$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa File: 64db7fdd-16d1-3399-a90b-2ec2083580a3.roa (raw, json) Hash identifier: O0QsxyCHiH5kqa5QPUMjqfiUm+oQMH+8P8zTb53v1A8= Subject key identifier: 9B:40:05:CB:B2:C2:AC:D8:0E:27:39:4A:40:B9:EF:B8:7E:98:FB:D7 Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F43285848F65BE0F6CD2E02BAAE7B8E80 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 35889 IP address blocks: 192.35.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e0:f6:cd:2e:02:ba:ae:7b:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=3e6a2333-9fe7-4bca-a40c-a9a5ad29469c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:e2:19:32:b1:2d:ea:ac:59:e1:52:c7:1b: 72:fe:57:7e:ef:68:45:19:10:44:b8:cc:2c:33:8f: 8d:b9:35:e7:d4:26:0f:46:89:52:14:2b:15:67:8e: 4b:09:ce:2c:f0:bb:f6:73:bd:5e:bb:99:61:6c:af: 25:a1:e2:8a:3b:8a:b2:3a:ea:dc:24:02:17:f3:14: 11:02:f4:2f:ef:81:64:41:6e:12:38:99:5a:e6:ac: 0d:5b:af:c7:8a:f9:04:f1:e9:a5:ef:dc:40:ce:98: aa:21:9d:42:16:b6:45:48:a9:0f:7d:f4:31:94:bc: b6:60:a3:67:50:0e:94:3b:19:f3:07:54:67:b7:84: 59:c6:49:ec:09:d2:f8:1e:73:42:86:4f:49:f3:9d: ca:70:f1:c5:48:78:19:9f:87:a1:50:ee:51:48:43: 0e:2e:cf:d1:b7:98:aa:05:4b:64:30:7d:57:74:98: 7a:a1:37:42:f3:e2:80:29:9d:e7:ba:71:b5:0c:e5: d7:09:d7:ee:65:cb:1d:48:8a:9f:7e:36:2d:9e:0c: 55:ad:30:46:3c:56:6e:d7:24:c9:7e:ae:62:ce:0a: 68:60:3d:4b:be:9e:a4:c4:cc:fb:e7:90:5f:70:07: 11:b6:18:86:63:9b:fd:f8:b5:5f:a6:c2:f1:15:a4: 3e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:40:05:CB:B2:C2:AC:D8:0E:27:39:4A:40:B9:EF:B8:7E:98:FB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 192.35.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ad:ed:0c:f7:52:5f:98:ef:e7:8c:59:c4:ab:a1:c9:d6:a2: a2:68:25:3c:cb:6e:a7:dc:36:b6:8b:67:f2:0b:35:5d:8a:b6: ba:f5:ea:f3:80:c5:5c:0e:81:cc:e3:cb:f8:1c:dc:3a:cd:cb: f3:3f:9c:bd:21:08:a9:4e:e0:12:af:e1:13:b8:42:29:c2:c6: ab:b8:09:b2:1c:83:1a:04:28:20:bb:00:63:0c:fd:9f:c5:95: 70:b1:9b:be:1a:2f:43:8a:05:0c:87:85:fd:55:37:64:e9:4e: c6:f2:5a:51:90:e2:66:22:ee:e8:da:a7:84:33:e3:f0:08:43: ab:d8:bf:7b:a1:e7:0f:91:8c:66:11:dc:57:f4:bf:23:e6:84: d9:9e:23:98:95:1e:4e:54:d8:f4:31:79:fc:05:92:09:fd:b2: eb:f3:b3:c9:34:db:7f:be:c7:6f:b9:ad:3b:19:1c:47:7b:6d: 45:d1:c2:0a:51:03:1a:24:d5:d3:cd:bd:a9:69:c1:67:ff:88: d5:7a:4c:31:71:b8:d7:bf:45:4d:a3:36:b8:bc:18:ef:14:cb: 66:62:05:f3:19:eb:5f:07:a7:3f:19:54:cf:44:14:4e:7e:ae: 98:cf:56:59:4b:60:63:0f:fa:5b:ef:6f:51:fe:1a:81:b5:46: c9:3a:af:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+D2zS4Cuq57joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk M2U2YTIzMzMtOWZlNy00YmNhLWE0MGMtYTlhNWFkMjk0NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9jiGTKxLeqsWeFSxxty/ld+72hFGRBEuMws M4+NuTXn1CYPRolSFCsVZ45LCc4s8Lv2c71eu5lhbK8loeKKO4qyOurcJAIX8xQR AvQv74FkQW4SOJla5qwNW6/HivkE8eml79xAzpiqIZ1CFrZFSKkPffQxlLy2YKNn UA6UOxnzB1Rnt4RZxknsCdL4HnNChk9J853KcPHFSHgZn4ehUO5RSEMOLs/Rt5iq BUtkMH1XdJh6oTdC8+KAKZ3nunG1DOXXCdfuZcsdSIqffjYtngxVrTBGPFZu1yTJ fq5izgpoYD1Lvp6kxMz755BfcAcRthiGY5v9+LVfpsLxFaQ+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtABcuywqzYDic5SkC577h+mPvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNjRkYjdmZGQtMTZkMS0z Mzk5LWE5MGItMmVjMjA4MzU4MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISt7Qz3Ul+Y7+eMWcSrocnWoqJoJTzLbqfcNraLZ/ILNV2Ktrr16vOA xVwOgczjy/gc3DrNy/M/nL0hCKlO4BKv4RO4QinCxqu4CbIcgxoEKCC7AGMM/Z/F lXCxm74aL0OKBQyHhf1VN2TpTsbyWlGQ4mYi7ujap4Qz4/AIQ6vYv3uh5w+RjGYR 3Ff0vyPmhNmeI5iVHk5U2PQxefwFkgn9suvzs8k023++x2+5rTsZHEd7bUXRwgpR Axok1dPNvalpwWf/iNV6TDFxuNe/RU2jNri8GO8Uy2ZiBfMZ618Hpz8ZVM9EFE5+ rpjPVllLYGMP+lvvb1H+GoG1Rsk6r8g= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:39 2025 by rpki-client