$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json) Hash identifier: SseF0DdbiTxmEXyRMmMA7yojogVwqD9wCv+T9k687sE= Subject key identifier: 8D:53:64:B9:38:E1:7A:AF:0A:B9:B8:3C:D0:16:C3:08:91:AC:0E:A2 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F43285849A61F45374DC42E36CFF11700 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 21976 IP address blocks: 192.135.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:45:37:4d:c4:2e:36:cf:f1:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=82d4e502-84a6-4939-bfe7-df6056845381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:64:44:dc:5c:08:73:66:c1:99:e8:f3:7c: 1b:fd:f0:0d:cd:a5:b3:9c:21:d9:cd:72:ed:78:1b: 57:0a:8f:30:5d:d6:f4:a9:98:1d:14:24:64:6b:65: 06:46:6e:4c:50:fb:61:37:9b:d2:7a:6b:3d:99:46: 49:75:73:08:33:b3:6d:d3:d9:29:b4:0b:19:b4:db: e6:d5:b2:10:02:72:3a:ae:95:12:37:c1:d1:67:c4: 5f:c6:47:60:95:92:c8:d2:98:68:87:48:7b:7c:aa: 49:e6:b6:47:65:a9:42:87:80:49:f7:4b:29:ca:40: 5b:b9:82:f6:42:e2:61:0c:66:f2:2f:59:3d:41:df: 8b:e6:e3:2c:0c:c8:64:ac:92:44:0e:95:fe:81:75: 8d:cf:d2:56:4e:79:52:e9:48:44:3a:57:bf:1a:b0: 4a:ff:4a:1c:4f:f7:8e:a6:45:f7:d5:66:30:53:32: 23:49:d5:73:95:77:c6:93:f8:1e:81:6d:d9:d9:f7: 45:dc:50:60:8a:f1:40:08:28:0a:a4:fa:b9:ec:1a: 4a:6a:17:fd:0a:3f:58:e6:6c:8f:20:fc:1a:75:9f: 21:79:58:a8:25:f2:35:68:eb:6e:cd:f6:12:ac:67: 0b:1c:8f:b5:f0:0f:67:59:87:3a:08:65:92:1d:b6: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:53:64:B9:38:E1:7A:AF:0A:B9:B8:3C:D0:16:C3:08:91:AC:0E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:24:19:3c:f7:ab:90:2a:3e:8f:b2:36:0c:c7:d6:29:bc:c1: cc:b1:7e:10:0f:33:14:0a:30:51:4e:2b:0d:d1:d0:89:64:a4: 83:ff:89:5e:84:d0:85:b5:ec:2d:34:a6:eb:0d:75:ca:a9:18: 70:a9:4d:1b:f0:30:df:42:c0:d3:20:33:91:7d:29:c2:3d:ce: 32:90:1d:53:f9:5d:28:75:4c:23:38:26:45:29:4e:82:06:f5: 57:59:80:15:c3:26:9d:68:be:a4:62:3a:d8:af:f6:52:45:ce: 4c:d4:f7:05:79:12:f7:cf:e3:fe:26:57:2e:59:c2:a1:0f:0f: be:25:30:3c:d4:18:33:a0:c6:80:c6:1a:f8:23:2e:8a:f0:27: b5:57:00:42:7f:5f:6d:d4:40:c4:ce:ae:e1:9c:9a:4e:bc:20: 10:14:a9:63:4e:9a:c9:4c:03:78:83:77:cb:b3:7f:55:f2:35: 72:2e:75:ac:8a:cb:9e:17:5c:1f:05:3e:63:63:07:93:7b:69: 36:5c:68:17:14:a6:84:98:12:a2:21:06:a8:92:5f:a3:3e:90: a8:59:b1:42:a6:b4:4d:ee:b2:5c:b1:6f:e3:eb:b5:bc:a2:93: d4:ca:75:53:f5:2d:53:20:ac:e9:a6:d0:a1:18:ee:3e:a4:18: 8a:3f:23:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0U3TcQuNs/xFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ODJkNGU1MDItODRhNi00OTM5LWJmZTctZGY2MDU2ODQ1MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpNkRNxcCHNmwZno83wb/fANzaWznCHZzXLt eBtXCo8wXdb0qZgdFCRka2UGRm5MUPthN5vSems9mUZJdXMIM7Nt09kptAsZtNvm 1bIQAnI6rpUSN8HRZ8RfxkdglZLI0phoh0h7fKpJ5rZHZalCh4BJ90spykBbuYL2 QuJhDGbyL1k9Qd+L5uMsDMhkrJJEDpX+gXWNz9JWTnlS6UhEOle/GrBK/0ocT/eO pkX31WYwUzIjSdVzlXfGk/gegW3Z2fdF3FBgivFACCgKpPq57BpKahf9Cj9Y5myP IPwadZ8heVioJfI1aOtuzfYSrGcLHI+18A9nWYc6CGWSHbYh4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1TZLk44XqvCrm4PNAWwwiRrA6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMmRkYmJmMzItZGU4Yy0z YWViLTkzZDgtODBlYmZkMTU2MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEkGTz3q5AqPo+yNgzH1im8wcyxfhAPMxQKMFFOKw3R0IlkpIP/iV6E 0IW17C00pusNdcqpGHCpTRvwMN9CwNMgM5F9KcI9zjKQHVP5XSh1TCM4JkUpToIG 9VdZgBXDJp1ovqRiOtiv9lJFzkzU9wV5EvfP4/4mVy5ZwqEPD74lMDzUGDOgxoDG GvgjLorwJ7VXAEJ/X23UQMTOruGcmk68IBAUqWNOmslMA3iDd8uzf1XyNXIudayK y54XXB8FPmNjB5N7aTZcaBcUpoSYEqIhBqiSX6M+kKhZsUKmtE3uslyxb+Prtbyi k9TKdVP1LVMgrOmm0KEY7j6kGIo/Iyo= -----END CERTIFICATE-----Generated at Sun May 11 11:32:03 2025 by rpki-client