$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa File: ffadfc08-ef44-3134-a107-fa470ddc4033.roa (raw, json) Hash identifier: ecZcwwxIzhusvbTH6eu77yBSMvQxyWulXGYbOd+zVXQ= Subject key identifier: 3F:E8:63:0D:49:61:F7:77:F6:51:9D:F4:0A:1B:14:48:70:26:FD:15 Certificate issuer: /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Certificate serial: 010D0C9F432858487325B06A102B5F711A16F980 Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 14618 IP address blocks: 192.135.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:b0:6a:10:2b:5f:71:1a:16:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=325d8868-8b2f-4d17-954f-c27f98c92f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:f5:e4:59:c8:9b:78:40:f0:07:48:72:cf: 3b:62:d8:e8:41:64:ec:81:c9:9e:73:71:b7:f0:2a: f8:6a:68:d1:cf:4a:6d:21:83:29:23:9b:d6:96:47: 44:0d:b5:be:e2:dc:77:81:28:e4:cd:e5:08:4d:ab: 4b:9e:ce:2b:c1:ed:66:6e:c7:d4:9a:82:41:52:f0: 13:cd:9d:bc:09:2f:7f:68:27:58:49:26:f9:c0:0a: ec:1f:48:36:87:ea:fe:93:d7:27:55:7d:a5:77:14: 4f:ef:51:3d:eb:55:43:e3:49:25:90:57:26:52:0d: 99:ee:bd:c0:44:c3:5f:d9:85:a1:a8:ef:31:a5:c6: 41:9f:a0:42:2a:6e:d8:e0:34:73:82:b3:1a:91:93: ac:69:74:0a:2a:cf:1b:26:10:de:e5:0e:ba:57:83: 83:26:fb:6c:da:0e:17:cb:1c:ea:80:21:3c:18:bd: 4d:01:94:8c:f5:65:1b:50:df:b0:45:83:db:0a:84: 61:63:29:b1:f8:6a:81:51:84:d0:3c:46:5b:77:30: eb:cf:96:b7:4f:8d:95:f1:21:44:ec:0b:0c:93:94: e5:0a:0f:cc:64:a8:5b:80:1a:9b:d0:30:f1:3a:c6: 33:c6:11:3d:f4:5e:bc:49:7c:27:2a:4b:e4:e6:9f: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E8:63:0D:49:61:F7:77:F6:51:9D:F4:0A:1B:14:48:70:26:FD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl X509v3 Authority Key Identifier: keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer sbgp-ipAddrBlock: critical IPv4: 192.135.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:56:ca:a2:41:4f:9f:63:00:79:03:0a:fb:5f:25:bd:17:7a: 66:c4:45:84:68:65:e4:9e:57:61:95:16:e3:e1:e2:b1:ed:36: 3a:7f:c7:9a:20:b2:62:60:c1:a0:9b:7e:24:8d:e9:46:4b:dd: a3:ea:43:69:de:3c:2e:d3:7d:cb:3c:c2:8d:84:77:22:f7:dd: 8e:d7:2c:59:49:ef:60:1b:5c:a0:90:69:d4:fe:2a:9a:f7:d4: ed:85:8d:0b:f1:c3:52:c6:57:80:1d:90:b3:e6:35:17:72:19: 3d:10:1e:fb:7f:96:82:f1:70:a3:6b:ee:96:d4:1b:6c:ad:72: 6c:e1:bd:a3:90:73:b4:e1:cf:da:a7:ee:ad:c0:f1:7d:a8:6b: f0:b0:d4:dd:f1:79:0d:82:f3:dc:75:f5:b8:c0:d1:a7:a4:0b: 25:b7:0b:0f:8f:7b:4a:5e:21:e7:b2:a4:8a:da:16:7c:0c:04: 79:73:f7:30:e4:2d:5f:de:f5:cd:54:56:6a:3a:36:e7:96:c4: 5d:3e:4b:0b:7a:ee:5d:0c:38:b0:b2:82:63:26:c6:92:e8:04: 1b:f8:3f:2b:d3:ac:15:1b:18:6d:f5:48:cd:cf:ac:89:71:fb: 58:32:7a:fe:1f:c2:c0:91:92:54:5c:da:0a:70:72:72:cd:5f: 77:99:c8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbBqECtfcRoW+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MWZkN2QtMzdkNy00ZGE2LThkZTgtN2QzNDZlMDAw NmFhMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk MzI1ZDg4NjgtOGIyZi00ZDE3LTk1NGYtYzI3Zjk4YzkyZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNX15FnIm3hA8AdIcs87YtjoQWTsgcmec3G3 8Cr4amjRz0ptIYMpI5vWlkdEDbW+4tx3gSjkzeUITatLns4rwe1mbsfUmoJBUvAT zZ28CS9/aCdYSSb5wArsH0g2h+r+k9cnVX2ldxRP71E961VD40klkFcmUg2Z7r3A RMNf2YWhqO8xpcZBn6BCKm7Y4DRzgrMakZOsaXQKKs8bJhDe5Q66V4ODJvts2g4X yxzqgCE8GL1NAZSM9WUbUN+wRYPbCoRhYymx+GqBUYTQPEZbdzDrz5a3T42V8SFE 7AsMk5TlCg/MZKhbgBqb0DDxOsYzxhE99F68SXwnKkvk5p8uQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/oYw1JYfd39lGd9AobFEhwJv0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUx ZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0NmUwMDA2YWEvZmZhZGZjMDgtZWY0NC0z MTM0LWExMDctZmE0NzBkZGM0MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGU1MWZkN2QtMzdkNy00ZGE2LThk ZTgtN2QzNDZlMDAwNmFhL2RlNTFmZDdkLTM3ZDctNGRhNi04ZGU4LTdkMzQ2ZTAw MDZhYS5jcmwwHwYDVR0jBBgwFoAUHYsjQJQ4f91apjmhU9JAQqG/3KMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUxZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0 NmUwMDA2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElWyqJBT59jAHkDCvtfJb0XembERYRoZeSeV2GVFuPh4rHtNjp/x5og smJgwaCbfiSN6UZL3aPqQ2nePC7Tfcs8wo2EdyL33Y7XLFlJ72AbXKCQadT+Kpr3 1O2FjQvxw1LGV4AdkLPmNRdyGT0QHvt/loLxcKNr7pbUG2ytcmzhvaOQc7Thz9qn 7q3A8X2oa/Cw1N3xeQ2C89x19bjA0aekCyW3Cw+Pe0peIeeypIraFnwMBHlz9zDk LV/e9c1UVmo6NueWxF0+Swt67l0MOLCygmMmxpLoBBv4PyvTrBUbGG31SM3PrIlx +1gyev4fwsCRklRc2gpwcnLNX3eZyKM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:03 2025 by rpki-client