$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa File: 31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa (raw, json) Hash identifier: Ln1B8bmeHatX+FHRmqZeBoN72V0fgnGk5DHuENgSDmc= Subject key identifier: CA:20:C1:40:4B:14:5C:74:1F:50:C0:72:42:54:24:DD:7E:C3:D3:DA Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F432858480BDA6EC19775BBA976BD4800 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6e:c1:97:75:bb:a9:76:bd:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=a978b903-6e22-4621-9d31-76c290986f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:b6:b9:db:54:2a:8a:d2:41:cf:f2:4b:76: 3f:36:23:04:ff:f5:86:40:1c:25:92:94:23:22:5e: 4d:44:0f:cd:ee:69:32:3d:c3:d6:2c:d1:52:f1:fc: c4:7a:09:cd:36:b3:3b:37:6d:6f:6a:1e:d0:c4:f0: f6:e4:94:1b:22:d2:99:03:b2:3c:9b:9d:8d:72:52: b5:b9:ff:21:28:f2:26:7c:f1:ab:f9:89:ab:b2:5e: b7:53:06:d3:54:e8:d6:99:46:f5:1a:ff:7c:e6:69: ef:c2:33:e2:5d:88:2d:b4:97:85:22:0f:46:b3:ee: 7e:e4:71:3e:d2:71:4a:b9:47:ff:94:65:5f:a2:80: fd:aa:7a:b2:ca:c0:b9:55:51:63:e9:22:73:7b:00: 6c:b9:33:a8:4c:16:f5:30:6a:1e:69:3b:0a:cd:1d: 48:00:5d:ad:19:70:7f:7d:3d:cb:65:74:70:71:c1: d8:6a:cb:dd:6b:8c:33:4b:8d:fc:c6:e6:6c:cf:8c: f8:50:ab:64:43:77:4c:04:e8:93:83:ac:e4:a9:26: 8b:fb:d1:47:f4:bb:be:85:d6:90:18:1c:6f:d3:3e: 60:24:6e:03:91:44:30:ca:cb:f8:de:e5:6c:93:1f: 74:8d:a0:62:26:7e:31:80:97:ab:b0:01:be:32:97: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:20:C1:40:4B:14:5C:74:1F:50:C0:72:42:54:24:DD:7E:C3:D3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2a:e4:10:49:da:62:a5:39:0f:78:74:4b:16:cd:ff:23:0e: 3d:5b:86:89:44:aa:ee:fe:c9:c7:91:0f:99:b9:d7:f7:2d:2a: 8b:7d:c7:09:4d:e0:7b:ee:44:6e:0c:d8:58:48:d8:11:7a:88: 27:27:86:0b:41:46:cb:13:0b:79:dd:a5:eb:83:23:57:40:e2: 1f:13:2b:73:c9:cd:71:c5:2a:61:15:69:0e:4e:3f:f5:a6:ca: 87:96:0f:bc:d5:d6:d5:67:cc:7a:f7:a9:60:d8:36:e0:31:c2: 4c:a2:04:ec:12:c3:35:93:a4:c8:21:e7:dc:25:cf:05:c2:1c: 76:8e:81:97:09:b2:93:e4:99:7c:09:92:e0:be:64:d7:5c:1a: 52:fa:c8:b5:8e:de:58:ba:0e:8c:00:78:39:5e:7e:e8:d0:ea: c2:29:5b:6b:86:b9:06:61:73:44:09:46:e6:88:82:3f:96:31: 24:e0:8f:3f:cd:78:02:c9:f0:c5:ec:8b:b2:b4:43:da:5f:e8: bd:8a:51:de:0b:f7:11:d1:9c:8c:33:f9:b6:6f:d8:23:ae:4b: 66:99:97:ac:3d:1e:4c:b6:b4:60:0b:ea:b4:7b:03:c1:ff:c3: dc:c7:85:90:ee:52:00:ed:b0:db:75:dc:23:07:11:c2:27:34: b7:9e:cd:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2m7Bl3W7qXa9SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YTk3OGI5MDMtNmUyMi00NjIxLTlkMzEtNzZjMjkwOTg2ZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIa2udtUKorSQc/yS3Y/NiME//WGQBwlkpQj Il5NRA/N7mkyPcPWLNFS8fzEegnNNrM7N21vah7QxPD25JQbItKZA7I8m52NclK1 uf8hKPImfPGr+Ymrsl63UwbTVOjWmUb1Gv985mnvwjPiXYgttJeFIg9Gs+5+5HE+ 0nFKuUf/lGVfooD9qnqyysC5VVFj6SJzewBsuTOoTBb1MGoeaTsKzR1IAF2tGXB/ fT3LZXRwccHYasvda4wzS438xuZsz4z4UKtkQ3dMBOiTg6zkqSaL+9FH9Lu+hdaQ GBxv0z5gJG4DkUQwysv43uVskx90jaBiJn4xgJersAG+MpdFhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMogwUBLFFx0H1DAckJUJN1+w9PaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMzFjMmI5N2MtYmM5ZC0z OTNlLTgzZTAtZmQwM2ZmYTMxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEq5BBJ2mKlOQ94dEsWzf8jDj1bholEqu7+yceRD5m51/ctKot9xwlN 4HvuRG4M2FhI2BF6iCcnhgtBRssTC3ndpeuDI1dA4h8TK3PJzXHFKmEVaQ5OP/Wm yoeWD7zV1tVnzHr3qWDYNuAxwkyiBOwSwzWTpMgh59wlzwXCHHaOgZcJspPkmXwJ kuC+ZNdcGlL6yLWO3li6DowAeDlefujQ6sIpW2uGuQZhc0QJRuaIgj+WMSTgjz/N eALJ8MXsi7K0Q9pf6L2KUd4L9xHRnIwz+bZv2COuS2aZl6w9Hky2tGAL6rR7A8H/ w9zHhZDuUgDtsNt13CMHEcInNLeezdQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:03 2025 by rpki-client