$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/930ae2b9-d7f2-3c67-9754-48f4e6339637.roa File: 930ae2b9-d7f2-3c67-9754-48f4e6339637.roa (raw, json) Hash identifier: r3kn/KFSbMfWn3zFaIN/mZ9v1NHhDrtyYrli7cDSkUg= Subject key identifier: 24:54:8C:5C:CB:31:BF:D1:6E:00:A0:BC:D1:88:C7:86:EA:C2:29:25 Certificate issuer: /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Certificate serial: 010D0C9F432858487325AC2397ABE569490D6A80 Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/930ae2b9-d7f2-3c67-9754-48f4e6339637.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 16509 IP address blocks: 192.135.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:ac:23:97:ab:e5:69:49:0d:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=35785e44-b368-48a1-9db4-142b79f4cf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0a:35:27:96:0c:2c:54:7a:ef:d7:f5:cb:bb: 24:36:70:e2:68:93:f7:20:c9:3f:03:7f:b7:64:a6: ce:27:ec:e1:44:22:56:a1:96:56:61:1f:14:0c:f1: c1:0d:7f:61:1f:ca:10:14:3c:ef:05:ba:c9:a8:37: 3b:d2:5b:aa:16:c9:43:01:44:76:a6:df:68:3a:9b: ac:1a:a2:f0:d9:ef:39:ff:a1:5a:79:2f:a5:30:29: 80:b1:bb:53:f3:77:17:d1:0e:b2:4a:24:4a:3f:66: 66:0d:d2:76:75:ab:2c:08:1e:5e:63:6d:60:9d:49: 72:41:bf:a8:ce:89:a0:38:01:e3:a3:97:67:08:36: c3:14:84:ce:ee:58:c9:54:fc:12:81:59:71:c8:27: cc:24:39:0e:ed:78:28:31:75:85:dd:75:e5:74:b2: 26:8e:fe:25:47:3d:e3:ba:ab:9d:c0:ca:bf:1e:fe: 9d:41:48:f8:ea:e6:55:81:cd:4d:bb:75:e1:c6:b6: a3:e0:d4:96:61:b9:ad:95:c5:39:5b:1b:be:14:cc: 80:12:f7:b0:5d:ec:1a:03:bc:9e:51:3b:b5:c5:9e: 7a:72:5b:43:da:c4:2d:7a:26:6a:6a:94:d7:a5:5a: d9:f4:db:73:01:95:34:b1:84:cb:96:d4:b0:de:25: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:54:8C:5C:CB:31:BF:D1:6E:00:A0:BC:D1:88:C7:86:EA:C2:29:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/930ae2b9-d7f2-3c67-9754-48f4e6339637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl X509v3 Authority Key Identifier: keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer sbgp-ipAddrBlock: critical IPv4: 192.135.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:8f:a8:2e:38:97:ef:a6:f9:e4:cb:b1:5a:b0:31:aa:98:8a: 71:0c:ac:94:4f:fc:2e:f1:fe:77:c8:3e:ce:c5:2e:39:ac:18: 01:9b:34:de:0c:51:7e:be:cf:61:e8:c4:cf:39:ad:97:5a:57: 0d:f7:f4:2b:2f:aa:e7:59:54:36:68:0a:5f:08:0d:db:e5:2a: 62:27:cf:bc:b5:8e:95:0d:bb:02:8c:ab:c8:48:9e:a4:70:56: 4a:51:f4:ac:93:3e:14:f7:80:03:5a:e5:d3:c6:80:bf:0f:c4: ce:3a:b5:69:f5:f9:ba:05:31:98:6f:c2:f2:3c:8e:30:7e:e2: bf:62:7a:1f:56:b4:5e:b2:98:46:13:00:54:4f:7c:78:52:d7: 3c:91:ee:2e:6a:2a:8d:f6:ba:11:99:a7:bd:a1:b2:3c:1b:72: 58:fe:15:c8:6e:d2:9e:eb:65:bc:86:04:93:96:b1:96:05:38: 93:3e:80:4d:d2:01:33:13:4e:d4:c1:34:57:f6:d6:4b:87:9d: 96:17:ac:7c:11:35:46:59:8e:9a:8b:d6:20:c4:bc:e4:5d:37: 0d:3b:bd:67:80:ac:77:99:61:fc:97:a4:d8:c2:39:e6:29:08: 1c:87:42:85:c8:a3:ce:18:ae:19:74:b0:22:d5:51:2e:22:bc: 83:90:48:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJawjl6vlaUkNaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MWZkN2QtMzdkNy00ZGE2LThkZTgtN2QzNDZlMDAw NmFhMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk MzU3ODVlNDQtYjM2OC00OGExLTlkYjQtMTQyYjc5ZjRjZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgo1J5YMLFR679f1y7skNnDiaJP3IMk/A3+3 ZKbOJ+zhRCJWoZZWYR8UDPHBDX9hH8oQFDzvBbrJqDc70luqFslDAUR2pt9oOpus GqLw2e85/6FaeS+lMCmAsbtT83cX0Q6ySiRKP2ZmDdJ2dassCB5eY21gnUlyQb+o zomgOAHjo5dnCDbDFITO7ljJVPwSgVlxyCfMJDkO7XgoMXWF3XXldLImjv4lRz3j uqudwMq/Hv6dQUj46uZVgc1Nu3Xhxraj4NSWYbmtlcU5Wxu+FMyAEvewXewaA7ye UTu1xZ56cltD2sQteiZqapTXpVrZ9NtzAZU0sYTLltSw3iVFjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRUjFzLMb/RbgCgvNGIx4bqwiklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUx ZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0NmUwMDA2YWEvOTMwYWUyYjktZDdmMi0z YzY3LTk3NTQtNDhmNGU2MzM5NjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGU1MWZkN2QtMzdkNy00ZGE2LThk ZTgtN2QzNDZlMDAwNmFhL2RlNTFmZDdkLTM3ZDctNGRhNi04ZGU4LTdkMzQ2ZTAw MDZhYS5jcmwwHwYDVR0jBBgwFoAUHYsjQJQ4f91apjmhU9JAQqG/3KMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUxZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0 NmUwMDA2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIdBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGPqC44l++m+eTLsVqwMaqYinEMrJRP/C7x/nfIPs7FLjmsGAGbNN4M UX6+z2HoxM85rZdaVw339CsvqudZVDZoCl8IDdvlKmInz7y1jpUNuwKMq8hInqRw VkpR9KyTPhT3gANa5dPGgL8PxM46tWn1+boFMZhvwvI8jjB+4r9ieh9WtF6ymEYT AFRPfHhS1zyR7i5qKo32uhGZp72hsjwbclj+Fchu0p7rZbyGBJOWsZYFOJM+gE3S ATMTTtTBNFf21kuHnZYXrHwRNUZZjpqL1iDEvORdNw07vWeArHeZYfyXpNjCOeYp CByHQoXIo84Yrhl0sCLVUS4ivIOQSOI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:40 2025 by rpki-client