$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa File: c08b5e33-b653-3f50-b395-3e30e69a2601.roa (raw, json) Hash identifier: rn1WwemwcpRvcROsKIZsQOND8Cur6NLSbSwyJUVA+n0= Subject key identifier: BF:C1:8E:C3:04:B9:B4:71:6A:9A:05:B4:3B:1F:A7:47:92:F3:DC:6B Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F43285848D3765B3E89E0A792AE91BAC0 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 3300 IP address blocks: 192.157.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5b:3e:89:e0:a7:92:ae:91:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=481a4541-35d7-40fe-af13-83b629f0e857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:b2:28:16:ad:d4:a3:92:a1:ba:67:3a:05: 7f:46:68:52:ab:b3:d2:8d:ad:88:f7:5f:9d:59:e8: 0e:c0:e1:9e:b7:1b:7c:c1:f7:4d:d1:45:6e:0b:31: 6c:9e:97:13:c8:04:8d:5b:31:a6:a2:5c:1e:ea:e6: 90:1c:dc:64:61:4f:01:a8:c5:24:b0:66:30:2f:67: 73:11:b3:a1:f1:75:23:8a:47:b8:df:99:3f:26:d8: 65:cb:3c:21:e0:6d:1e:77:5c:eb:a3:dc:7d:86:91: 99:6c:00:c2:2b:ad:ac:5f:02:ef:19:2d:96:2e:83: 18:8c:21:de:a5:7d:cd:87:ab:37:13:59:99:71:7b: ce:aa:14:61:13:4d:9e:c5:af:6b:df:ab:af:d4:66: a9:f3:7b:3b:a3:a0:b8:f0:ca:cf:4c:c1:6b:f6:7e: b8:c6:c8:27:bc:70:d6:3c:ba:9b:72:1c:61:01:15: ce:54:d8:9f:58:1e:e5:60:e3:d9:c4:0a:06:3c:c4: 41:ca:52:20:08:62:52:90:ae:46:63:8d:0c:d0:2b: f9:47:58:26:f7:31:ae:75:63:68:f5:46:5a:b6:27: 62:ea:c4:82:24:72:9b:b1:28:41:03:c2:4d:70:24: 2f:05:f4:82:e4:ab:b5:af:3e:66:56:bb:9c:6a:40: 5a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C1:8E:C3:04:B9:B4:71:6A:9A:05:B4:3B:1F:A7:47:92:F3:DC:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:40:ad:97:81:50:78:62:8e:f4:11:c7:75:dd:a2:7d:c5:bf: 53:62:b5:ee:8f:d0:f6:d8:46:8d:a6:a4:57:57:ab:7f:bc:80: 90:7d:c0:a9:b5:59:b4:44:4f:19:52:13:8b:30:17:b0:2d:6e: 14:17:7f:87:90:43:d8:9d:3a:9c:e0:96:39:48:45:a9:85:5c: 7c:19:67:ae:f0:89:17:4b:b5:16:e9:6e:74:e7:c2:16:d4:2c: c2:f0:a8:9b:94:c4:f8:40:fe:58:7d:7c:0c:1b:5c:ca:dd:ab: a5:cc:a6:08:ce:3f:ae:9a:f4:48:0d:80:79:76:88:0d:21:34: 6b:f0:24:af:26:3f:28:b3:52:9d:04:bc:2e:63:ea:e7:c2:3a: 3e:e5:02:a8:97:b2:f7:19:07:26:c4:e8:ac:aa:77:55:b2:2f: 4b:1b:b0:13:f2:02:bf:19:f5:17:5e:4f:9e:06:15:b1:fe:9a: 27:21:8d:7e:86:9a:c6:d8:c9:25:93:dd:56:87:c1:df:b0:3d: bc:f7:fc:b6:22:62:86:be:bc:c5:9a:b5:cd:11:96:a8:08:79: bf:30:98:7d:f8:f7:51:f7:04:5c:d1:a5:d3:55:08:42:73:9e: d9:b4:7a:48:61:7e:da:85:e4:01:4c:f1:00:d6:7e:f6:fa:72: 17:65:3f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdls+ieCnkq6RusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk NDgxYTQ1NDEtMzVkNy00MGZlLWFmMTMtODNiNjI5ZjBlODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxmyKBat1KOSobpnOgV/RmhSq7PSja2I91+d WegOwOGetxt8wfdN0UVuCzFsnpcTyASNWzGmolwe6uaQHNxkYU8BqMUksGYwL2dz EbOh8XUjike435k/Jthlyzwh4G0ed1zro9x9hpGZbADCK62sXwLvGS2WLoMYjCHe pX3Nh6s3E1mZcXvOqhRhE02exa9r36uv1Gap83s7o6C48MrPTMFr9n64xsgnvHDW PLqbchxhARXOVNifWB7lYOPZxAoGPMRBylIgCGJSkK5GY40M0Cv5R1gm9zGudWNo 9UZatidi6sSCJHKbsShBA8JNcCQvBfSC5Ku1rz5mVrucakBa5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/BjsMEubRxapoFtDsfp0eS89xrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYzA4YjVlMzMtYjY1My0z ZjUwLWIzOTUtM2UzMGU2OWEyNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJ2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5ArZeBUHhijvQRx3Xdon3Fv1Nite6P0PbYRo2mpFdXq3+8gJB9wKm1 WbRETxlSE4swF7AtbhQXf4eQQ9idOpzgljlIRamFXHwZZ67wiRdLtRbpbnTnwhbU LMLwqJuUxPhA/lh9fAwbXMrdq6XMpgjOP66a9EgNgHl2iA0hNGvwJK8mPyizUp0E vC5j6ufCOj7lAqiXsvcZBybE6Kyqd1WyL0sbsBPyAr8Z9RdeT54GFbH+michjX6G msbYySWT3VaHwd+wPbz3/LYiYoa+vMWatc0RlqgIeb8wmH3491H3BFzRpdNVCEJz ntm0ekhhftqF5AFM8QDWfvb6chdlPxs= -----END CERTIFICATE-----Generated at Fri Mar 14 10:31:49 2025 by rpki-client