$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa File: 59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa (raw, json) Hash identifier: 767dnxTE2Xybgv/rrIykFzpBnimeKyiu0CvBFluKsok= Subject key identifier: B0:56:43:FA:BB:01:9B:9C:53:01:54:23:CD:BB:D7:36:47:A5:FC:A7 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F43285848C6E6376EDFD57AF144607F80 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 21976 IP address blocks: 192.150.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:37:6e:df:d5:7a:f1:44:60:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=9639d783-77dc-4acc-8fd6-655465c8388b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:67:58:40:80:01:a9:bc:d4:d5:75:82:65: 54:58:c9:cb:c1:76:bd:a2:2a:81:db:12:e5:ec:f7: 5e:b2:4a:4c:c4:c6:a8:35:7a:2f:28:89:aa:af:55: 5d:5b:00:cd:2c:2b:fb:44:70:55:71:a7:28:2e:28: fe:2e:55:dc:80:ef:81:19:cc:27:fa:01:4b:93:e2: 54:cd:63:7a:f1:f6:22:d2:31:a1:80:12:7b:67:dc: 3b:f5:6b:1c:e9:2f:a9:ec:bd:6d:bd:e3:87:7b:97: 78:5d:66:97:cf:f1:e8:9b:8a:00:3e:c0:47:40:72: 0e:32:a5:78:66:ad:e6:89:42:f6:1d:29:ab:c1:3e: 34:34:e6:f3:a9:f5:25:ac:57:88:f8:4a:dc:82:8e: c2:91:b2:1e:c0:8c:c9:86:e8:36:b6:48:83:1d:f4: bd:7d:56:f3:70:e2:7e:9f:68:4b:d7:07:ac:a8:01: d5:52:f0:ef:28:88:75:38:83:71:b8:1b:d0:78:7e: 06:f0:90:58:7a:66:fc:7d:5a:f3:8a:83:e2:8a:dc: fc:7f:79:7a:6d:ce:b6:6f:ee:07:e9:2e:12:e9:b3: 17:ba:bd:6e:f6:19:30:6f:47:55:6b:42:7e:ee:18: 76:2d:b2:6d:a9:a2:f2:f6:d8:aa:60:eb:c0:c9:e7: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:56:43:FA:BB:01:9B:9C:53:01:54:23:CD:BB:D7:36:47:A5:FC:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e7:70:59:82:88:c6:a2:5c:f0:aa:ea:21:1f:02:3c:44:0c: 6c:c4:31:a5:fc:84:47:4c:dd:8d:aa:6c:6e:8d:25:8c:e3:2d: 71:c7:d0:4d:4c:d6:bc:eb:a1:5f:65:27:0c:9b:7a:2b:a9:30: a5:4d:af:dc:b0:69:02:d3:be:fc:0a:19:05:0d:57:83:83:4e: e5:51:76:c1:1a:ba:f2:99:87:20:e0:39:2a:ec:41:3b:6f:88: 52:61:89:da:12:14:0c:bd:db:f3:88:66:36:bd:5f:e1:bf:15: 44:e1:c4:99:bc:28:45:f9:3a:bf:42:39:dc:ec:c8:d9:28:99: df:e5:c3:17:64:6b:53:bb:df:36:83:4c:16:c7:6a:4b:ae:4c: af:17:76:99:36:1e:10:82:bb:2f:9a:be:c8:da:13:15:5b:86: a4:f9:86:a5:b0:d4:9c:62:08:81:b9:b0:62:5c:6a:5c:a6:b6: f7:b8:bf:d9:d2:c9:b7:1e:bd:7b:12:da:2f:fa:88:4d:16:45: 0f:a2:fa:5b:d9:b7:f6:85:b4:55:bc:c8:c0:62:a4:ae:a0:d4: 13:41:6f:9d:6d:eb:56:7e:09:be:7b:30:31:54:0a:c2:f9:2d: 0a:d9:91:8d:17:80:52:3d:00:e6:aa:96:01:d9:57:5f:e8:ed: 9b:b0:24:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jdu39V68URgf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk OTYzOWQ3ODMtNzdkYy00YWNjLThmZDYtNjU1NDY1YzgzODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLlnWECAAam81NV1gmVUWMnLwXa9oiqB2xLl 7PdeskpMxMaoNXovKImqr1VdWwDNLCv7RHBVcacoLij+LlXcgO+BGcwn+gFLk+JU zWN68fYi0jGhgBJ7Z9w79Wsc6S+p7L1tveOHe5d4XWaXz/Hom4oAPsBHQHIOMqV4 Zq3miUL2HSmrwT40NObzqfUlrFeI+Ercgo7CkbIewIzJhug2tkiDHfS9fVbzcOJ+ n2hL1wesqAHVUvDvKIh1OINxuBvQeH4G8JBYemb8fVrzioPiitz8f3l6bc62b+4H 6S4S6bMXur1u9hkwb0dVa0J+7hh2LbJtqaLy9tiqYOvAyec8owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBWQ/q7AZucUwFUI8271zZHpfynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvNTlkZWIzYmUtNGNjOC0z ZmNkLTkxZWQtZTg1MDNjOGIzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHncFmCiMaiXPCq6iEfAjxEDGzEMaX8hEdM3Y2qbG6NJYzjLXHH0E1M 1rzroV9lJwybeiupMKVNr9ywaQLTvvwKGQUNV4ODTuVRdsEauvKZhyDgOSrsQTtv iFJhidoSFAy92/OIZja9X+G/FUThxJm8KEX5Or9COdzsyNkomd/lwxdka1O73zaD TBbHakuuTK8Xdpk2HhCCuy+avsjaExVbhqT5hqWw1JxiCIG5sGJcalymtve4v9nS ybcevXsS2i/6iE0WRQ+i+lvZt/aFtFW8yMBipK6g1BNBb51t61Z+Cb57MDFUCsL5 LQrZkY0XgFI9AOaqlgHZV1/o7ZuwJG8= -----END CERTIFICATE-----Generated at Sun Apr 6 09:51:01 2025 by rpki-client