$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/e23dc04a-b46a-3d80-b52a-c19f01de72b5.roa File: e23dc04a-b46a-3d80-b52a-c19f01de72b5.roa (raw, json) Hash identifier: 0o8V5S1joIxz1thVJpcko7ZVMxh2t+3FQmdtAEH6rAo= Subject key identifier: F9:31:EE:A3:FC:DC:04:5F:90:B8:81:EB:48:55:66:3E:42:39:0A:6F Certificate issuer: /CN=45c66754-6161-4548-b519-3f3f38d6030b Certificate serial: 010D0C9F43285848FD56A0A8D0426E1D08CA4D00 Authority key identifier: 73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/e23dc04a-b46a-3d80-b52a-c19f01de72b5.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 136.175.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a0:a8:d0:42:6e:1d:08:ca:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c66754-6161-4548-b519-3f3f38d6030b Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=e76f2013-626f-45d0-bc83-0d6d383ca17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:ac:cb:46:aa:69:41:bf:03:fd:97:5f:d0: 60:2a:69:a1:d9:50:e3:66:80:2c:1e:e2:ae:d1:a7: 0f:95:2a:6e:6b:1f:20:40:a7:6a:07:8d:47:83:6c: 1f:cb:62:aa:91:7a:98:41:f1:25:1b:3e:91:9c:0e: 6b:57:7a:92:9a:b3:5c:7a:08:d2:7a:2c:6b:d7:87: 36:af:e6:91:0e:da:b9:c4:a5:c0:30:b8:40:53:2e: 08:ca:36:80:62:4b:85:9d:96:c7:90:60:83:d3:db: 77:f3:b4:b4:5d:c3:15:66:2b:0c:bf:f5:45:3a:c1: b9:9b:49:3a:7f:b6:5c:87:7f:7a:86:8f:1f:16:b3: a4:ae:7c:5f:c1:5e:71:e8:a6:48:43:08:a1:0d:09: c0:13:9a:2f:8b:77:74:e0:48:95:67:5e:a6:42:41: 44:2f:11:40:9d:51:cf:ff:a7:45:39:73:82:1f:33: f1:cf:73:fe:07:5e:60:e5:2e:64:58:ba:d1:96:25: 80:94:e0:76:19:a6:84:8f:9e:f6:ac:c5:2c:15:ec: 68:be:61:54:bc:40:20:59:90:b9:df:2b:4a:ff:0d: fc:8c:fc:e4:59:8e:fc:03:10:ba:19:3e:5b:3c:a1: d0:fc:ad:40:3b:6a:c4:fc:e1:2d:88:b0:e2:39:e9: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:EE:A3:FC:DC:04:5F:90:B8:81:EB:48:55:66:3E:42:39:0A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/e23dc04a-b46a-3d80-b52a-c19f01de72b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.crl X509v3 Authority Key Identifier: keyid:73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer sbgp-ipAddrBlock: critical IPv4: 136.175.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:79:20:78:f8:3c:2e:3b:54:35:d7:97:60:27:29:70:e4:a0: 68:a8:1b:e8:9a:ad:94:e7:4c:7a:91:5e:8b:32:5c:d3:a9:3b: 10:99:cd:37:90:00:b1:c5:2c:65:6f:76:79:a2:fb:af:c1:ac: 8b:1a:3d:79:68:5e:0f:8d:4c:82:1d:6b:b3:97:03:60:57:12: 55:89:c2:10:d1:d2:33:0b:d3:29:d6:43:92:c1:ee:1f:84:28: 90:da:fc:29:ad:db:f9:7d:7a:79:16:e9:df:0c:2c:22:b5:db: 06:1d:ce:f7:30:02:53:f8:78:9d:71:0b:20:c1:6b:23:a9:ea: 34:8e:9c:c7:7b:af:3b:a2:5c:82:b4:e9:36:f6:d9:3c:d0:53: de:c0:99:47:d3:8b:b8:f0:f0:8e:54:28:fb:11:a2:38:be:72: 4f:11:51:99:10:b5:64:0d:92:aa:77:96:50:82:55:f7:4f:7f: d4:ef:49:87:22:06:fd:27:d5:49:5e:60:2a:79:84:ab:f9:44: 8e:45:88:3b:b5:af:8c:cd:8c:29:40:04:ae:a6:e0:02:e5:57: 55:d7:e2:83:c9:a4:92:0c:58:91:ae:7f:9a:46:13:5e:ec:6e: 4a:f2:b9:ee:b8:c8:a8:d6:f4:4b:31:f5:7e:86:82:76:fb:6a: 46:d6:29:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VqCo0EJuHQjKTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVjNjY3NTQtNjE2MS00NTQ4LWI1MTktM2YzZjM4ZDYw MzBiMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTc2ZjIwMTMtNjI2Zi00NWQwLWJjODMtMGQ2ZDM4M2NhMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN2sy0aqaUG/A/2XX9BgKmmh2VDjZoAsHuKu 0acPlSpuax8gQKdqB41Hg2wfy2KqkXqYQfElGz6RnA5rV3qSmrNcegjSeixr14c2 r+aRDtq5xKXAMLhAUy4IyjaAYkuFnZbHkGCD09t387S0XcMVZisMv/VFOsG5m0k6 f7Zch396ho8fFrOkrnxfwV5x6KZIQwihDQnAE5ovi3d04EiVZ16mQkFELxFAnVHP /6dFOXOCHzPxz3P+B15g5S5kWLrRliWAlOB2GaaEj572rMUsFexovmFUvEAgWZC5 3ytK/w38jPzkWY78AxC6GT5bPKHQ/K1AO2rE/OEtiLDiOekdZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkx7qP83ARfkLiB60hVZj5COQpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NWM2 Njc1NC02MTYxLTQ1NDgtYjUxOS0zZjNmMzhkNjAzMGIvZTIzZGMwNGEtYjQ2YS0z ZDgwLWI1MmEtYzE5ZjAxZGU3MmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDVjNjY3NTQtNjE2MS00NTQ4LWI1 MTktM2YzZjM4ZDYwMzBiLzQ1YzY2NzU0LTYxNjEtNDU0OC1iNTE5LTNmM2YzOGQ2 MDMwYi5jcmwwHwYDVR0jBBgwFoAUc0riH1wor46Rmg05fvQhlDU8OBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NWM2Njc1NC02MTYxLTQ1NDgtYjUxOS0zZjNm MzhkNjAzMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh5IHj4PC47VDXXl2AnKXDkoGioG+iarZTnTHqRXosyXNOpOxCZzTeQ ALHFLGVvdnmi+6/BrIsaPXloXg+NTIIda7OXA2BXElWJwhDR0jML0ynWQ5LB7h+E KJDa/Cmt2/l9enkW6d8MLCK12wYdzvcwAlP4eJ1xCyDBayOp6jSOnMd7rzuiXIK0 6Tb22TzQU97AmUfTi7jw8I5UKPsRoji+ck8RUZkQtWQNkqp3llCCVfdPf9TvSYci Bv0n1UleYCp5hKv5RI5FiDu1r4zNjClABK6m4ALlV1XX4oPJpJIMWJGuf5pGE17s bkryue64yKjW9Esx9X6Ggnb7akbWKdg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:39 2025 by rpki-client