$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa File: 2511b1ae-2332-3985-bdcc-82984672479d.roa (raw, json) Hash identifier: aD81b+6qKcxCLTlWrnXkjvh2aDllAuD89FAKsjKiQj4= Subject key identifier: 8D:D9:F9:4E:1A:16:6C:F1:E8:9A:42:CE:45:F1:A7:3A:87:8D:E3:12 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F43285848EC9686EF13A651F132B82A00 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.152.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:86:ef:13:a6:51:f1:32:b8:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=9824aca2-9e01-4ede-a7f9-7d2172835f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:41:1b:37:cf:7f:68:b2:18:4a:0d:61:bf: 42:b7:0c:d3:f8:41:1c:3f:ed:7c:c4:ad:60:ac:0c: 27:b1:bc:8c:d8:3f:ea:df:81:3f:ed:5c:93:7b:e3: 6a:b6:2c:7d:f4:10:69:c2:eb:6f:ed:44:fd:e1:d6: b1:8e:c7:43:f9:59:69:ff:78:bb:af:ec:c7:46:4a: 82:9a:8b:d1:e1:f8:54:c9:ef:fa:44:59:13:3c:e2: 98:28:ce:0f:17:ab:2c:c7:76:d3:84:1a:98:70:70: 81:7a:72:6c:59:96:50:f6:3b:52:b4:07:5c:a2:a7: 86:8e:31:ff:dd:fa:b3:f3:93:14:d1:be:82:12:11: 47:4b:a5:c7:a2:6d:fd:6d:b5:28:4a:a9:cc:cd:d2: b2:d2:ed:84:bd:21:54:1d:46:1b:41:94:f1:d8:fc: 38:0f:7e:94:df:24:3b:b4:8a:e3:a4:ae:5c:62:5f: 51:5f:60:55:0a:dc:a4:e7:68:93:fb:d7:84:a0:b9: cb:e9:78:13:bc:e9:f3:98:f8:1c:64:32:fc:b6:e4: ee:78:5a:d7:e3:2d:a7:46:f0:3e:c9:95:a2:21:92: 80:ec:13:0e:43:c2:30:78:7c:26:d7:74:9a:75:ff: 22:bb:93:70:1e:47:4a:bf:7a:be:b3:ad:06:a1:51: fd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D9:F9:4E:1A:16:6C:F1:E8:9A:42:CE:45:F1:A7:3A:87:8D:E3:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:72:1c:94:5b:eb:10:40:4d:79:59:e8:e7:8f:2a:2a:52:53: b4:a1:dc:ba:1b:cf:f7:38:39:23:25:cc:c9:80:56:31:43:6d: 0f:0c:04:d5:ab:e2:bb:1c:c2:17:04:01:34:ca:ed:8f:4f:38: 8a:a4:88:38:66:c3:29:07:ba:ca:03:fd:2f:9d:ff:f5:27:39: a1:42:b0:f1:1d:82:02:4a:27:da:4d:1f:c0:bb:bf:76:6d:3a: 6e:ac:1f:38:68:2a:30:0a:a2:83:06:e5:b5:72:7c:aa:d0:23: 5b:d6:00:d4:7f:f5:d9:2e:3b:89:bb:87:ab:24:0d:d3:0b:34: c0:04:53:da:a8:45:41:8e:c6:53:be:33:a0:6d:17:c8:09:d1: 6f:1b:44:e9:23:e1:f7:24:00:34:73:b8:f6:85:f1:1f:cc:f0: 5f:01:77:ce:d5:13:2a:ad:30:dc:33:b2:df:73:10:02:9d:16: 05:a6:e2:72:3e:10:27:2b:54:cc:2d:60:47:ae:f1:95:f3:59: 7d:91:53:3e:69:43:3c:43:dc:63:09:5d:c1:11:e8:ab:74:6d: 04:b3:32:3e:2f:3c:02:20:b5:9b:35:f6:fc:60:18:26:d1:c0: 73:6d:f9:a4:ef:b3:68:b3:af:11:0c:2a:08:da:26:62:3e:d6: 24:f3:e8:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslobvE6ZR8TK4KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk OTgyNGFjYTItOWUwMS00ZWRlLWE3ZjktN2QyMTcyODM1ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkdBGzfPf2iyGEoNYb9CtwzT+EEcP+18xK1g rAwnsbyM2D/q34E/7VyTe+Nqtix99BBpwutv7UT94daxjsdD+Vlp/3i7r+zHRkqC movR4fhUye/6RFkTPOKYKM4PF6ssx3bThBqYcHCBenJsWZZQ9jtStAdcoqeGjjH/ 3fqz85MU0b6CEhFHS6XHom39bbUoSqnMzdKy0u2EvSFUHUYbQZTx2Pw4D36U3yQ7 tIrjpK5cYl9RX2BVCtyk52iT+9eEoLnL6XgTvOnzmPgcZDL8tuTueFrX4y2nRvA+ yZWiIZKA7BMOQ8IweHwm13Sadf8iu5NwHkdKv3q+s60GoVH9eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3Z+U4aFmzx6JpCzkXxpzqHjeMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMjUxMWIxYWUtMjMzMi0z OTg1LWJkY2MtODI5ODQ2NzI0NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNyHJRb6xBATXlZ6OePKipSU7Sh3Lobz/c4OSMlzMmAVjFDbQ8MBNWr 4rscwhcEATTK7Y9POIqkiDhmwykHusoD/S+d//UnOaFCsPEdggJKJ9pNH8C7v3Zt Om6sHzhoKjAKooMG5bVyfKrQI1vWANR/9dkuO4m7h6skDdMLNMAEU9qoRUGOxlO+ M6BtF8gJ0W8bROkj4fckADRzuPaF8R/M8F8Bd87VEyqtMNwzst9zEAKdFgWm4nI+ ECcrVMwtYEeu8ZXzWX2RUz5pQzxD3GMJXcER6Kt0bQSzMj4vPAIgtZs19vxgGCbR wHNt+aTvs2izrxEMKgjaJmI+1iTz6MQ= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:10 2025 by rpki-client