$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa File: bb2c05d6-4109-3127-b081-aba78a6a6412.roa (raw, json) Hash identifier: eek4kXhJLeWFXyjfWbvc9/9lzqR3JOgVC8LBLQEXoUs= Subject key identifier: 11:E7:EB:F3:21:30:A8:73:4B:7D:5B:21:1C:82:C2:0D:80:AA:FA:43 Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F43285848530AE4226F68C68CDF880D40 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 398395 IP address blocks: 134.195.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e4:22:6f:68:c6:8c:df:88:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=393d07db-728a-4c6f-8a69-ee38e4d77e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f5:bd:3b:74:1c:09:d0:63:2c:c0:2f:92:ef: 8e:4e:2a:58:3b:de:6e:e7:e8:6a:75:63:04:66:86: ea:03:df:9f:df:24:51:d5:aa:f6:b1:69:18:12:b2: 95:30:54:45:71:4f:2a:69:d3:ec:8c:b9:09:34:3c: 48:68:0d:38:42:48:65:38:a9:66:15:3c:7b:8e:98: 98:c0:f0:de:fb:ae:24:4a:27:9a:f3:12:f9:6e:4e: 20:01:bc:0f:81:7f:12:21:5e:0d:c0:13:37:77:a7: e6:92:1b:de:03:8c:d7:e0:f1:90:0a:32:3f:5e:c8: d1:27:16:8b:ae:c4:3b:40:00:c7:d2:73:55:ec:34: e8:1d:77:45:64:91:57:7c:b0:c0:ef:b8:17:06:f2: 85:e0:7f:ae:b8:e9:bf:1d:6f:2c:78:0e:23:b4:bb: 25:89:07:ce:57:fa:6f:3c:e5:89:ec:f3:da:e6:e0: 51:15:19:42:23:4f:33:46:86:0b:cf:cb:03:bb:be: 2a:08:5d:bf:54:e3:99:67:64:ca:86:30:f1:69:62: de:b3:a8:aa:5e:e5:05:32:b7:16:31:c6:5d:8c:2a: 12:06:8e:dd:1f:0e:64:18:c3:67:60:e2:f9:5d:09: 5a:75:22:6d:3f:cc:20:7f:68:6f:f7:17:c1:49:b9: 46:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E7:EB:F3:21:30:A8:73:4B:7D:5B:21:1C:82:C2:0D:80:AA:FA:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 134.195.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:86:09:83:07:14:e8:b1:66:c7:6b:f1:0b:d1:c3:87:53:6b: 27:6b:97:63:80:52:02:dc:fa:b9:3a:63:02:4f:dd:8a:d1:83: 19:27:61:9f:9b:84:cf:6e:2a:c8:b6:31:8f:75:9d:52:05:3a: a4:c2:61:da:b5:17:62:8e:55:f3:53:df:ce:1a:72:11:d1:f2: af:1b:4f:e6:15:88:96:b6:23:b6:fd:3b:ab:bd:c2:f6:b8:8d: ca:94:10:49:f4:eb:61:d4:24:a6:b1:69:89:ef:76:5b:b7:44: c2:13:74:c9:f5:3a:63:71:2f:f1:6f:5f:ab:90:e8:3f:e1:cc: a5:27:5e:17:e6:e2:56:8f:a0:59:9b:08:54:ea:04:c5:92:7e: 80:49:67:03:a9:a0:0e:de:6d:dc:a2:3d:5b:78:28:9f:61:56: 44:6d:62:70:c1:4f:94:3e:40:ee:80:99:65:db:47:20:f3:40: 93:47:52:97:97:10:ac:70:67:dc:a3:f5:3a:9a:55:4f:08:83: b9:cc:34:fe:8c:8c:99:27:c5:93:da:c6:56:46:d3:5e:fa:b6: 40:37:0a:44:0f:04:13:3c:27:3d:05:7e:99:fc:48:5b:97:1d: 23:7c:6e:af:ad:d9:b5:39:c2:2b:bd:b5:19:4b:42:29:f2:6a: 9a:fa:7e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuQib2jGjN+IDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzkzZDA3ZGItNzI4YS00YzZmLThhNjktZWUzOGU0ZDc3ZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfW9O3QcCdBjLMAvku+OTipYO95u5+hqdWME ZobqA9+f3yRR1ar2sWkYErKVMFRFcU8qadPsjLkJNDxIaA04QkhlOKlmFTx7jpiY wPDe+64kSiea8xL5bk4gAbwPgX8SIV4NwBM3d6fmkhveA4zX4PGQCjI/XsjRJxaL rsQ7QADH0nNV7DToHXdFZJFXfLDA77gXBvKF4H+uuOm/HW8seA4jtLsliQfOV/pv POWJ7PPa5uBRFRlCI08zRoYLz8sDu74qCF2/VOOZZ2TKhjDxaWLes6iqXuUFMrcW McZdjCoSBo7dHw5kGMNnYOL5XQladSJtP8wgf2hv9xfBSblG5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHn6/MhMKhzS31bIRyCwg2AqvpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvYmIyYzA1ZDYtNDEwOS0z MTI3LWIwODEtYWJhNzhhNmE2NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyGCYMHFOixZsdr8QvRw4dTaydrl2OAUgLc+rk6YwJP3YrRgxknYZ+b hM9uKsi2MY91nVIFOqTCYdq1F2KOVfNT384achHR8q8bT+YViJa2I7b9O6u9wva4 jcqUEEn062HUJKaxaYnvdlu3RMITdMn1OmNxL/FvX6uQ6D/hzKUnXhfm4laPoFmb CFTqBMWSfoBJZwOpoA7ebdyiPVt4KJ9hVkRtYnDBT5Q+QO6AmWXbRyDzQJNHUpeX EKxwZ9yj9TqaVU8Ig7nMNP6MjJknxZPaxlZG0176tkA3CkQPBBM8Jz0Ffpn8SFuX HSN8bq+t2bU5wiu9tRlLQinyapr6fgE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:15 2025 by rpki-client