$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa File: 64db7fdd-16d1-3399-a90b-2ec2083580a3.roa (raw, json) Hash identifier: yKj2sDK6FRmwrLSlJm+sqXTNw53AOQdn4LzWesSgqRE= Subject key identifier: 06:57:6F:28:4F:67:C2:45:A8:BC:59:12:EA:15:4A:EA:15:CB:6B:7F Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F43285848159FEFFED3CF948F3FF49900 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 35889 IP address blocks: 192.35.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:ef:fe:d3:cf:94:8f:3f:f4:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=73665269-7b95-48a0-9515-a792ed99f3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:26:a1:93:ff:58:9c:c6:2e:8c:1b:03:be:b6: 24:83:50:e1:b1:56:85:d9:4c:82:d4:2b:29:33:fd: 6f:4a:78:33:c8:28:9d:24:8e:ff:ef:0e:bf:4a:c5: b1:51:10:2e:a7:d7:2e:c8:f2:04:98:f3:4c:94:1c: d8:ff:b2:90:ca:da:cc:ff:5d:51:b9:16:74:80:d6: 83:36:51:f2:c5:a7:e3:7d:3d:de:4e:c8:d5:9e:5a: 1e:a2:3d:b3:e6:5e:c5:f9:5f:e7:01:cc:f9:80:84: d4:aa:38:5a:58:4d:d0:34:e6:80:52:fe:69:e8:52: a8:c3:7b:ff:60:57:9e:c3:45:c7:ee:92:2c:05:ab: 91:17:92:72:99:b8:0e:30:81:09:d8:cd:65:61:21: 35:c4:49:14:0a:ef:b7:ed:75:97:82:db:33:05:a1: 17:7c:93:db:14:6c:96:75:41:f8:30:f6:fe:2c:c9: b4:66:68:d7:12:f1:9e:26:9e:f6:54:e7:36:18:72: be:60:ac:31:b7:f7:e4:23:b9:77:52:04:76:4e:f4: 15:d0:c9:a6:ea:fd:48:db:d5:bc:77:b5:1b:2b:d9: 1f:67:ea:29:be:69:2a:3b:4d:fa:9d:63:47:83:59: 4f:fd:bc:99:12:7e:4b:7a:7b:f2:17:c4:dd:d2:3f: 0e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:57:6F:28:4F:67:C2:45:A8:BC:59:12:EA:15:4A:EA:15:CB:6B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 192.35.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:25:e2:50:5c:69:4e:3a:0c:10:01:99:62:9a:0e:35:bc:09: 38:99:3e:06:5e:af:52:e0:02:72:ed:fa:5d:17:5f:47:bf:bc: c8:7f:26:75:53:88:1d:2e:cb:b0:7b:28:c2:78:83:0a:b6:87: 1e:02:13:36:ed:96:16:ab:f2:fd:a4:05:8b:c5:7d:ff:9a:92: ae:21:90:8a:6f:32:7a:36:34:e4:da:54:47:ac:a7:f0:31:85: 54:f0:b8:ca:cb:0e:40:47:c5:e1:65:e8:43:6c:5a:a6:24:a9: f3:a6:8d:6e:e2:fd:bd:f6:b0:d4:ff:67:58:41:f1:9a:a5:35: ea:71:64:5f:cd:75:a7:bd:0e:54:3a:ce:bc:e6:2a:0c:87:69: f0:d7:ec:a8:b0:c6:c0:5b:da:5f:fd:de:71:80:7e:a8:a7:43: cc:08:37:bf:a7:fe:07:0a:c0:7e:cf:77:f7:17:5e:13:23:e2: e3:95:1e:d0:ff:fb:b7:7f:d9:5e:f1:f7:fc:e2:0c:40:05:d7: e9:36:a5:b5:82:71:ad:eb:62:ff:18:c5:cf:f6:a2:7b:08:dd: 55:87:19:bb:59:8f:d0:ac:3c:7c:de:77:89:72:6a:77:88:77: f7:b4:de:a2:b9:13:44:bb:6b:e2:3c:ff:a3:44:8a:f2:e5:d7: 46:49:ea:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn+/+08+Ujz/0mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk NzM2NjUyNjktN2I5NS00OGEwLTk1MTUtYTc5MmVkOTlmM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cahk/9YnMYujBsDvrYkg1DhsVaF2UyC1Csp M/1vSngzyCidJI7/7w6/SsWxURAup9cuyPIEmPNMlBzY/7KQytrM/11RuRZ0gNaD NlHyxafjfT3eTsjVnloeoj2z5l7F+V/nAcz5gITUqjhaWE3QNOaAUv5p6FKow3v/ YFeew0XH7pIsBauRF5JymbgOMIEJ2M1lYSE1xEkUCu+37XWXgtszBaEXfJPbFGyW dUH4MPb+LMm0ZmjXEvGeJp72VOc2GHK+YKwxt/fkI7l3UgR2TvQV0Mmm6v1I29W8 d7UbK9kfZ+opvmkqO036nWNHg1lP/byZEn5LenvyF8Td0j8ObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZXbyhPZ8JFqLxZEuoVSuoVy2t/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNjRkYjdmZGQtMTZkMS0z Mzk5LWE5MGItMmVjMjA4MzU4MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYl4lBcaU46DBABmWKaDjW8CTiZPgZer1LgAnLt+l0XX0e/vMh/JnVT iB0uy7B7KMJ4gwq2hx4CEzbtlhar8v2kBYvFff+akq4hkIpvMno2NOTaVEesp/Ax hVTwuMrLDkBHxeFl6ENsWqYkqfOmjW7i/b32sNT/Z1hB8ZqlNepxZF/Ndae9DlQ6 zrzmKgyHafDX7KiwxsBb2l/93nGAfqinQ8wIN7+n/gcKwH7Pd/cXXhMj4uOVHtD/ +7d/2V7x9/ziDEAF1+k2pbWCca3rYv8Yxc/2onsI3VWHGbtZj9CsPHzed4lyaneI d/e03qK5E0S7a+I8/6NEivLl10ZJ6kQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:48 2025 by rpki-client