$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa File: 31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa (raw, json) Hash identifier: mQi24gM85l89A3BpBkOZ4+EbZNFhD7BNJk0Snx/KXa4= Subject key identifier: 53:67:51:9B:1E:C5:68:BB:16:BF:A1:5B:5F:2D:23:B9:15:11:6F:A7 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F43285848EC969210604D481B98292500 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:92:10:60:4d:48:1b:98:29:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=6c3e1ec4-b46d-49c8-80cc-fa02448ee5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:83:52:e0:7a:cf:1a:81:a0:80:f2:f2:56: 26:a0:89:62:5b:24:89:e0:95:bc:ee:77:c1:2a:17: b0:5c:69:e1:10:04:3e:ae:ed:71:5d:8e:49:6a:64: eb:ea:54:b6:b7:60:83:81:13:86:e4:2a:9c:f5:87: d5:29:b6:99:60:ac:89:cf:15:6c:04:a9:ac:f3:d6: 8e:be:21:84:2a:0e:cf:f2:e9:1d:79:83:47:c6:79: b2:a7:8e:21:10:c9:fc:07:96:f1:52:37:7e:87:b7: 23:3e:b9:07:be:0a:02:26:7e:aa:c8:89:b5:10:87: be:85:8a:53:49:aa:21:1a:cc:18:81:d7:59:1d:53: 28:f4:6c:9d:11:b7:6b:22:70:ea:14:5c:d4:c3:79: 58:f0:af:7c:04:13:c9:d4:00:0d:51:96:5c:7c:c8: f7:1a:4d:3a:9f:f5:68:8d:c5:8b:e4:dd:75:a0:91: 82:6e:5f:db:b3:03:8d:a6:d3:66:7c:f4:2a:1d:e0: c6:fb:e3:08:aa:1e:c8:5d:9c:71:f1:fe:e2:02:f1: 14:08:b3:5a:82:05:7d:f7:43:c4:b2:6f:e5:a1:e5: 77:fe:7a:1f:01:30:b7:91:46:57:56:95:8e:3d:10: 56:b7:a5:a5:76:7e:7f:30:e0:b2:f6:84:0b:15:17: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:67:51:9B:1E:C5:68:BB:16:BF:A1:5B:5F:2D:23:B9:15:11:6F:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:23:fb:a7:a9:df:f1:82:c3:52:e2:04:64:75:94:5f:42:fa: 6c:c7:57:02:45:7a:ef:09:0e:25:8d:77:ef:6d:d4:0e:9e:d2: 24:23:8a:09:cb:4a:1a:ab:04:90:0f:0c:d6:7e:53:fc:e1:6c: 68:54:cf:0b:ce:70:77:60:5e:93:13:b1:65:13:14:87:e8:89: cc:04:2d:75:08:4c:37:a0:06:c5:06:75:7b:d1:57:a8:0e:db: 44:74:e5:6e:b9:e0:b6:e4:7a:7c:23:e2:b6:f5:65:fb:42:ca: 47:30:0c:d8:68:da:50:a2:86:78:8b:1d:49:48:bd:56:e7:77: 94:72:90:79:25:b3:53:21:16:cf:1c:9a:0c:e5:a1:e1:68:cb: 29:f0:f0:b9:91:cc:a5:c1:74:88:fe:32:ae:a5:2f:90:f3:e7: 74:eb:af:43:8c:22:a5:2e:82:1a:ca:46:a6:8a:37:82:e3:68: f5:ad:76:0e:09:4d:33:6a:30:34:a0:ac:70:a7:9b:b3:21:1b: b1:cb:c1:82:7a:13:51:9e:a4:0f:a0:37:2b:82:8e:c7:b1:db: b3:10:c8:44:2d:0a:94:d1:e3:4c:2e:a5:39:6e:02:3c:f8:5f: e5:c5:ef:e0:19:e4:60:46:7a:7e:de:ac:0a:32:1c:39:ae:f3: 57:c2:27:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpIQYE1IG5gpJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NmMzZTFlYzQtYjQ2ZC00OWM4LTgwY2MtZmEwMjQ0OGVlNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNeDUuB6zxqBoIDy8lYmoIliWySJ4JW87nfB KhewXGnhEAQ+ru1xXY5JamTr6lS2t2CDgROG5Cqc9YfVKbaZYKyJzxVsBKms89aO viGEKg7P8ukdeYNHxnmyp44hEMn8B5bxUjd+h7cjPrkHvgoCJn6qyIm1EIe+hYpT SaohGswYgddZHVMo9GydEbdrInDqFFzUw3lY8K98BBPJ1AANUZZcfMj3Gk06n/Vo jcWL5N11oJGCbl/bswONptNmfPQqHeDG++MIqh7IXZxx8f7iAvEUCLNaggV990PE sm/loeV3/nofATC3kUZXVpWOPRBWt6Wldn5/MOCy9oQLFRf2TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNnUZsexWi7Fr+hW18tI7kVEW+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMzFjMmI5N2MtYmM5ZC0z OTNlLTgzZTAtZmQwM2ZmYTMxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkj+6ep3/GCw1LiBGR1lF9C+mzHVwJFeu8JDiWNd+9t1A6e0iQjignL ShqrBJAPDNZ+U/zhbGhUzwvOcHdgXpMTsWUTFIfoicwELXUITDegBsUGdXvRV6gO 20R05W654Lbkenwj4rb1ZftCykcwDNho2lCihniLHUlIvVbnd5RykHkls1MhFs8c mgzloeFoyynw8LmRzKXBdIj+Mq6lL5Dz53Trr0OMIqUughrKRqaKN4LjaPWtdg4J TTNqMDSgrHCnm7MhG7HLwYJ6E1GepA+gNyuCjsex27MQyEQtCpTR40wupTluAjz4 X+XF7+AZ5GBGen7erAoyHDmu81fCJ7k= -----END CERTIFICATE-----Generated at Fri Mar 14 08:05:19 2025 by rpki-client