$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json) Hash identifier: hAeouUl/mEl+bu70NC2hlacIkeADbo+NkFkbu0/vHC8= Subject key identifier: 84:4A:8C:58:8B:E1:99:17:CE:4B:3B:8D:59:44:B6:19:38:CD:BC:7F Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F43285848C6E63781D10222B1206D4540 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 21976 IP address blocks: 192.135.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:37:81:d1:02:22:b1:20:6d:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=7f0248ba-6634-40d4-a8f4-b47369dc15a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e2:f3:e8:b8:7e:0c:ad:57:31:bb:1e:22:f6: 2c:a4:48:e8:44:e7:95:e1:03:93:f1:fa:95:ce:e3: e3:8d:c2:99:b8:ee:0e:95:db:e6:74:71:3e:fe:f2: 11:4e:3d:a5:11:d8:69:5a:46:24:d6:49:6f:05:1a: 00:69:be:19:f7:91:f2:53:1b:ce:c1:c0:af:a0:82: 63:15:e0:bf:aa:d1:9f:e8:7e:d5:23:90:9a:cd:90: 29:88:d8:e5:30:92:5f:4a:4b:6c:4d:64:0b:24:1a: c8:98:d4:06:b2:f4:fe:01:76:b9:99:6b:27:7a:33: 0a:11:81:46:35:02:7a:9a:1f:6b:8f:30:66:b2:eb: a5:bf:65:1b:30:08:30:1f:4b:93:b2:b8:5f:2d:e5: 66:f9:db:f6:8a:33:9a:1f:65:ee:6b:4b:3f:4e:0f: a3:08:c1:ff:59:15:79:8a:c8:66:7c:c4:1b:0b:e7: 1e:30:31:20:d0:e4:f2:31:86:89:71:9e:48:63:16: 97:75:48:c4:a3:a0:65:39:05:93:dd:09:0f:bc:fd: 18:8c:d8:e9:36:89:1a:da:d9:6f:50:68:cd:6b:c3: c1:59:12:d7:6e:53:f0:5f:fb:bf:7f:3c:4d:03:a6: ab:bf:aa:b4:d7:8a:76:bd:62:17:2b:e6:73:3c:6c: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:8C:58:8B:E1:99:17:CE:4B:3B:8D:59:44:B6:19:38:CD:BC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a1:af:27:cc:a8:ad:92:a3:4a:cd:ee:bb:dc:28:06:c6:67: 3e:0d:ce:ec:ac:32:4c:e8:b5:23:85:8d:19:fa:5f:b0:9d:31: 10:96:29:10:7e:05:e0:9d:8c:50:61:08:a1:e3:5c:94:17:7d: 3b:a1:ec:3c:87:ba:14:ca:71:90:f5:e4:07:8a:ab:aa:ad:a0: 47:84:36:13:95:f4:87:cf:bb:41:02:71:fa:5a:56:0b:df:ad: bb:9f:47:90:47:42:e8:11:8f:90:63:8d:9a:91:15:a3:10:e8: fe:91:8d:83:61:a1:db:41:40:74:4c:4c:82:1c:4a:56:20:a6: e2:0f:dd:e0:91:cd:56:06:bf:c3:6c:5b:ce:b4:13:b6:69:aa: 3e:b5:12:a3:34:9f:f2:3b:69:ab:60:31:cd:9a:61:d0:8b:d0: a2:02:c5:48:0e:6d:22:3d:4d:7f:f3:9b:80:2b:2a:a1:fa:98: cf:19:8b:fa:96:f7:32:61:ff:ee:97:64:51:e8:ca:69:a6:0d: bc:39:5b:bc:30:d8:36:59:de:24:83:37:ae:8e:f5:6c:60:09: 10:1f:2a:76:4c:df:ec:ad:2a:d5:03:d1:a8:9f:98:91:82:ff: 14:8a:67:35:ea:67:9a:d0:ed:c9:3f:2a:6e:a5:86:6f:14:01: d6:2d:f1:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jeB0QIisSBtRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk N2YwMjQ4YmEtNjYzNC00MGQ0LWE4ZjQtYjQ3MzY5ZGMxNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uLz6Lh+DK1XMbseIvYspEjoROeV4QOT8fqV zuPjjcKZuO4OldvmdHE+/vIRTj2lEdhpWkYk1klvBRoAab4Z95HyUxvOwcCvoIJj FeC/qtGf6H7VI5CazZApiNjlMJJfSktsTWQLJBrImNQGsvT+AXa5mWsnejMKEYFG NQJ6mh9rjzBmsuulv2UbMAgwH0uTsrhfLeVm+dv2ijOaH2Xua0s/Tg+jCMH/WRV5 ishmfMQbC+ceMDEg0OTyMYaJcZ5IYxaXdUjEo6BlOQWT3QkPvP0YjNjpNoka2tlv UGjNa8PBWRLXblPwX/u/fzxNA6arv6q014p2vWIXK+ZzPGxpEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRKjFiL4ZkXzks7jVlEthk4zbx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMmRkYmJmMzItZGU4Yy0z YWViLTkzZDgtODBlYmZkMTU2MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGhryfMqK2So0rN7rvcKAbGZz4NzuysMkzotSOFjRn6X7CdMRCWKRB+ BeCdjFBhCKHjXJQXfTuh7DyHuhTKcZD15AeKq6qtoEeENhOV9IfPu0ECcfpaVgvf rbufR5BHQugRj5BjjZqRFaMQ6P6RjYNhodtBQHRMTIIcSlYgpuIP3eCRzVYGv8Ns W860E7Zpqj61EqM0n/I7aatgMc2aYdCL0KICxUgObSI9TX/zm4ArKqH6mM8Zi/qW 9zJh/+6XZFHoymmmDbw5W7ww2DZZ3iSDN66O9WxgCRAfKnZM3+ytKtUD0aifmJGC /xSKZzXqZ5rQ7ck/Km6lhm8UAdYt8cs= -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:55 2025 by rpki-client