$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa File: 661d0e61-5138-389c-ac94-1b1c855e9970.roa (raw, json) Hash identifier: UU/JNPtG6LzxdI8mYBMu07rpihuNHimSqDuFdNM/O9o= Subject key identifier: 25:73:97:82:BD:0C:A6:78:8B:FF:E5:FE:F0:0D:44:60:7D:77:1C:04 Certificate issuer: /CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a Certificate serial: 010D0C9F43285848E9CBF3858B78DC3EC44BE600 Authority key identifier: 96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 14132 IP address blocks: 192.33.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f3:85:8b:78:dc:3e:c4:4b:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=f602bb53-83f0-477e-a770-0d02645e6214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:18:bc:35:ea:c4:04:bc:77:9f:dd:76:5f:0e: 76:96:95:70:12:df:f6:cb:48:e1:93:00:99:33:fd: 28:51:70:c3:0d:8b:22:cd:5e:7e:f4:22:e4:22:89: 91:0e:fa:1a:8e:58:4d:ae:54:c0:e2:2a:58:38:ad: af:9e:00:f4:4a:d2:56:79:a9:3e:6b:7d:3c:2c:aa: 5e:5e:42:1a:9e:6a:10:a8:f8:54:c8:d9:05:e1:fa: 31:ab:be:b0:1b:dc:f4:9a:65:2f:df:e7:03:ff:ec: ff:19:24:f8:6b:d5:9b:d6:21:26:3b:e8:32:0f:ce: 17:d9:cc:cd:c2:50:18:5c:c2:d4:c3:75:0c:b1:5e: 5e:7e:4a:b0:a7:85:a8:cb:aa:33:4e:5d:c7:57:5c: d4:ab:b7:af:a5:06:3e:2b:c0:ec:78:8f:7e:06:e7: be:e1:61:f9:a0:d0:56:3f:70:7a:22:e1:95:6a:93: 61:71:5d:1f:df:b5:28:a1:15:f0:76:e0:36:bc:a3: 5f:bd:e2:a7:12:f5:f5:65:4c:f6:4f:fd:a9:8a:9b: b3:2c:33:62:aa:29:aa:67:64:59:1f:8b:a2:f0:33: 06:3b:8a:25:20:cc:68:73:49:d7:98:b3:4d:c8:fc: d3:37:f6:eb:c0:33:bd:0b:2b:60:d0:0d:5c:89:33: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:73:97:82:BD:0C:A6:78:8B:FF:E5:FE:F0:0D:44:60:7D:77:1C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl X509v3 Authority Key Identifier: keyid:96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer sbgp-ipAddrBlock: critical IPv4: 192.33.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:71:c1:2a:8f:7c:0f:0f:fc:29:aa:c2:6c:46:65:2d:e8:29: 81:46:0e:2d:72:a1:25:77:d2:09:f3:7e:86:9d:89:9e:2d:1b: 4f:22:f6:ce:2f:6b:75:6d:24:70:47:69:57:af:51:69:16:6a: cb:c5:67:14:49:cc:c9:66:3f:b0:65:2d:02:18:6d:58:ce:67: 0c:67:66:9a:4c:e5:53:07:74:aa:05:1c:b2:2d:6f:d6:65:01: c0:38:ee:d1:47:53:ff:12:7e:df:6a:a2:ec:20:32:6b:b8:d7: 25:8f:01:ff:98:43:9a:83:e2:f7:c8:42:4e:5c:96:1d:8a:1f: b0:77:4d:25:b9:5d:4c:a7:36:3d:26:e1:41:41:c0:a5:c2:45: 81:81:bf:7f:1b:9b:fc:04:a5:40:10:b7:09:f9:d6:01:e2:48: c8:13:f5:2d:66:ab:3f:37:5f:93:c1:76:09:6b:fe:f2:9c:9b: be:94:05:77:f0:b7:7b:87:b0:cc:da:9f:b7:e7:7f:1e:0c:19: 0c:d1:6b:0d:c3:57:6c:ad:f7:4f:ce:5a:09:69:a3:32:b4:9b: 45:48:01:1b:94:59:1d:8b:1f:fb:b7:06:6b:45:68:15:5f:7b: 9d:b4:9e:12:f4:aa:a5:56:43:e1:b0:cb:69:c4:39:37:fb:8b: a7:e0:64:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/OFi3jcPsRL5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlMWVkOWQtODAxYy00MWI5LWFhNTYtMWRhOGZmNzlh NjVhMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ZjYwMmJiNTMtODNmMC00NzdlLWE3NzAtMGQwMjY0NWU2MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhi8NerEBLx3n912Xw52lpVwEt/2y0jhkwCZ M/0oUXDDDYsizV5+9CLkIomRDvoajlhNrlTA4ipYOK2vngD0StJWeak+a308LKpe XkIanmoQqPhUyNkF4foxq76wG9z0mmUv3+cD/+z/GST4a9Wb1iEmO+gyD84X2czN wlAYXMLUw3UMsV5efkqwp4Woy6ozTl3HV1zUq7evpQY+K8DseI9+Bue+4WH5oNBW P3B6IuGVapNhcV0f37UooRXwduA2vKNfveKnEvX1ZUz2T/2pipuzLDNiqimqZ2RZ H4ui8DMGO4olIMxoc0nXmLNNyPzTN/brwDO9Cytg0A1ciTOq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVzl4K9DKZ4i//l/vANRGB9dxwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNmUx ZWQ5ZC04MDFjLTQxYjktYWE1Ni0xZGE4ZmY3OWE2NWEvNjYxZDBlNjEtNTEzOC0z ODljLWFjOTQtMWIxYzg1NWU5OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzZlMWVkOWQtODAxYy00MWI5LWFh NTYtMWRhOGZmNzlhNjVhL2M2ZTFlZDlkLTgwMWMtNDFiOS1hYTU2LTFkYThmZjc5 YTY1YS5jcmwwHwYDVR0jBBgwFoAUlpXDwrtxryifvla2in8lxUfMrfkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNmUxZWQ5ZC04MDFjLTQxYjktYWE1Ni0xZGE4 ZmY3OWE2NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdxwSqPfA8P/CmqwmxGZS3oKYFGDi1yoSV30gnzfoadiZ4tG08i9s4v a3VtJHBHaVevUWkWasvFZxRJzMlmP7BlLQIYbVjOZwxnZppM5VMHdKoFHLItb9Zl AcA47tFHU/8Sft9qouwgMmu41yWPAf+YQ5qD4vfIQk5clh2KH7B3TSW5XUynNj0m 4UFBwKXCRYGBv38bm/wEpUAQtwn51gHiSMgT9S1mqz83X5PBdglr/vKcm76UBXfw t3uHsMzan7fnfx4MGQzRaw3DV2yt90/OWglpozK0m0VIARuUWR2LH/u3BmtFaBVf e520nhL0qqVWQ+Gwy2nEOTf7i6fgZJs= -----END CERTIFICATE-----Generated at Fri Mar 14 08:38:01 2025 by rpki-client