$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa File: aa9337db-fe12-3582-ada2-1a967639968e.roa (raw, json) Hash identifier: +bCSjyAnGAwYvurUb7HSjIzYABjeTWxZCcxOY3q8uX4= Subject key identifier: 60:9B:83:0B:16:67:87:D8:24:D6:2C:A2:16:3C:BB:87:14:E8:E5:4B Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699 Certificate serial: 010D0C9F43285848EF61636B7062E8C57E67FA40 Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 134.195.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:63:6b:70:62:e8:c5:7e:67:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c4cbedcb-7ff9-45ee-8e94-763dac405466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:42:c9:54:1a:d6:81:a7:4b:fb:57:3c:e2: 34:7d:71:08:ad:86:f1:ee:65:2a:85:f5:5b:10:5d: 9f:c7:50:48:04:6f:17:2f:44:38:72:4f:d4:6d:f1: 14:c9:84:69:46:b8:b8:16:dd:07:85:dd:b0:13:f2: 2c:cd:27:2c:ca:da:48:d9:7c:03:05:39:7e:51:e7: 2f:8c:c2:ec:56:4c:d9:36:d3:c8:a0:7b:e4:78:1b: d9:a4:60:2a:c5:ba:bb:d5:f5:75:4d:4c:2d:4f:5a: 0a:76:9a:6e:75:fd:90:ff:3d:d1:bc:f2:71:6e:73: 55:42:58:20:2a:d4:bf:61:46:06:e7:61:3e:97:d1: c6:f6:20:58:8c:43:2e:1f:5f:6a:e3:10:8a:f4:f9: 1b:ea:8b:aa:3f:cb:74:dc:c5:88:5a:bc:e1:ce:cd: 00:43:02:95:e2:c4:b7:36:3b:3f:cd:88:c6:0d:cd: 5c:c4:9c:b0:15:7a:32:14:85:67:4a:ff:e8:27:25: 59:81:81:8a:cb:e1:09:60:56:4b:ca:7a:63:2e:a8: eb:69:88:be:7a:09:ef:b1:f4:ba:c6:89:3c:bf:77: 8a:1f:ee:52:c2:09:3d:76:20:9c:fd:3d:bb:9f:64: ae:f6:c7:ac:93:70:b3:59:1a:5f:1c:4b:0b:3e:5a: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9B:83:0B:16:67:87:D8:24:D6:2C:A2:16:3C:BB:87:14:E8:E5:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl X509v3 Authority Key Identifier: keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer sbgp-ipAddrBlock: critical IPv4: 134.195.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1a:87:d5:ee:63:3c:b9:12:5b:80:72:cc:d2:fe:a0:87:dd: c6:1d:a7:63:5f:cc:41:49:40:c2:17:bb:a3:ba:22:fb:2e:11: 17:fc:dd:94:85:6f:e9:44:1d:97:2f:b8:29:0e:c3:85:27:dd: 8f:a6:0a:05:87:ff:82:14:66:81:14:7e:d6:81:43:f3:ca:2d: c9:8a:0c:47:2a:ec:f5:e6:03:75:86:6e:f8:c2:99:75:28:35: c8:29:65:18:69:7e:39:58:5a:14:47:d7:a5:70:f4:b7:d7:5d: 6e:f8:ae:7d:6f:09:c6:27:ae:cd:c8:e2:0d:4f:95:80:15:b6: f1:42:ed:47:ad:2a:b4:86:b0:a6:6c:f5:ff:a2:41:9d:ac:d0: 99:f2:19:9e:49:84:4d:5a:2d:29:5c:ed:dc:ed:6d:63:12:51: ea:fe:73:95:e3:25:26:c2:ee:fd:7b:9a:ed:20:07:9e:c7:d5: dd:52:41:df:56:f6:de:c8:4e:9a:23:34:a0:1c:4d:ba:c7:4d: e6:49:f7:77:d3:c7:07:f6:5e:37:99:b8:d1:43:a7:87:52:d6: 16:30:01:f8:a1:b9:e7:c7:9f:aa:97:18:e0:8c:48:7b:db:ef: ec:5b:b2:4a:69:28:4d:c3:b0:95:a2:0f:43:b8:18:9e:98:9d: 84:ed:1a:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWNrcGLoxX5n+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJmYTI4NzgtNzE1ZS00NzkzLWFmMmEtNDMyNTgzZWEw Njk5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzRjYmVkY2ItN2ZmOS00NWVlLThlOTQtNzYzZGFjNDA1NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR1CyVQa1oGnS/tXPOI0fXEIrYbx7mUqhfVb EF2fx1BIBG8XL0Q4ck/UbfEUyYRpRri4Ft0Hhd2wE/IszScsytpI2XwDBTl+Uecv jMLsVkzZNtPIoHvkeBvZpGAqxbq71fV1TUwtT1oKdppudf2Q/z3RvPJxbnNVQlgg KtS/YUYG52E+l9HG9iBYjEMuH19q4xCK9Pkb6ouqP8t03MWIWrzhzs0AQwKV4sS3 Njs/zYjGDc1cxJywFXoyFIVnSv/oJyVZgYGKy+EJYFZLynpjLqjraYi+egnvsfS6 xok8v3eKH+5Swgk9diCc/T27n2Su9sesk3CzWRpfHEsLPlqmSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCbgwsWZ4fYJNYsohY8u4cU6OVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZh Mjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1ODNlYTA2OTkvYWE5MzM3ZGItZmUxMi0z NTgyLWFkYTItMWE5Njc2Mzk5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmYTI4NzgtNzE1ZS00NzkzLWFm MmEtNDMyNTgzZWEwNjk5L2EyZmEyODc4LTcxNWUtNDc5My1hZjJhLTQzMjU4M2Vh MDY5OS5jcmwwHwYDVR0jBBgwFoAU6BplsqVg16P5Ea0VVOp5ypXtsF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZhMjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1 ODNlYTA2OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4ah9XuYzy5EluAcszS/qCH3cYdp2NfzEFJQMIXu6O6IvsuERf83ZSF b+lEHZcvuCkOw4Un3Y+mCgWH/4IUZoEUftaBQ/PKLcmKDEcq7PXmA3WGbvjCmXUo NcgpZRhpfjlYWhRH16Vw9LfXXW74rn1vCcYnrs3I4g1PlYAVtvFC7UetKrSGsKZs 9f+iQZ2s0JnyGZ5JhE1aLSlc7dztbWMSUer+c5XjJSbC7v17mu0gB57H1d1SQd9W 9t7ITpojNKAcTbrHTeZJ93fTxwf2XjeZuNFDp4dS1hYwAfihuefHn6qXGOCMSHvb 7+xbskppKE3DsJWiD0O4GJ6YnYTtGm0= -----END CERTIFICATE-----Generated at Fri Apr 4 23:29:16 2025 by rpki-client