$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d9f60bd9-dd49-3ce3-b66c-e354766281e1.roa File: d9f60bd9-dd49-3ce3-b66c-e354766281e1.roa (raw, json) Hash identifier: uwN0G+4CPDQ3v7rbcKxWPV3onFOBKXQ477sVevTZGlU= Subject key identifier: A0:74:53:8C:DB:C9:75:57:F6:EE:60:84:90:F7:DB:EA:3C:23:E9:87 Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Certificate serial: 010D0C9F43285848ADC6162CB8209E010BCE3880 Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d9f60bd9-dd49-3ce3-b66c-e354766281e1.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 3280 IP address blocks: 174.136.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:16:2c:b8:20:9e:01:0b:ce:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=3424dd7c-5841-47ef-9b0a-d215c93d2714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:ef:04:2f:77:07:9b:43:d1:01:81:ef:bb: 48:cc:24:8c:94:00:46:1e:72:e2:a5:dc:38:40:c8: e2:42:4f:0d:9b:69:ab:79:b0:2b:69:5e:bb:df:8c: b0:55:de:cd:24:76:c1:4d:7c:c6:16:22:eb:cc:ac: 5b:9e:32:bb:ba:0b:c0:f7:79:62:de:2c:5d:f8:a2: 0c:20:56:03:f2:73:0e:17:62:0f:1b:3c:ab:66:56: be:84:be:a0:09:70:d8:50:e2:50:f2:8d:f2:0a:f7: 22:87:33:b6:58:89:bd:ff:0f:78:5d:f8:0f:25:df: 4c:00:3f:b6:35:21:f3:45:cf:f4:a5:ef:26:67:a0: e1:99:13:17:9a:29:64:65:bd:ab:c9:09:bc:40:4d: af:04:f4:68:2e:f6:ec:87:16:25:66:57:7b:47:ad: e4:2f:0a:eb:56:09:9d:24:41:37:92:1a:d6:1e:e3: 04:a9:5a:82:e2:b9:1a:bc:95:66:b2:6c:b5:f4:fb: 85:5c:20:62:88:c3:0e:fd:f1:6d:0a:fd:2e:8a:08: 5c:cd:f3:d7:b5:96:91:d9:fd:b1:b5:fb:c5:83:43: e6:a4:f1:53:a4:77:92:9a:8c:9f:c0:7d:11:1a:4f: 57:e6:a3:f4:e1:fa:32:df:57:65:01:89:75:f8:59: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:74:53:8C:DB:C9:75:57:F6:EE:60:84:90:F7:DB:EA:3C:23:E9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d9f60bd9-dd49-3ce3-b66c-e354766281e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl X509v3 Authority Key Identifier: keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer sbgp-ipAddrBlock: critical IPv4: 174.136.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:01:36:98:af:38:e3:94:e6:f8:e2:18:2d:96:bd:76:7c:cd: c1:4a:54:60:f3:3a:3b:3a:fd:76:8e:67:dc:2e:e7:d0:42:84: 06:a1:15:67:48:94:31:93:e8:9d:1d:bc:cb:89:8d:b0:38:72: 22:f1:b4:ac:5f:57:e4:8a:e5:f2:c8:ed:01:51:1c:30:6b:55: 1e:49:72:84:a2:0b:ef:ab:c4:c2:eb:d1:0c:82:f1:22:c3:3f: c0:44:d4:a8:e6:2e:19:e7:2a:0c:26:97:bf:02:de:82:22:6e: 41:33:b5:a3:66:4f:0f:d2:87:45:90:fc:91:54:c6:37:26:fd: 24:09:83:0e:15:f9:ac:97:fc:99:36:ee:53:15:de:a2:52:81: 59:08:8c:c7:be:0f:6d:b5:eb:f0:54:71:de:ab:5c:cb:0b:50: ca:92:f6:b6:15:56:17:9c:6c:5f:c4:7e:77:79:f5:73:df:24: 76:b6:bf:e4:3b:c3:20:53:56:40:03:cb:6f:7e:91:4e:df:f8: 97:1a:f9:f4:95:62:bb:8f:c7:91:18:9a:88:f0:26:4c:62:68: 21:4a:cf:f9:ea:5d:e3:46:e1:2f:6d:ae:13:62:e3:47:ae:d4: f6:f7:45:0c:77:8a:48:d2:07:5a:70:89:f6:e8:ea:86:22:dd: 9e:a9:ee:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhYsuCCeAQvOOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2 M2E0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MzQyNGRkN2MtNTg0MS00N2VmLTliMGEtZDIxNWM5M2QyNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcPvBC93B5tD0QGB77tIzCSMlABGHnLipdw4 QMjiQk8Nm2mrebAraV6734ywVd7NJHbBTXzGFiLrzKxbnjK7ugvA93li3ixd+KIM IFYD8nMOF2IPGzyrZla+hL6gCXDYUOJQ8o3yCvcihzO2WIm9/w94XfgPJd9MAD+2 NSHzRc/0pe8mZ6DhmRMXmilkZb2ryQm8QE2vBPRoLvbshxYlZld7R63kLwrrVgmd JEE3khrWHuMEqVqC4rkavJVmsmy19PuFXCBiiMMO/fFtCv0uighczfPXtZaR2f2x tfvFg0PmpPFTpHeSmoyfwH0RGk9X5qP04foy31dlAYl1+FlQkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB0U4zbyXVX9u5ghJD32+o8I+mHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4 NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvZDlmNjBiZDktZGQ0OS0z Y2UzLWI2NmMtZTM1NDc2NjI4MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0 NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0BNpivOOOU5vjiGC2WvXZ8zcFKVGDzOjs6/XaOZ9wu59BChAahFWdI lDGT6J0dvMuJjbA4ciLxtKxfV+SK5fLI7QFRHDBrVR5JcoSiC++rxMLr0QyC8SLD P8BE1KjmLhnnKgwml78C3oIibkEztaNmTw/Sh0WQ/JFUxjcm/SQJgw4V+ayX/Jk2 7lMV3qJSgVkIjMe+D2216/BUcd6rXMsLUMqS9rYVVhecbF/Efnd59XPfJHa2v+Q7 wyBTVkADy29+kU7f+Jca+fSVYruPx5EYmojwJkxiaCFKz/nqXeNG4S9trhNi40eu 1Pb3RQx3ikjSB1pwifbo6oYi3Z6p7uM= -----END CERTIFICATE-----Generated at Sun Apr 6 17:47:03 2025 by rpki-client