:d2:b3:a0:e1:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=3cea3fb7-106a-4d0f-9fb0-b6a327986a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:e3:11:61:8c:df:b9:95:b6:f2:89:d8:c7: d5:ba:cf:74:fa:6a:9b:6d:9d:57:16:1b:40:6e:8f: ae:cd:27:b8:c1:03:e1:5b:a0:89:6a:f8:34:a3:3c: b1:a0:58:b2:ed:33:48:43:77:b6:c1:2f:62:6c:10: 6b:97:81:a9:cf:0d:95:6d:4d:c0:f8:05:16:41:b1: fb:3d:d2:a3:a3:d0:f1:7f:07:ac:b7:15:0f:b9:1d: d6:cf:c6:56:85:63:e1:65:4c:29:ac:7b:f5:58:e5: fe:6a:2f:f3:70:25:29:81:c2:e6:4d:76:5c:87:95: c5:6e:17:f3:a0:0e:cc:16:fb:1e:91:94:08:fb:d4: 37:a2:55:c6:77:d1:c0:3a:b2:8c:25:7b:6e:8f:98: 2a:eb:eb:1c:f4:1d:03:16:db:47:84:00:97:1d:b9: 98:a5:ce:d1:4a:3e:ea:bd:19:ff:df:16:ee:e4:33: 34:a7:6e:cb:38:6a:32:59:65:9f:ea:53:03:82:63: c5:b8:93:ea:ca:7f:55:4f:d6:f9:2e:99:a1:e3:b5: 9e:69:d2:1f:2a:93:79:af:dc:e9:79:9d:d6:16:e4: 6d:86:c2:e8:64:32:15:cf:10:98:84:f6:3e:cc:b8: 92:f4:a5:a7:99:e1:bb:53:e9:dd:0c:8e:27:63:b1: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:4A:BF:ED:0E:41:37:40:90:1D:BE:B2:CE:F6:16:94:3A:6E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 192.131.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:31:af:8f:28:f1:b9:46:ee:51:69:08:26:55:c8:02:7e:05: a0:bd:5b:f2:4e:a6:d3:b4:ec:26:42:e2:3d:83:1c:c0:e3:6e: ab:b9:8d:d4:8f:ad:36:c1:fe:51:b8:b7:d2:d7:89:90:31:f2: d8:a7:56:8d:32:db:16:c2:96:9d:bc:ae:82:28:a5:32:ba:d3: d1:97:d8:d9:e7:84:ce:75:48:8c:92:25:6f:6e:75:8d:47:08: 6b:af:da:e5:39:b8:35:c6:83:82:85:3e:10:de:27:47:61:0e: 13:53:66:63:cf:68:84:4a:33:d7:f9:01:85:44:4c:38:8e:ae: 20:6a:46:53:7f:18:ab:8e:d2:fa:df:be:9a:26:52:48:a5:7f: 93:1f:ec:4d:14:2e:11:7a:0c:bb:a6:b8:fb:de:10:ad:d7:89: 31:ae:f9:e6:b0:55:75:35:3d:57:9d:c9:8a:88:e0:11:be:d8: e8:38:e6:23:83:0e:50:76:03:2c:d2:52:bb:fc:80:72:ed:22: 24:a4:50:fb:3c:7d:e3:02:22:ef:37:35:73:16:79:3b:22:af: 8f:df:a6:52:79:85:bc:2b:70:fd:9c:d7:65:70:ab:2b:bb:d5: f3:6e:eb:e9:49:c4:68:9e:2f:a4:8a:e9:2a:8e:18:aa:a8:55: 3c:f5:d6:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNZGRkDSs6Dho4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk M2NlYTNmYjctMTA2YS00ZDBmLTlmYjAtYjZhMzI3OTg2YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQfjEWGM37mVtvKJ2MfVus90+mqbbZ1XFhtA bo+uzSe4wQPhW6CJavg0ozyxoFiy7TNIQ3e2wS9ibBBrl4Gpzw2VbU3A+AUWQbH7 PdKjo9DxfwestxUPuR3Wz8ZWhWPhZUwprHv1WOX+ai/zcCUpgcLmTXZch5XFbhfz oA7MFvsekZQI+9Q3olXGd9HAOrKMJXtuj5gq6+sc9B0DFttHhACXHbmYpc7RSj7q vRn/3xbu5DM0p27LOGoyWWWf6lMDgmPFuJPqyn9VT9b5Lpmh47WeadIfKpN5r9zp eZ3WFuRthsLoZDIVzxCYhPY+zLiS9KWnmeG7U+ndDI4nY7FbbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMeSr/tDkE3QJAdvrLO9haUOm4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvYzNjYWVmNDYtYzFhYy0z OGE3LWFhZWMtZGUyYTMwMmUzOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4xr48o8blG7lFpCCZVyAJ+BaC9W/JOptO07CZC4j2DHMDjbqu5jdSP rTbB/lG4t9LXiZAx8tinVo0y2xbClp28roIopTK609GX2NnnhM51SIySJW9udY1H CGuv2uU5uDXGg4KFPhDeJ0dhDhNTZmPPaIRKM9f5AYVETDiOriBqRlN/GKuO0vrf vpomUkilf5Mf7E0ULhF6DLumuPveEK3XiTGu+eawVXU1PVedyYqI4BG+2Og45iOD DlB2AyzSUrv8gHLtIiSkUPs8feMCIu83NXMWeTsir4/fplJ5hbwrcP2c12Vwqyu7 1fNu6+lJxGieL6SK6SqOGKqoVTz11t8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:30 2025 by rpki-client