$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa File: 653b963f-a553-3554-a571-619ed9f7c4e3.roa (raw, json) Hash identifier: 2CzX8PY6NgnVZvcv0zlbQaNnjkkTFC0kl2WT2qUWJCo= Subject key identifier: 61:90:A4:23:2C:A0:4F:39:A0:1F:D3:D6:FE:DF:38:57:53:00:9E:1E Certificate issuer: /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc Certificate serial: 010D0C9F4328584902EC23628DFA690F4941CD00 Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 62490 IP address blocks: 136.175.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:23:62:8d:fa:69:0f:49:41:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=5ef8e106-5698-4296-9605-06a18b3f3154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:d2:89:c1:4b:8d:3f:ce:3e:cf:3f:8b:a6: 4c:4f:f4:4f:7f:69:2a:78:4d:ac:b0:e5:90:6b:b3: 17:0f:3c:2e:fb:a0:d3:f5:02:01:9b:75:d1:f2:46: 6b:f9:40:30:ed:52:e8:6e:3e:89:9a:6c:e7:75:15: 99:42:8a:cf:9e:fd:75:5d:99:84:31:12:fb:f4:c4: 7a:12:79:d2:aa:3b:ac:b9:b9:42:cc:c2:2a:6a:12: 56:4b:7e:b0:f6:1a:67:51:fd:cb:70:ef:5a:c8:75: 16:4e:2d:3d:a6:17:ee:81:e7:cd:7f:f0:7c:ea:7d: 42:31:c8:4b:ee:84:60:5c:6a:a3:4d:48:f5:54:48: 86:88:80:1b:be:2c:7c:4a:a2:6a:15:2e:0d:64:44: 5d:da:73:d6:76:80:7e:f1:92:74:5c:16:e9:56:44: 02:9f:21:e5:28:af:9f:59:c5:c9:d8:0d:44:67:e7: 56:7d:ee:42:cf:c8:01:1c:23:54:e0:48:20:98:fa: 40:e4:0b:cf:43:5d:6a:bb:57:01:c2:15:8a:dd:f1: be:35:6a:71:97:6e:40:47:8f:3e:fd:a3:c7:16:40: 15:fd:e9:e1:b9:87:c4:1e:b2:1b:f8:d9:1c:4f:79: a0:80:2d:f6:f7:f7:8f:16:66:e5:98:0b:5d:91:1f: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:90:A4:23:2C:A0:4F:39:A0:1F:D3:D6:FE:DF:38:57:53:00:9E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl X509v3 Authority Key Identifier: keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer sbgp-ipAddrBlock: critical IPv4: 136.175.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c7:4c:74:1b:db:32:c2:34:d1:1a:d9:46:d8:e9:0a:58:57: ae:31:c7:0e:28:45:cc:f3:85:5f:21:ce:ae:4c:59:fe:18:b0: 7f:24:00:2f:9d:b7:1c:fc:29:ce:8d:45:c1:85:3b:01:5c:cb: ad:be:ba:00:2a:fd:27:41:23:85:a1:a3:84:a1:00:33:8d:19: 50:c8:a6:26:b7:16:3d:33:26:dd:f5:d4:33:b9:00:74:50:a7: c7:84:97:43:e2:82:04:77:67:e4:30:f0:b9:9a:4c:96:e6:3c: 40:7b:7e:3e:ec:61:01:41:34:d1:65:6d:92:fa:ad:97:30:2c: 93:1e:9c:38:a0:4a:39:d3:05:19:36:a9:36:90:68:c8:75:dd: 29:10:87:ff:57:a3:d7:b8:3c:b2:bc:b3:a4:90:d1:32:87:4a: 72:a7:d3:d0:30:df:4b:5f:7b:09:37:2c:05:8e:97:51:ba:58: 75:d8:ed:88:f7:7d:9c:7b:aa:26:2c:46:a8:72:71:90:42:e6: cd:14:ec:75:47:2f:79:89:d2:2f:a9:df:44:a5:13:c4:e3:18: de:10:a7:5a:68:2d:d5:6d:39:c2:6b:7b:88:03:95:5c:45:fe: c4:c3:eb:8a:88:ef:8b:6a:8a:87:26:03:a9:1c:99:d6:ec:be: d1:41:17:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CNijfppD0lBzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc1NGE4OWYtMzdlZS00OGJiLThhM2MtMTM5ZWUwNmZl MGZjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NWVmOGUxMDYtNTY5OC00Mjk2LTk2MDUtMDZhMThiM2YzMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx3SicFLjT/OPs8/i6ZMT/RPf2kqeE2ssOWQ a7MXDzwu+6DT9QIBm3XR8kZr+UAw7VLobj6JmmzndRWZQorPnv11XZmEMRL79MR6 EnnSqjusublCzMIqahJWS36w9hpnUf3LcO9ayHUWTi09phfugefNf/B86n1CMchL 7oRgXGqjTUj1VEiGiIAbvix8SqJqFS4NZERd2nPWdoB+8ZJ0XBbpVkQCnyHlKK+f WcXJ2A1EZ+dWfe5Cz8gBHCNU4EggmPpA5AvPQ11qu1cBwhWK3fG+NWpxl25AR48+ /aPHFkAV/enhuYfEHrIb+NkcT3mggC329/ePFmblmAtdkR/VoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGQpCMsoE85oB/T1v7fOFdTAJ4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NzU0 YTg5Zi0zN2VlLTQ4YmItOGEzYy0xMzllZTA2ZmUwZmMvNjUzYjk2M2YtYTU1My0z NTU0LWE1NzEtNjE5ZWQ5ZjdjNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTc1NGE4OWYtMzdlZS00OGJiLThh M2MtMTM5ZWUwNmZlMGZjLzU3NTRhODlmLTM3ZWUtNDhiYi04YTNjLTEzOWVlMDZm ZTBmYy5jcmwwHwYDVR0jBBgwFoAUSlt8Yitw2Ya59H5pXPdbs8VN6ngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NzU0YTg5Zi0zN2VlLTQ4YmItOGEzYy0xMzll ZTA2ZmUwZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK8TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzHTHQb2zLCNNEa2UbY6QpYV64xxw4oRczzhV8hzq5MWf4YsH8kAC+d txz8Kc6NRcGFOwFcy62+ugAq/SdBI4Who4ShADONGVDIpia3Fj0zJt311DO5AHRQ p8eEl0PiggR3Z+Qw8LmaTJbmPEB7fj7sYQFBNNFlbZL6rZcwLJMenDigSjnTBRk2 qTaQaMh13SkQh/9Xo9e4PLK8s6SQ0TKHSnKn09Aw30tfewk3LAWOl1G6WHXY7Yj3 fZx7qiYsRqhycZBC5s0U7HVHL3mJ0i+p30SlE8TjGN4Qp1poLdVtOcJre4gDlVxF /sTD64qI74tqiocmA6kcmdbsvtFBF9A= -----END CERTIFICATE-----Generated at Fri Mar 14 10:16:42 2025 by rpki-client