$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa File: e528276f-2a51-359b-9930-15059a3eeb28.roa (raw, json) Hash identifier: sCGrzNkCpl5DEgF6Y6kOOxJsWWlSVSjAFkzoG0nkyhM= Subject key identifier: 4B:38:1C:A7:AC:F7:48:FE:84:20:A6:E8:0B:50:B0:5B:3A:E8:B8:74 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848C84B9AD86FAC20026737A460 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 8075 IP address blocks: 131.145.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:9a:d8:6f:ac:20:02:67:37:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=dc478f6d-d6f1-4980-9624-46183ace95f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:f1:48:1a:70:48:f4:80:ca:7b:bf:e5:a1: c0:46:4f:0b:1e:a3:d7:d9:ec:80:68:73:c7:69:d8: c4:7a:70:22:76:3d:3d:45:97:f1:47:f4:c6:2d:b4: 5e:a7:cb:38:7f:37:4d:d4:26:27:42:ad:7d:92:bb: b0:77:8a:50:8a:12:e8:71:e7:1f:83:fe:c9:98:34: 22:24:de:42:12:69:23:00:91:8d:2f:cf:96:55:a2: 1d:23:c6:ff:32:e6:28:fe:c2:ca:83:2d:51:f3:72: ac:5c:04:46:58:5d:fd:bb:30:5e:12:77:d2:0a:3d: df:83:a1:04:65:71:47:5d:c6:5f:44:03:69:20:c2: f1:88:81:36:90:48:63:02:6f:7c:8c:48:e2:22:de: c9:5d:2e:58:26:37:3c:4c:5b:97:06:a7:00:3f:2f: a1:93:45:c8:35:93:3c:59:ca:4a:f3:20:4f:37:df: 65:12:aa:0b:d8:74:8f:ae:9c:33:5d:65:6e:84:1f: 7b:1a:49:38:09:ed:c2:77:29:7c:86:bc:e9:43:08: a9:f2:7d:ef:90:93:a9:f9:52:82:ac:4c:ba:76:06: 6f:4e:64:83:db:a5:37:92:46:ca:0e:47:62:66:1b: 00:0c:b0:c5:8e:a4:cc:9d:aa:d8:22:c8:54:b4:32: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:38:1C:A7:AC:F7:48:FE:84:20:A6:E8:0B:50:B0:5B:3A:E8:B8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 131.145.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fa:d1:de:5a:4e:72:5b:ff:fe:2f:04:36:83:c0:61:84:3d: 32:a4:48:9a:d7:46:f8:ca:d9:dd:76:60:59:ff:09:38:b0:c1: 0b:cb:d1:b7:03:d8:88:cd:80:06:5a:1e:84:5f:e6:16:f8:29: 1f:4e:3a:76:8e:03:b0:95:e0:6f:5d:9e:d5:db:0b:0f:78:66: fd:76:47:cc:bc:d0:1f:67:ab:98:b2:2f:b7:4a:b6:ce:91:8f: 31:1d:69:3f:7c:a0:a3:bd:f4:90:c0:ad:e6:fc:ba:5c:c9:a2: ac:d6:ea:d6:95:9d:5b:bb:ae:93:86:6b:6e:68:3f:d9:60:c5: 35:4c:38:b6:f3:ac:67:c2:da:a3:8a:32:3b:a1:29:97:5f:80: ad:70:e0:05:11:b3:72:0b:81:ee:80:8b:b8:0b:24:ec:03:c6: b7:b6:e4:59:85:4d:f6:4a:38:85:62:32:0a:51:bb:9d:f7:82: 2a:94:88:3e:c2:50:de:75:29:d6:cc:3c:8b:70:cb:0b:09:6a: f5:72:ba:20:f6:42:34:f8:a4:da:94:53:72:af:ab:e4:9d:ab: e6:0f:58:d3:9c:6d:df:d4:6f:66:03:17:e2:91:fb:9c:c7:e4: 72:01:36:7d:6d:ef:aa:19:5a:25:89:ec:a1:86:1c:18:8c:09: d9:34:8c:43 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS5rYb6wgAmc3pGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGM0NzhmNmQtZDZmMS00OTgwLTk2MjQtNDYxODNhY2U5NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/nxSBpwSPSAynu/5aHARk8LHqPX2eyAaHPH adjEenAidj09RZfxR/TGLbRep8s4fzdN1CYnQq19kruwd4pQihLocecfg/7JmDQi JN5CEmkjAJGNL8+WVaIdI8b/MuYo/sLKgy1R83KsXARGWF39uzBeEnfSCj3fg6EE ZXFHXcZfRANpIMLxiIE2kEhjAm98jEjiIt7JXS5YJjc8TFuXBqcAPy+hk0XINZM8 WcpK8yBPN99lEqoL2HSPrpwzXWVuhB97Gkk4Ce3Cdyl8hrzpQwip8n3vkJOp+VKC rEy6dgZvTmSD26U3kkbKDkdiZhsADLDFjqTMnarYIshUtDLEPwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEs4HKes90j+hCCm6AtQsFs66Lh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTUyODI3NmYtMmE1MS0z NTliLTk5MzAtMTUwNTlhM2VlYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg5EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFfrR3lpOclv//i8ENoPAYYQ9MqRImtdG+MrZ3XZgWf8JOLDBC8vRtwPY iM2ABloehF/mFvgpH046do4DsJXgb12e1dsLD3hm/XZHzLzQH2ermLIvt0q2zpGP MR1pP3ygo730kMCt5vy6XMmirNbq1pWdW7uuk4Zrbmg/2WDFNUw4tvOsZ8Lao4oy O6Epl1+ArXDgBRGzcguB7oCLuAsk7APGt7bkWYVN9ko4hWIyClG7nfeCKpSIPsJQ 3nUp1sw8i3DLCwlq9XK6IPZCNPik2pRTcq+r5J2r5g9Y05xt39RvZgMX4pH7nMfk cgE2fW3vqhlaJYnsoYYcGIwJ2TSMQw== -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:42 2025 by rpki-client