$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa File: 9ca3f638-13cd-3df2-9782-f3c67073a360.roa (raw, json) Hash identifier: xZRJSx7E20ciR3hzGm+DYvzrHOy22YHShHoT3WIto1o= Subject key identifier: 5F:D6:B1:98:A3:E4:09:36:AA:17:BF:9C:EC:D0:43:A1:57:EE:7A:AB Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Certificate serial: 010D0C9F4328584902EC24D66B5BA545CBF06340 Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 10929 IP address blocks: 192.154.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:24:d6:6b:5b:a5:45:cb:f0:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=5ccc8641-657a-4895-8756-009de2bb0759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:11:13:14:48:5d:9d:f6:e4:c1:9a:3c:c9: e3:7d:a3:8a:60:9e:f6:3e:cc:05:10:8c:90:cb:54: b5:7b:85:b4:c9:1c:5b:06:b6:22:23:c0:83:d9:7a: d3:45:2f:32:e2:2e:35:ce:2b:31:55:1a:73:44:9a: 90:3e:69:8e:e4:91:72:32:76:45:32:bf:e5:ce:3e: 56:15:6e:d9:2e:67:7d:4e:34:b5:39:07:f8:13:a0: c4:0d:1f:55:77:ac:c2:2a:e9:85:23:3f:0d:1d:b1: 87:ce:84:ef:05:7f:7e:c9:68:3c:b7:9e:3c:7d:7e: 47:f8:03:25:33:26:45:4a:dd:c5:29:ea:d7:53:ea: b1:76:bc:d5:b5:94:0a:55:a8:85:14:64:7c:3e:e5: e8:b7:d0:2b:68:d0:ed:70:b6:6d:f1:e5:d8:08:81: c8:54:b6:73:10:a2:a3:33:b5:39:54:6f:c9:31:e7: ad:a4:5e:35:39:84:21:39:cd:3d:6f:64:f3:2e:d2: a5:9b:6c:2c:6b:aa:aa:db:83:e5:f4:25:d0:51:6e: 0f:6c:16:d2:4a:b6:7b:31:c8:88:48:bd:d7:4e:92: 35:15:9a:dc:e5:f0:66:bc:8c:f9:b0:34:1e:c8:dd: 39:38:4a:4a:e6:7d:50:96:0d:54:5e:26:df:fc:a9: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D6:B1:98:A3:E4:09:36:AA:17:BF:9C:EC:D0:43:A1:57:EE:7A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl X509v3 Authority Key Identifier: keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer sbgp-ipAddrBlock: critical IPv4: 192.154.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a6:ee:1d:11:e2:d3:54:92:e1:ad:c0:1d:88:ef:de:ba:64: f6:9d:d8:98:a8:cc:2a:d9:a4:0f:20:94:d7:82:d3:f8:27:1c: a2:c9:f5:4c:6c:36:cc:41:c7:02:99:ef:05:9e:a6:4e:e6:b6: 60:b3:3b:c6:5f:d5:9f:c0:be:68:96:30:3b:f5:71:0c:fa:cb: a5:6d:7b:8a:fd:8a:cf:2d:af:3f:68:4f:5e:fd:aa:c3:8c:70: 89:13:53:2d:0d:27:dd:c9:41:75:07:ab:62:0b:54:eb:73:0c: 53:2f:40:15:40:c5:aa:52:e6:ea:0d:86:03:ce:a0:c7:7a:f1: a2:c4:32:23:c4:b4:bb:a6:19:56:30:97:e5:03:91:ec:59:c1: 4f:41:de:ec:84:2f:af:c1:fa:38:d6:5d:78:bf:07:2e:01:03: 43:5e:9b:35:b3:66:b8:11:b6:fe:4b:22:b6:e9:bb:2b:71:41: 19:dd:aa:e7:d5:37:be:9f:1a:10:0b:3b:d4:b2:e6:31:0f:df: 42:5f:95:d8:8b:3d:63:22:35:1f:4e:0d:72:1b:da:ca:c7:99: 30:d9:07:b8:31:92:20:e2:93:9c:cd:2d:fc:a8:d4:e3:70:ac: f7:68:1f:67:1c:0a:2c:77:c4:71:48:95:94:01:54:f2:56:33: 12:38:ad:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CTWa1ulRcvwY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz NWUwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NWNjYzg2NDEtNjU3YS00ODk1LTg3NTYtMDA5ZGUyYmIwNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGARExRIXZ325MGaPMnjfaOKYJ72PswFEIyQ y1S1e4W0yRxbBrYiI8CD2XrTRS8y4i41zisxVRpzRJqQPmmO5JFyMnZFMr/lzj5W FW7ZLmd9TjS1OQf4E6DEDR9Vd6zCKumFIz8NHbGHzoTvBX9+yWg8t548fX5H+AMl MyZFSt3FKerXU+qxdrzVtZQKVaiFFGR8PuXot9AraNDtcLZt8eXYCIHIVLZzEKKj M7U5VG/JMeetpF41OYQhOc09b2TzLtKlm2wsa6qq24Pl9CXQUW4PbBbSSrZ7MciI SL3XTpI1FZrc5fBmvIz5sDQeyN05OEpK5n1Qlg1UXibf/KngxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/WsZij5Ak2qhe/nOzQQ6FX7nqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3 ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvOWNhM2Y2MzgtMTNjZC0z ZGYyLTk3ODItZjNjNjcwNzNhMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1 Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2 NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqm7h0R4tNUkuGtwB2I7966ZPad2JiozCrZpA8glNeC0/gnHKLJ9Uxs NsxBxwKZ7wWepk7mtmCzO8Zf1Z/AvmiWMDv1cQz6y6Vte4r9is8trz9oT179qsOM cIkTUy0NJ93JQXUHq2ILVOtzDFMvQBVAxapS5uoNhgPOoMd68aLEMiPEtLumGVYw l+UDkexZwU9B3uyEL6/B+jjWXXi/By4BA0NemzWzZrgRtv5LIrbpuytxQRndqufV N76fGhALO9Sy5jEP30JfldiLPWMiNR9ODXIb2srHmTDZB7gxkiDik5zNLfyo1ONw rPdoH2ccCix3xHFIlZQBVPJWMxI4rV0= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:56 2025 by rpki-client