$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa File: 149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa (raw, json) Hash identifier: Ngr8lquAPVors9l4/ivnGuamIlMy0dPUIJCywr0VXuQ= Subject key identifier: 43:75:F1:D7:63:28:8E:6A:3D:BF:3C:81:93:70:C7:A3:69:03:61:3E Certificate issuer: /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Certificate serial: 010D0C9F432858487325AC382A647D1DC9F93680 Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 16509 IP address blocks: 192.135.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:ac:38:2a:64:7d:1d:c9:f9:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=939287b4-b87e-4428-87f1-24c2a927f17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:56:43:05:53:0c:c2:8d:ae:3a:87:7f:37: 15:8a:79:11:ff:82:74:83:fb:df:18:4f:88:e4:48: bc:35:a5:2d:f2:b6:56:80:2c:96:6b:03:5d:46:70: 89:5e:4e:d4:89:a0:30:ab:4c:34:3d:dd:96:73:7e: 7e:1d:9e:03:5c:4c:f4:75:9a:03:c3:3a:a7:34:ab: 0a:3b:b1:ae:28:37:b7:7b:f0:17:aa:0b:b7:be:60: c5:e0:bb:51:01:4d:1a:5f:e3:88:0d:93:07:7c:e2: de:37:2c:a9:d9:4d:ca:9d:32:e4:06:0f:bb:47:7b: 16:5e:42:18:ba:bf:cd:fc:76:00:55:7b:b4:2d:cd: 90:9c:91:de:c5:4c:30:ab:d7:91:db:ea:0e:98:82: ab:dc:f7:5d:de:4d:8e:77:76:b2:d8:14:0f:a5:4a: 87:b0:ec:b7:96:77:04:7f:0c:00:84:4e:e5:38:47: 39:fa:48:16:cf:b4:1d:d6:19:8a:35:bd:10:05:80: a4:a5:09:f6:84:bc:4a:5c:71:e6:20:cd:55:d8:ce: 6c:b1:79:9e:32:1b:bd:c0:70:7a:4c:62:ea:4d:af: 67:fa:74:fe:9a:ef:a3:ba:b6:fd:f9:88:a0:7e:7f: e6:d2:76:62:06:b3:c0:63:d6:3f:29:47:4c:0a:26: 06:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:75:F1:D7:63:28:8E:6A:3D:BF:3C:81:93:70:C7:A3:69:03:61:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl X509v3 Authority Key Identifier: keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer sbgp-ipAddrBlock: critical IPv4: 192.135.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:95:d9:98:1a:e7:e0:f4:a1:01:a9:40:a5:42:06:2b:63:87: a3:7b:f0:6d:b9:34:da:e4:1b:e4:dc:78:88:04:49:6b:ab:c1: 40:28:21:ad:e3:e2:d0:b4:c3:3f:42:96:8c:93:4b:f9:67:a8: 6b:25:f3:6c:a2:41:37:52:3b:04:20:3d:86:5b:ac:3d:97:da: 23:47:89:43:94:d8:18:16:ad:00:5e:5f:4a:28:06:b5:1b:f0: e8:27:a3:00:70:a8:dc:af:e1:2b:22:62:bb:1a:b8:40:8e:09: 27:a2:7e:17:b2:20:7e:69:33:d3:e6:b1:33:9c:d1:d8:87:30: ce:a3:dd:ec:dc:d1:9d:8b:0a:49:37:91:9e:1b:e0:24:05:e2: 36:47:74:60:d9:62:63:c5:f7:98:86:9b:66:9e:03:61:bb:6e: cb:bb:6d:77:5d:49:a8:f3:11:86:df:27:5d:05:0c:fe:6b:08: 01:db:23:ff:67:d5:19:7f:23:3f:f8:ab:b2:5c:0c:4c:7b:c0: dd:a4:de:68:6a:b5:c7:75:19:98:ca:df:fc:61:42:d6:70:92: ee:c2:4b:12:86:be:df:f2:66:16:86:2c:d2:54:af:f2:0c:14: cb:1a:a7:47:a5:d2:d9:58:be:0d:49:56:aa:18:dc:5b:7d:5d: 25:e1:22:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJaw4KmR9Hcn5NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MWZkN2QtMzdkNy00ZGE2LThkZTgtN2QzNDZlMDAw NmFhMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk OTM5Mjg3YjQtYjg3ZS00NDI4LTg3ZjEtMjRjMmE5MjdmMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskpWQwVTDMKNrjqHfzcVinkR/4J0g/vfGE+I 5Ei8NaUt8rZWgCyWawNdRnCJXk7UiaAwq0w0Pd2Wc35+HZ4DXEz0dZoDwzqnNKsK O7GuKDe3e/AXqgu3vmDF4LtRAU0aX+OIDZMHfOLeNyyp2U3KnTLkBg+7R3sWXkIY ur/N/HYAVXu0Lc2QnJHexUwwq9eR2+oOmIKr3Pdd3k2Od3ay2BQPpUqHsOy3lncE fwwAhE7lOEc5+kgWz7Qd1hmKNb0QBYCkpQn2hLxKXHHmIM1V2M5ssXmeMhu9wHB6 TGLqTa9n+nT+mu+jurb9+Yigfn/m0nZiBrPAY9Y/KUdMCiYGiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN18ddjKI5qPb88gZNwx6NpA2E+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUx ZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0NmUwMDA2YWEvMTQ5YWYzY2UtY2I0ZC0z ZGYxLWE3ZGYtMWE3ODQ1ZGQzNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGU1MWZkN2QtMzdkNy00ZGE2LThk ZTgtN2QzNDZlMDAwNmFhL2RlNTFmZDdkLTM3ZDctNGRhNi04ZGU4LTdkMzQ2ZTAw MDZhYS5jcmwwHwYDVR0jBBgwFoAUHYsjQJQ4f91apjmhU9JAQqG/3KMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUxZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0 NmUwMDA2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+V2Zga5+D0oQGpQKVCBitjh6N78G25NNrkG+TceIgESWurwUAoIa3j 4tC0wz9CloyTS/lnqGsl82yiQTdSOwQgPYZbrD2X2iNHiUOU2BgWrQBeX0ooBrUb 8OgnowBwqNyv4SsiYrsauECOCSeifheyIH5pM9PmsTOc0diHMM6j3ezc0Z2LCkk3 kZ4b4CQF4jZHdGDZYmPF95iGm2aeA2G7bsu7bXddSajzEYbfJ10FDP5rCAHbI/9n 1Rl/Iz/4q7JcDEx7wN2k3mhqtcd1GZjK3/xhQtZwku7CSxKGvt/yZhaGLNJUr/IM FMsap0el0tlYvg1JVqoY3Ft9XSXhIps= -----END CERTIFICATE-----Generated at Fri Mar 14 10:00:11 2025 by rpki-client