$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa File: 31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa (raw, json) Hash identifier: LC7P7uRfvVnrD6AHDbjxuhAd6ve+/BDFtaYnbbnItpM= Subject key identifier: 8F:07:8B:DE:1B:36:BD:0D:A6:51:9B:74:A4:C3:C8:85:E7:10:82:BA Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F43285849CBCF961A10891808F0A7D300 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:96:1a:10:89:18:08:f0:a7:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=24371321-cdc0-467e-8d47-f138d30595b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:90:11:03:a2:9d:95:65:0f:c7:25:ac:0b: 2b:97:47:13:e1:65:2e:11:ed:2b:88:73:e2:81:9c: 7c:8e:f7:26:08:aa:e8:a4:ec:02:ee:98:f3:93:41: 2a:a8:2e:11:6b:54:8c:d8:62:34:23:56:58:87:bb: fc:6e:a7:9d:7f:6d:ac:78:b9:67:4a:13:b3:a3:cb: 15:36:1f:3c:6e:5e:b4:a7:73:17:98:5d:5d:17:5d: 71:c1:83:3d:14:f2:e4:c9:01:40:83:3c:62:7a:ac: 82:9b:12:5e:dc:de:9e:f9:06:35:75:11:75:4b:7c: 46:28:0c:61:8c:2c:d9:ad:8d:a6:23:d5:54:d8:ae: 5b:d7:62:2c:aa:e0:fe:b0:14:14:bb:63:12:15:92: 58:db:4c:56:f2:a1:99:b6:03:4c:75:75:cc:ae:62: 47:8a:e1:dc:2f:40:dc:00:eb:50:10:d9:56:75:7a: 6f:b6:b9:e1:fe:62:88:04:ca:7f:d4:7f:28:28:7f: c1:39:b6:21:a4:77:2b:22:f2:24:02:e3:47:a2:12: 51:30:3a:90:51:cb:5a:f6:5f:93:b9:02:0f:49:27: 1a:85:de:36:d5:d2:19:21:c4:31:1e:02:23:ca:db: 7b:38:c8:f7:1b:8e:4b:c2:27:e2:65:3a:2d:42:26: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:07:8B:DE:1B:36:BD:0D:A6:51:9B:74:A4:C3:C8:85:E7:10:82:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3e:83:0d:2a:47:b9:1f:3f:7b:e0:44:b6:0e:0d:3f:50:d5: 3c:52:ee:0b:b5:99:ec:cc:ae:0d:8e:8b:86:74:12:bc:e7:86: eb:06:b1:65:ce:2d:51:c8:5a:84:60:20:50:44:bb:b3:f3:d9: d4:2a:1a:ff:f0:d8:e3:5f:aa:bb:75:5e:b9:ad:ec:44:92:b9: cf:1a:e1:5c:72:b6:62:ce:a7:14:18:d9:43:2f:06:16:e3:15: 29:fc:ab:03:f3:a2:92:76:93:16:a5:f1:8b:41:6e:61:dc:4a: 05:21:21:50:39:6b:49:15:d5:51:78:6e:c4:21:92:59:54:fc: a3:64:23:c2:97:09:c0:28:63:76:d7:c2:1c:68:26:23:c3:f5: 1e:25:a8:51:d5:62:88:92:59:39:fc:02:6e:dd:61:99:53:a8: ef:f3:e4:dd:11:9d:cd:1a:11:ed:ea:4e:34:91:3d:7a:7c:43: 27:ff:47:ab:33:31:ed:c5:44:c5:90:f8:b6:3f:a1:c5:27:50: 78:ff:59:c6:b7:dd:3b:23:ba:a8:4a:28:8b:fa:fe:da:75:5c: fd:24:72:d1:d4:15:81:be:4a:7b:04:2f:53:d1:4f:45:a0:d0: 3a:5c:34:1c:4e:75:5a:0a:2a:f8:ec:95:1d:cb:32:78:92:8d: 54:e4:63:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5YaEIkYCPCn0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MjQzNzEzMjEtY2RjMC00NjdlLThkNDctZjEzOGQzMDU5NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglWQEQOinZVlD8clrAsrl0cT4WUuEe0riHPi gZx8jvcmCKropOwC7pjzk0EqqC4Ra1SM2GI0I1ZYh7v8bqedf22seLlnShOzo8sV Nh88bl60p3MXmF1dF11xwYM9FPLkyQFAgzxieqyCmxJe3N6e+QY1dRF1S3xGKAxh jCzZrY2mI9VU2K5b12IsquD+sBQUu2MSFZJY20xW8qGZtgNMdXXMrmJHiuHcL0Dc AOtQENlWdXpvtrnh/mKIBMp/1H8oKH/BObYhpHcrIvIkAuNHohJRMDqQUcta9l+T uQIPSScahd421dIZIcQxHgIjytt7OMj3G45LwifiZTotQibXOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8Hi94bNr0NplGbdKTDyIXnEIK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMzFjMmI5N2MtYmM5ZC0z OTNlLTgzZTAtZmQwM2ZmYTMxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ+gw0qR7kfP3vgRLYODT9Q1TxS7gu1mezMrg2Oi4Z0ErznhusGsWXO LVHIWoRgIFBEu7Pz2dQqGv/w2ONfqrt1Xrmt7ESSuc8a4VxytmLOpxQY2UMvBhbj FSn8qwPzopJ2kxal8YtBbmHcSgUhIVA5a0kV1VF4bsQhkllU/KNkI8KXCcAoY3bX whxoJiPD9R4lqFHVYoiSWTn8Am7dYZlTqO/z5N0Rnc0aEe3qTjSRPXp8Qyf/R6sz Me3FRMWQ+LY/ocUnUHj/Wca33TsjuqhKKIv6/tp1XP0kctHUFYG+SnsEL1PRT0Wg 0DpcNBxOdVoKKvjslR3LMniSjVTkY6Y= -----END CERTIFICATE-----Generated at Sat Jun 14 23:48:44 2025 by rpki-client