$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa File: 9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa (raw, json) Hash identifier: UpQvzttgRvt0NNCqqhD66fmeAAp8HKz0pphoWJ99W6c= Subject key identifier: 31:99:7F:69:48:39:36:19:3D:8B:B8:50:68:D9:BC:0A:50:86:6F:1D Certificate issuer: /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc Certificate serial: 010D0C9F4328584902EC27865A6A8EC6DD706C00 Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 62490 IP address blocks: 136.175.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:27:86:5a:6a:8e:c6:dd:70:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=30e1071b-7a74-4334-8105-517e3c760568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:8d:1d:9b:77:41:54:6e:c9:3c:ac:f0:c1: 85:05:8e:05:cf:00:97:d6:be:47:86:ab:41:1c:cd: 10:ed:01:eb:f3:4b:89:f7:29:a9:b7:cf:0a:e3:fa: 7a:bb:7b:03:29:81:98:49:29:46:ff:28:c4:df:ad: 1b:7b:10:f2:57:b4:8a:ee:55:15:ba:61:60:85:32: 21:ca:93:a7:fd:b1:47:a8:d9:79:03:12:2b:86:c7: d8:19:0d:a1:eb:56:88:d8:a5:d6:f3:32:c5:01:58: bc:9a:48:76:db:6b:09:23:3d:6f:9a:e1:8c:15:50: 34:ef:27:67:19:10:b3:0a:e2:2f:80:53:6c:4a:63: 7f:ae:33:2a:20:fb:14:6d:6d:96:62:d0:c1:3c:01: 51:5d:54:4d:61:61:69:af:24:90:7c:2e:33:7f:73: 4a:50:80:33:81:67:18:86:eb:27:bb:57:35:be:e2: 9f:c0:22:63:9d:44:c7:47:85:26:96:33:b0:b4:9e: 90:8f:5c:10:54:99:0a:9d:52:94:76:9e:0e:4a:5e: 0d:df:50:c7:e1:78:42:f0:3d:5b:15:5c:70:dd:73: f2:38:38:02:7c:70:0e:ee:9f:74:15:2e:ef:75:6d: 72:75:ed:0d:8a:45:27:c7:ef:61:18:29:d4:ec:3b: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:99:7F:69:48:39:36:19:3D:8B:B8:50:68:D9:BC:0A:50:86:6F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl X509v3 Authority Key Identifier: keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer sbgp-ipAddrBlock: critical IPv4: 136.175.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:46:49:c2:70:0f:f9:4e:e2:80:cc:e5:7b:45:4f:6b:b8:40: 74:40:8e:78:06:28:a7:c9:49:34:fb:2b:cd:4a:ed:a6:28:e7: 7a:cb:30:7e:78:04:7a:80:08:9b:a0:2a:28:55:6f:df:7c:b1: 93:47:a6:37:16:4d:ac:34:1d:ef:52:d8:e4:20:b1:4a:58:78: 53:cb:8e:40:27:a9:bb:23:35:2d:d9:d0:7f:ef:a2:a7:8f:9e: a2:bd:63:7f:3f:ec:00:89:1b:34:47:06:b2:0d:f6:71:cd:04: 5c:24:37:ee:4a:f1:b5:15:1f:04:33:6f:5d:b0:52:fe:df:b8: ef:35:ed:3d:ef:00:d0:73:54:93:61:a7:21:e1:b2:84:f1:26: db:04:e2:e2:4c:fe:5a:d2:71:91:f5:da:ed:5a:cd:ae:a2:df: d1:da:5c:22:dd:6d:54:08:79:cb:c1:30:79:73:f5:eb:f9:df: c1:78:29:81:8d:a5:4f:9d:68:4f:68:fe:11:7a:8b:24:4b:a9: 33:02:ba:3e:2b:d4:22:ed:ae:b5:dd:eb:de:be:40:65:0e:4c: b1:cf:b0:48:a2:79:d9:d6:6c:36:32:4c:36:83:a2:bd:16:4b: 14:15:18:af:32:65:b8:13:9b:bf:6d:d7:d2:25:35:f3:cb:1b: d6:2d:8a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CeGWmqOxt1wbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc1NGE4OWYtMzdlZS00OGJiLThhM2MtMTM5ZWUwNmZl MGZjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MzBlMTA3MWItN2E3NC00MzM0LTgxMDUtNTE3ZTNjNzYwNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTeNHZt3QVRuyTys8MGFBY4FzwCX1r5HhqtB HM0Q7QHr80uJ9ympt88K4/p6u3sDKYGYSSlG/yjE360bexDyV7SK7lUVumFghTIh ypOn/bFHqNl5AxIrhsfYGQ2h61aI2KXW8zLFAVi8mkh222sJIz1vmuGMFVA07ydn GRCzCuIvgFNsSmN/rjMqIPsUbW2WYtDBPAFRXVRNYWFprySQfC4zf3NKUIAzgWcY husnu1c1vuKfwCJjnUTHR4UmljOwtJ6Qj1wQVJkKnVKUdp4OSl4N31DH4XhC8D1b FVxw3XPyODgCfHAO7p90FS7vdW1yde0NikUnx+9hGCnU7DtFiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGZf2lIOTYZPYu4UGjZvApQhm8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NzU0 YTg5Zi0zN2VlLTQ4YmItOGEzYy0xMzllZTA2ZmUwZmMvOWY5ZDAwMDMtMzc1ZS0z NmMyLWJkZGQtYzIzMzRmY2I0ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTc1NGE4OWYtMzdlZS00OGJiLThh M2MtMTM5ZWUwNmZlMGZjLzU3NTRhODlmLTM3ZWUtNDhiYi04YTNjLTEzOWVlMDZm ZTBmYy5jcmwwHwYDVR0jBBgwFoAUSlt8Yitw2Ya59H5pXPdbs8VN6ngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NzU0YTg5Zi0zN2VlLTQ4YmItOGEzYy0xMzll ZTA2ZmUwZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJGScJwD/lO4oDM5XtFT2u4QHRAjngGKKfJSTT7K81K7aYo53rLMH54 BHqACJugKihVb998sZNHpjcWTaw0He9S2OQgsUpYeFPLjkAnqbsjNS3Z0H/voqeP nqK9Y38/7ACJGzRHBrIN9nHNBFwkN+5K8bUVHwQzb12wUv7fuO817T3vANBzVJNh pyHhsoTxJtsE4uJM/lrScZH12u1aza6i39HaXCLdbVQIecvBMHlz9ev538F4KYGN pU+daE9o/hF6iyRLqTMCuj4r1CLtrrXd696+QGUOTLHPsEiiednWbDYyTDaDor0W SxQVGK8yZbgTm79t19IlNfPLG9Yting= -----END CERTIFICATE-----Generated at Fri Mar 14 08:17:02 2025 by rpki-client