$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa File: 4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa (raw, json) Hash identifier: HPozOCKy2F6Z3eR+GcPEhxPZ02Ze1okQDgcpcekNnw4= Subject key identifier: DA:D7:B9:C3:7C:02:88:0C:79:D2:DD:B8:3A:C1:A3:7A:C2:18:51:18 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F43285848EC9691A95E9F8E7A2C729800 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 192.152.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:91:a9:5e:9f:8e:7a:2c:72:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=8142ed71-afc0-465b-af3b-47e75228d156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:ea:e4:1b:1d:fe:7e:07:7f:60:88:3e:a9: 66:b4:49:ea:78:e2:36:fb:17:f1:73:b1:e2:f5:08: 63:c4:5d:1a:97:36:4f:f9:26:ff:76:57:44:0b:aa: cd:b6:b7:a8:04:61:e9:d3:8b:52:87:16:46:87:93: 23:f0:6e:ba:1d:59:4c:db:80:54:5d:bd:ab:d5:10: 63:f5:a6:0a:87:38:47:b9:93:3e:61:b4:94:fe:79: 42:ff:2b:3a:25:7d:74:bd:68:39:b3:ae:c8:b3:d8: 77:e5:41:6f:1c:e0:f4:57:df:fa:a8:a5:cc:0a:f3: 8a:aa:0c:a2:c5:0f:73:87:da:2e:0e:83:35:eb:85: fe:8b:aa:cf:79:42:37:a1:ad:a5:72:25:b1:00:14: e4:bf:4e:fa:f1:90:dc:74:59:4a:6b:da:a3:06:32: 2b:3d:4c:f7:2f:e5:55:7e:40:9d:09:92:ff:ce:e5: 03:d1:45:32:60:e2:ef:36:ce:50:52:79:0c:12:bf: 66:3f:29:e7:f5:86:57:2a:84:c0:dc:a6:8f:61:90: 3c:fe:fa:f9:ef:d9:51:38:6a:50:b5:4e:61:5a:43: f1:8e:66:78:e9:0a:74:06:9b:fe:5e:2b:f3:3a:f5: 21:7e:79:88:9a:d7:fe:08:1f:ef:b7:b2:eb:af:cd: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D7:B9:C3:7C:02:88:0C:79:D2:DD:B8:3A:C1:A3:7A:C2:18:51:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:79:6f:a8:15:d2:b1:7c:b0:b2:93:84:5d:6f:83:a4:0e:45: b9:f3:ab:4a:54:e8:8e:97:d9:7d:10:01:f3:0d:22:18:b2:d4: 3c:57:40:5c:e9:18:2c:39:60:a3:14:48:26:c7:7f:08:19:6d: e1:a7:8a:48:54:ac:b9:00:07:58:93:64:7b:6f:6b:e6:3d:23: bc:d5:3e:40:51:ef:a2:7c:f0:ac:fa:a6:c1:1b:11:bb:47:5e: b0:f7:47:6e:98:e4:4c:30:e4:44:1f:aa:18:9c:b9:03:7c:85: d2:b1:ce:7f:d3:71:be:55:0f:4a:d5:e9:29:d8:d8:a7:e4:09: 2b:ff:41:8a:1d:ca:69:b3:98:7d:5c:a0:6f:8d:4a:a2:44:1a: 1a:c3:c8:6a:e8:b5:b2:f8:23:26:6d:e5:34:2a:00:fe:c2:e9: dc:a0:c0:a2:fe:28:be:f8:80:c5:56:1c:fd:f2:ee:23:32:98: da:3f:18:e5:34:a5:44:4f:08:2e:dd:13:2f:84:e8:ad:87:8a: f6:cd:16:9f:3e:b2:3b:9b:86:13:0c:0d:4f:2c:af:f8:5a:74: e3:02:06:c6:bb:1c:ab:c0:48:58:85:18:c6:58:f7:95:84:0b: 33:9e:08:78:16:f5:23:7e:c0:aa:76:a2:b7:1e:4b:e4:ad:5c: 84:a1:1f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpGpXp+OeixymAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ODE0MmVkNzEtYWZjMC00NjViLWFmM2ItNDdlNzUyMjhkMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvjq5Bsd/n4Hf2CIPqlmtEnqeOI2+xfxc7Hi 9QhjxF0alzZP+Sb/dldEC6rNtreoBGHp04tShxZGh5Mj8G66HVlM24BUXb2r1RBj 9aYKhzhHuZM+YbSU/nlC/ys6JX10vWg5s67Is9h35UFvHOD0V9/6qKXMCvOKqgyi xQ9zh9ouDoM164X+i6rPeUI3oa2lciWxABTkv0768ZDcdFlKa9qjBjIrPUz3L+VV fkCdCZL/zuUD0UUyYOLvNs5QUnkMEr9mPynn9YZXKoTA3KaPYZA8/vr579lROGpQ tU5hWkPxjmZ46Qp0Bpv+XivzOvUhfnmImtf+CB/vt7Lrr82qKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrXucN8AogMedLduDrBo3rCGFEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvNGU0NmM4ZGQtZDA2YS0z ZDU4LThhMDctZTBiNTE5ZmQxZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp5b6gV0rF8sLKThF1vg6QORbnzq0pU6I6X2X0QAfMNIhiy1DxXQFzp GCw5YKMUSCbHfwgZbeGnikhUrLkAB1iTZHtva+Y9I7zVPkBR76J88Kz6psEbEbtH XrD3R26Y5Eww5EQfqhicuQN8hdKxzn/Tcb5VD0rV6SnY2KfkCSv/QYodymmzmH1c oG+NSqJEGhrDyGrotbL4IyZt5TQqAP7C6dygwKL+KL74gMVWHP3y7iMymNo/GOU0 pURPCC7dEy+E6K2HivbNFp8+sjubhhMMDU8sr/hadOMCBsa7HKvASFiFGMZY95WE CzOeCHgW9SN+wKp2orceS+StXIShHwY= -----END CERTIFICATE-----Generated at Fri Mar 14 11:13:52 2025 by rpki-client