$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa File: 1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json) Hash identifier: a49lT7pV8p3G0WuiP0leyHACzoLURtyPz0ezOeGkIfo= Subject key identifier: EE:CD:FA:83:C8:A0:9D:12:89:38:DB:D2:59:B6:A5:DB:B8:78:3D:B5 Certificate issuer: /CN=135a25e4-6a94-45c6-b694-2d6e8256166a Certificate serial: 010D0C9F43285848DEA118FAA66F7EA670FD4D20 Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 7448 IP address blocks: 143.192.0.0/18 maxlen: 24 143.192.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:18:fa:a6:6f:7e:a6:70:fd:4d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=2b9a79fa-6b5f-4adb-88c7-53c0673dc240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:42:78:27:6a:93:5c:0a:60:f0:82:db:a6: ec:8a:f4:f7:66:9f:f7:30:9d:1a:90:56:28:e1:87: f0:48:38:74:a2:d8:4b:86:6c:5c:72:a5:10:b6:ef: ca:2e:96:75:33:bd:f8:42:08:0b:2d:e2:fc:57:c3: 06:83:cc:f4:9a:b6:56:53:45:49:1d:f7:6f:b5:58: 1a:97:95:b2:95:32:ae:8f:05:34:5f:00:d0:f0:d6: c1:c3:d2:c1:5c:35:08:8d:42:7c:d0:65:5a:d5:59: cd:ac:6b:db:6b:b4:a7:77:7a:d2:e8:2d:66:c6:a3: e9:d3:bd:7e:ab:ae:5f:5d:84:f8:b0:71:d7:ae:41: 0b:37:31:4f:51:64:5b:c7:46:70:c2:dd:dd:36:2c: e1:f5:80:a4:f3:d8:b2:b7:1e:9c:66:9c:94:7c:e7: 6a:44:7a:fc:9f:b1:8e:fa:98:ba:5e:b8:e7:9e:60: 95:4c:63:ff:9c:22:a7:23:f9:2e:c0:65:c4:cf:f7: 72:ac:86:4a:b7:55:57:d4:29:b0:52:86:67:f8:5b: 3a:ae:b4:84:68:48:dd:67:b6:40:70:01:0d:e1:48: 00:0b:0f:5d:a1:7e:f9:da:a4:62:c1:30:3a:33:ae: c6:7e:5c:5d:1e:d0:6d:96:f8:7f:af:77:e4:2a:4b: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CD:FA:83:C8:A0:9D:12:89:38:DB:D2:59:B6:A5:DB:B8:78:3D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl X509v3 Authority Key Identifier: keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer sbgp-ipAddrBlock: critical IPv4: 143.192.0.0-143.192.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ad:9b:a2:3b:a7:4b:9b:e6:15:a1:04:9c:88:bb:ac:51:2d: 26:c4:35:e2:0d:3f:19:8b:b0:fa:3b:c8:35:a2:b0:c4:a0:c3: cf:7b:af:8c:67:d6:39:6b:fe:8b:c9:35:65:2e:ef:56:34:f0: 8e:dd:b3:3c:48:c6:48:8b:9b:54:c6:e6:49:9c:eb:8d:fd:26: d9:30:1f:29:ea:e0:c9:dc:2d:1d:ad:2c:56:97:7c:fb:19:58: 41:7c:7c:bb:97:77:70:2f:de:4b:32:3d:2a:1f:8c:d4:3f:0e: 6d:f3:41:22:9c:d4:06:99:90:17:f6:a1:9f:a0:2e:ca:3b:48: 8f:a3:1d:33:df:bb:6d:4b:18:b3:91:48:a0:18:16:86:c8:46: b0:b9:8d:56:9d:6f:1e:4f:0c:4d:63:db:1e:d6:11:ca:5a:8a: a1:ff:7a:88:30:20:6a:b0:c9:58:53:d6:43:a2:e2:61:df:7f: 63:4a:e9:9d:c1:f0:05:b6:70:bf:3a:31:e2:99:38:e3:5a:89: 27:c7:07:4b:ef:88:64:e9:d2:5f:54:e1:3b:09:e8:eb:ae:b4: db:75:65:59:79:18:d3:32:fe:84:8d:cc:6d:12:5e:04:cb:82: 68:4c:09:cc:66:fe:d9:20:b4:a6:fc:c0:17:ab:6e:09:96:06: 2f:34:d2:be -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEjeoRj6pm9+pnD9TSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM1YTI1ZTQtNmE5NC00NWM2LWI2OTQtMmQ2ZTgyNTYx NjZhMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MmI5YTc5ZmEtNmI1Zi00YWRiLTg4YzctNTNjMDY3M2RjMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5xCeCdqk1wKYPCC26bsivT3Zp/3MJ0akFYo 4YfwSDh0othLhmxccqUQtu/KLpZ1M734QggLLeL8V8MGg8z0mrZWU0VJHfdvtVga l5WylTKujwU0XwDQ8NbBw9LBXDUIjUJ80GVa1VnNrGvba7Snd3rS6C1mxqPp071+ q65fXYT4sHHXrkELNzFPUWRbx0Zwwt3dNizh9YCk89iytx6cZpyUfOdqRHr8n7GO +pi6XrjnnmCVTGP/nCKnI/kuwGXEz/dyrIZKt1VX1CmwUoZn+Fs6rrSEaEjdZ7ZA cAEN4UgACw9doX752qRiwTA6M67GflxdHtBtlvh/r3fkKkvw0wIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFO7N+oPIoJ0SiTjb0lm2pdu4eD21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMzVh MjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZlODI1NjE2NmEvMWFhM2YxYWItY2M3OC0z NmI0LWI4OTAtNTUyZWMyZDRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTM1YTI1ZTQtNmE5NC00NWM2LWI2 OTQtMmQ2ZTgyNTYxNjZhLzEzNWEyNWU0LTZhOTQtNDVjNi1iNjk0LTJkNmU4MjU2 MTY2YS5jcmwwHwYDVR0jBBgwFoAU3z6ArD0AzzQWeNXZQvPiHb3A8b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMzVhMjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZl ODI1NjE2NmEuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwaPwAME BY/AQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAPrZuiO6dLm+YVoQSciLusUS0mxDXiDT8Zi7D6O8g1orDE oMPPe6+MZ9Y5a/6LyTVlLu9WNPCO3bM8SMZIi5tUxuZJnOuN/SbZMB8p6uDJ3C0d rSxWl3z7GVhBfHy7l3dwL95LMj0qH4zUPw5t80EinNQGmZAX9qGfoC7KO0iPox0z 37ttSxizkUigGBaGyEawuY1WnW8eTwxNY9se1hHKWoqh/3qIMCBqsMlYU9ZDouJh 339jSumdwfAFtnC/OjHimTjjWoknxwdL74hk6dJfVOE7CejrrrTbdWVZeRjTMv6E jcxtEl4Ey4JoTAnMZv7ZILSm/MAXq24JlgYvNNK+ -----END CERTIFICATE-----Generated at Mon Apr 28 01:59:26 2025 by rpki-client