$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa File: ffadfc08-ef44-3134-a107-fa470ddc4033.roa (raw, json) Hash identifier: 5o0oneuKJtnBofmWamNk2pv9ViNbbXNdRG/mPuwTUdM= Subject key identifier: 44:3F:87:F8:B6:DD:8A:C1:21:21:FF:FA:E2:86:2D:46:90:F2:A1:52 Certificate issuer: /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Certificate serial: 010D0C9F4328584953C40F73A04210A79121E880 Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 192.135.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:0f:73:a0:42:10:a7:91:21:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=b239e064-cc1f-4d87-befd-ab22c3428aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:17:62:97:53:3d:a8:87:6d:bc:c4:14:d4:2f: 24:42:9a:e0:64:74:9a:ac:32:38:ad:df:2e:aa:1c: 99:53:16:b1:40:36:6c:99:c4:31:ba:0b:81:96:5a: ca:f7:1b:97:8e:3a:b8:6a:0f:45:1f:47:26:82:31: 25:d8:a1:89:fa:4d:e8:59:c1:3f:b9:c6:19:b3:dd: 8d:2e:eb:73:e6:fd:35:94:20:9b:10:01:6f:1b:53: 56:b8:69:c3:4f:69:72:82:50:7e:ee:35:39:c1:a2: 65:06:21:cf:bb:16:86:a4:3a:48:23:6f:df:d6:28: 8d:8b:d2:a6:aa:6c:78:a6:cb:ae:35:64:7b:1a:fd: 5c:5b:df:f3:9b:83:e2:99:88:3d:69:cd:89:b5:52: 80:8f:94:16:6b:21:06:06:fa:c8:9c:6f:71:fe:3a: 9f:bf:06:0d:b8:65:e5:fd:63:54:8a:a9:27:f0:e0: ae:b5:bd:21:db:2d:2c:c9:ec:cc:74:bd:26:a1:4d: 14:be:03:72:69:ca:57:a6:9a:5e:d3:49:9e:82:c3: e4:77:e5:84:20:56:1d:eb:e0:58:6c:d8:48:cc:0a: d5:d7:9d:22:33:d6:b6:da:49:c7:0b:9b:d1:bc:4d: 1b:87:6a:45:0b:f0:47:56:e7:4e:d6:13:80:6b:63: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:87:F8:B6:DD:8A:C1:21:21:FF:FA:E2:86:2D:46:90:F2:A1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl X509v3 Authority Key Identifier: keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer sbgp-ipAddrBlock: critical IPv4: 192.135.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:48:0e:6e:73:7f:11:bd:65:07:8c:a5:de:c2:ad:9c:0a:f8: 7a:c8:e3:49:dd:7e:26:e3:a4:9b:09:1f:f0:62:bd:16:61:44: 05:61:e8:24:74:d5:fb:d3:4b:38:c1:85:03:c6:33:bc:27:35: a7:94:17:f9:2a:80:6c:7e:7f:92:53:07:b2:c7:1f:94:50:06: 24:37:04:57:f6:78:1c:ba:da:05:4e:19:97:75:5c:ea:d9:7b: fd:7e:3b:3d:ff:20:56:c1:32:be:5e:8d:b9:79:d5:7c:96:af: 7a:d1:32:3c:7c:f5:2b:53:ae:40:c7:9e:81:28:80:bd:00:6f: c3:43:41:00:25:9c:c7:3f:fa:cc:fa:73:45:95:d0:31:f1:4b: 75:f9:23:54:83:2b:4c:fc:1a:75:8c:d9:1b:f3:2d:0b:3e:0f: 05:96:d5:30:c1:2c:7d:f2:6d:4c:28:bc:58:34:a8:2b:4e:3f: c7:cc:5b:ad:5c:8c:31:78:67:5c:0d:15:9c:31:ca:d1:eb:39: 24:29:c5:4e:96:aa:61:b0:c3:96:bc:e0:46:ef:00:c1:da:85: 8b:40:16:00:87:b9:52:da:85:c5:ce:cd:05:51:3f:d2:71:5b: c6:a4:37:5d:74:d5:99:01:d0:6e:4f:c1:ee:3c:24:33:44:dc: 24:d1:54:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxA9zoEIQp5Eh6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MWZkN2QtMzdkNy00ZGE2LThkZTgtN2QzNDZlMDAw NmFhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YjIzOWUwNjQtY2MxZi00ZDg3LWJlZmQtYWIyMmMzNDI4YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhdil1M9qIdtvMQU1C8kQprgZHSarDI4rd8u qhyZUxaxQDZsmcQxuguBllrK9xuXjjq4ag9FH0cmgjEl2KGJ+k3oWcE/ucYZs92N Lutz5v01lCCbEAFvG1NWuGnDT2lyglB+7jU5waJlBiHPuxaGpDpII2/f1iiNi9Km qmx4psuuNWR7Gv1cW9/zm4PimYg9ac2JtVKAj5QWayEGBvrInG9x/jqfvwYNuGXl /WNUiqkn8OCutb0h2y0syezMdL0moU0UvgNyacpXpppe00megsPkd+WEIFYd6+BY bNhIzArV150iM9a22knHC5vRvE0bh2pFC/BHVudO1hOAa2NSMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ/h/i23YrBISH/+uKGLUaQ8qFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUx ZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0NmUwMDA2YWEvZmZhZGZjMDgtZWY0NC0z MTM0LWExMDctZmE0NzBkZGM0MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGU1MWZkN2QtMzdkNy00ZGE2LThk ZTgtN2QzNDZlMDAwNmFhL2RlNTFmZDdkLTM3ZDctNGRhNi04ZGU4LTdkMzQ2ZTAw MDZhYS5jcmwwHwYDVR0jBBgwFoAUHYsjQJQ4f91apjmhU9JAQqG/3KMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUxZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0 NmUwMDA2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpIDm5zfxG9ZQeMpd7CrZwK+HrI40ndfibjpJsJH/BivRZhRAVh6CR0 1fvTSzjBhQPGM7wnNaeUF/kqgGx+f5JTB7LHH5RQBiQ3BFf2eBy62gVOGZd1XOrZ e/1+Oz3/IFbBMr5ejbl51XyWr3rRMjx89StTrkDHnoEogL0Ab8NDQQAlnMc/+sz6 c0WV0DHxS3X5I1SDK0z8GnWM2RvzLQs+DwWW1TDBLH3ybUwovFg0qCtOP8fMW61c jDF4Z1wNFZwxytHrOSQpxU6WqmGww5a84EbvAMHahYtAFgCHuVLahcXOzQVRP9Jx W8akN1101ZkB0G5Pwe48JDNE3CTRVKo= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:03 2025 by rpki-client