$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa File: bb2c05d6-4109-3127-b081-aba78a6a6412.roa (raw, json) Hash identifier: BjzIqnQTbbe6SrPwTn4/cCgo3GA1uS3KdBXDXyMTL8A= Subject key identifier: 5A:88:DF:B2:5C:B7:F5:01:BA:A9:BE:3C:0B:22:D4:1B:A5:D4:A2:CF Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F432858493243D514037A767553D89C80 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 398395 IP address blocks: 134.195.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:d5:14:03:7a:76:75:53:d8:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=8bad3d7a-dfb2-4ce0-9c58-f27508ea3c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:8c:46:14:70:78:eb:aa:b6:57:93:4b:95: 9a:f4:cc:8e:0d:f0:e6:4f:45:33:6b:ad:6e:b6:6e: fa:32:76:69:49:a9:9c:f8:d3:36:d8:38:81:ce:d9: 7e:d6:bc:83:26:eb:87:f1:4e:df:83:f0:d2:5a:17: f1:f8:07:d3:ad:1f:d6:28:3f:83:7b:5c:f0:f9:63: 23:51:35:27:d4:ae:c1:75:e4:6e:89:e4:d2:d8:c3: 1a:0b:12:cc:1b:e0:22:8a:ec:da:9b:8b:8f:ca:b2: 98:36:0b:71:23:05:f0:b5:3c:4c:e1:6a:e2:0f:97: b3:e4:2d:22:20:66:08:a7:51:86:b5:26:6b:89:b6: e6:6f:6e:cd:c9:0f:4c:1b:01:66:24:75:89:5d:35: 75:16:95:eb:bb:9a:3d:3e:11:bc:42:df:ac:e5:3a: 97:07:30:9e:69:9d:2a:b6:5a:25:e5:c6:d1:c0:4b: 69:cf:80:b3:81:bc:e6:02:6c:0f:40:8a:b0:a4:1e: 32:65:df:c8:c9:2f:2a:cd:6c:46:b1:6e:d8:e6:01: 1d:9c:f3:a6:e3:5c:44:c3:c5:8f:d1:bf:0e:3a:c7: 1d:61:14:95:a4:fa:3f:58:51:8d:d9:f2:56:7d:49: f1:2d:e5:53:b0:5d:af:c1:3d:b7:57:01:f3:ab:69: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:88:DF:B2:5C:B7:F5:01:BA:A9:BE:3C:0B:22:D4:1B:A5:D4:A2:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 134.195.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3c:96:48:47:72:e3:07:8c:fb:6b:6f:58:04:88:54:07:f4: 18:90:f2:69:45:5c:f1:cc:ce:92:a7:58:f4:e2:f0:36:33:95: 23:cb:6e:97:ba:5b:05:2c:96:62:20:07:05:2c:56:f9:93:97: b4:12:2e:2f:a5:91:df:c8:76:78:dd:37:14:45:cc:ff:18:0f: f0:bb:8a:bd:81:33:83:ee:c0:08:19:b0:2d:c9:dd:6d:4c:93: ed:3f:54:e1:f8:ff:0a:83:27:20:6f:07:60:dd:19:77:00:fc: a2:15:4f:88:e6:4f:a7:5a:a5:5c:da:69:55:60:43:82:33:3a: 1f:71:c7:1b:82:5a:06:21:f8:8b:72:ef:48:fc:56:77:43:4c: 07:e6:d2:fc:20:86:b1:4f:cf:76:8b:22:88:bc:63:78:75:40: 74:07:3c:aa:c3:09:37:05:eb:ce:a2:e1:18:d4:d4:2c:cd:00: 5f:83:8d:f5:a2:64:e7:ee:dd:f8:fc:41:69:7d:e3:06:09:95: 83:04:5d:9a:a8:0b:79:3b:17:0b:b8:2c:0b:c6:e2:66:9c:9d: 2c:67:08:05:b0:b1:20:05:d3:07:82:01:1b:d6:fa:2f:30:e2: 5a:13:8b:d6:ac:9d:0c:33:74:a5:e5:57:d1:09:a8:01:ab:2c: f6:1b:ba:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9UUA3p2dVPYnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk OGJhZDNkN2EtZGZiMi00Y2UwLTljNTgtZjI3NTA4ZWEzYzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhaMRhRweOuqtleTS5Wa9MyODfDmT0Uza61u tm76MnZpSamc+NM22DiBztl+1ryDJuuH8U7fg/DSWhfx+AfTrR/WKD+De1zw+WMj UTUn1K7BdeRuieTS2MMaCxLMG+Aiiuzam4uPyrKYNgtxIwXwtTxM4WriD5ez5C0i IGYIp1GGtSZribbmb27NyQ9MGwFmJHWJXTV1FpXru5o9PhG8Qt+s5TqXBzCeaZ0q tlol5cbRwEtpz4CzgbzmAmwPQIqwpB4yZd/IyS8qzWxGsW7Y5gEdnPOm41xEw8WP 0b8OOscdYRSVpPo/WFGN2fJWfUnxLeVTsF2vwT23VwHzq2nKZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqI37Jct/UBuqm+PAsi1Bul1KLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvYmIyYzA1ZDYtNDEwOS0z MTI3LWIwODEtYWJhNzhhNmE2NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw8lkhHcuMHjPtrb1gEiFQH9BiQ8mlFXPHMzpKnWPTi8DYzlSPLbpe6 WwUslmIgBwUsVvmTl7QSLi+lkd/IdnjdNxRFzP8YD/C7ir2BM4PuwAgZsC3J3W1M k+0/VOH4/wqDJyBvB2DdGXcA/KIVT4jmT6dapVzaaVVgQ4IzOh9xxxuCWgYh+Ity 70j8VndDTAfm0vwghrFPz3aLIoi8Y3h1QHQHPKrDCTcF686i4RjU1CzNAF+DjfWi ZOfu3fj8QWl94wYJlYMEXZqoC3k7Fwu4LAvG4macnSxnCAWwsSAF0weCARvW+i8w 4loTi9asnQwzdKXlV9EJqAGrLPYbuos= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:13 2025 by rpki-client