$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa File: 1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json) Hash identifier: YxlLwTsdWL0VjKTuL1hEofMQMyMi9kSsMAxYYaEINQ4= Subject key identifier: 66:5C:6C:F2:C4:4B:30:6B:EA:02:59:33:E4:63:2B:4C:03:BA:A7:3B Certificate issuer: /CN=135a25e4-6a94-45c6-b694-2d6e8256166a Certificate serial: 010D0C9F43285849BDDA22643432DC6F9B25A6C0 Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 7448 IP address blocks: 143.192.0.0/18 maxlen: 24 143.192.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:22:64:34:32:dc:6f:9b:25:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=093ebf08-1180-4cdf-a7f2-29531a5a1fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:14:db:8c:77:d0:e9:97:69:49:ef:cc:0d: a1:a0:73:b1:f7:1c:e4:f8:f8:3f:dc:86:d7:f0:29: d9:50:e0:4e:d3:a5:bb:a7:88:00:e1:2a:9b:12:5f: f3:be:4b:16:30:99:3b:6d:6d:7e:05:78:51:18:b6: 7b:3d:37:2c:9e:60:f6:63:88:4c:98:be:e9:a4:37: 0d:7c:09:6d:1c:f3:83:20:f4:0c:75:18:86:b0:c7: 91:50:1a:a9:09:b5:9e:eb:7f:05:37:d4:02:71:f7: eb:28:3c:77:9a:3b:c6:ba:db:7a:17:8d:0d:93:a9: 94:6e:c7:0c:d9:76:96:4e:a9:52:d0:cc:81:98:cd: 74:46:cf:d4:f2:04:9f:7f:4d:a6:55:e5:65:d4:2b: 07:ae:8c:af:c4:96:01:f4:f1:93:37:df:4c:b4:20: ea:ff:31:51:83:17:50:2e:e0:0d:de:a3:76:db:ca: 6b:6e:ab:6a:4d:b9:67:36:f6:de:42:c9:a5:06:d8: 7d:d9:84:b0:27:36:2f:8e:02:ba:f7:bd:15:e5:57: 06:9b:f9:89:b0:33:f7:7a:09:5b:41:c9:95:67:dc: fc:ac:bc:24:17:2d:2a:bc:ad:20:76:3e:f6:d1:2e: fb:30:8c:54:0a:aa:0e:d2:d6:61:27:db:97:4d:42: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:6C:F2:C4:4B:30:6B:EA:02:59:33:E4:63:2B:4C:03:BA:A7:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl X509v3 Authority Key Identifier: keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer sbgp-ipAddrBlock: critical IPv4: 143.192.0.0-143.192.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:77:32:6f:e7:be:fd:e0:3c:89:57:00:19:fd:8e:f9:1b:1c: 13:b4:96:d6:0d:d0:f6:cb:12:c2:f8:36:19:55:58:a1:a4:58: 80:79:d7:4b:ab:45:a1:fe:0b:3f:1d:6d:0d:df:c0:66:1a:63: 70:f6:fe:a3:f4:59:4b:66:02:52:67:2b:56:74:3c:65:d2:7a: 56:fe:57:20:d2:36:3c:56:15:d6:34:a2:02:7e:71:4d:fa:96: 04:43:1b:fb:21:cd:c6:17:49:08:e1:9a:2f:9e:21:00:8c:7a: 4c:80:c4:51:b1:83:0e:bf:b7:85:52:49:04:69:2c:0c:45:4a: 11:71:56:a9:db:78:78:ab:71:e0:95:cb:e5:99:37:ee:91:e8: 2a:2c:6d:ab:61:dd:72:2a:30:d4:a1:37:e5:5b:e7:c5:e2:77: 40:b3:eb:86:62:28:83:4a:dc:3f:1e:59:22:a4:58:77:45:d5: 18:17:3c:57:88:94:48:b7:42:f3:86:f2:1b:22:3b:ab:c5:f8: 3a:66:d5:b7:de:ba:50:99:d6:76:81:17:71:fe:96:4f:87:f8: 47:69:89:ee:72:a6:35:1c:a1:3e:16:a0:f7:e8:27:ef:a1:2d: 05:77:43:b9:72:a1:70:16:6e:55:31:e2:0a:6a:b2:c2:ea:15: e1:f2:68:94 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEm92iJkNDLcb5slpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM1YTI1ZTQtNmE5NC00NWM2LWI2OTQtMmQ2ZTgyNTYx NjZhMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MDkzZWJmMDgtMTE4MC00Y2RmLWE3ZjItMjk1MzFhNWExZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotIU24x30OmXaUnvzA2hoHOx9xzk+Pg/3IbX 8CnZUOBO06W7p4gA4SqbEl/zvksWMJk7bW1+BXhRGLZ7PTcsnmD2Y4hMmL7ppDcN fAltHPODIPQMdRiGsMeRUBqpCbWe638FN9QCcffrKDx3mjvGutt6F40Nk6mUbscM 2XaWTqlS0MyBmM10Rs/U8gSff02mVeVl1CsHroyvxJYB9PGTN99MtCDq/zFRgxdQ LuAN3qN228prbqtqTblnNvbeQsmlBth92YSwJzYvjgK6970V5VcGm/mJsDP3eglb QcmVZ9z8rLwkFy0qvK0gdj720S77MIxUCqoO0tZhJ9uXTUJnJQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFGZcbPLESzBr6gJZM+RjK0wDuqc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMzVh MjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZlODI1NjE2NmEvMWFhM2YxYWItY2M3OC0z NmI0LWI4OTAtNTUyZWMyZDRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTM1YTI1ZTQtNmE5NC00NWM2LWI2 OTQtMmQ2ZTgyNTYxNjZhLzEzNWEyNWU0LTZhOTQtNDVjNi1iNjk0LTJkNmU4MjU2 MTY2YS5jcmwwHwYDVR0jBBgwFoAU3z6ArD0AzzQWeNXZQvPiHb3A8b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMzVhMjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZl ODI1NjE2NmEuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwaPwAME BY/AQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAfdzJv57794DyJVwAZ/Y75GxwTtJbWDdD2yxLC+DYZVVih pFiAeddLq0Wh/gs/HW0N38BmGmNw9v6j9FlLZgJSZytWdDxl0npW/lcg0jY8VhXW NKICfnFN+pYEQxv7Ic3GF0kI4ZovniEAjHpMgMRRsYMOv7eFUkkEaSwMRUoRcVap 23h4q3HglcvlmTfukegqLG2rYd1yKjDUoTflW+fF4ndAs+uGYiiDStw/HlkipFh3 RdUYFzxXiJRIt0LzhvIbIjurxfg6ZtW33rpQmdZ2gRdx/pZPh/hHaYnucqY1HKE+ FqD36CfvoS0Fd0O5cqFwFm5VMeIKarLC6hXh8miU -----END CERTIFICATE-----Generated at Fri May 9 06:15:36 2025 by rpki-client