$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa File: 7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa (raw, json) Hash identifier: Csa/xwYv0K0FW8MvJuF8iTeRGBPY+4FzD5rOtqLpUq0= Subject key identifier: 32:72:F9:59:9E:10:52:8E:F7:0D:52:D8:87:71:0D:13:CE:8F:16:BE Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285848A565FB7A4A028617AA1ECD00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 21949 IP address blocks: 134.231.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:fb:7a:4a:02:86:17:aa:1e:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=75b3d0f9-b19d-4fbd-8120-eee63a767c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:a6:a9:13:d0:bf:cc:78:97:ba:d7:77:d3: da:cb:b1:e5:83:e8:cf:54:98:07:6f:4c:3f:67:07: 7e:dd:8f:85:41:36:4a:73:57:c6:88:52:bf:ca:0e: fb:21:6d:6a:e7:59:79:a4:62:eb:2c:a8:de:70:2d: 18:b1:0d:45:f4:3b:c7:d9:f0:3f:92:40:26:39:7b: 7e:6e:c9:00:cd:2e:67:19:43:11:1b:95:4a:fe:5e: da:e1:e9:5a:ee:68:90:ad:a9:25:3d:6c:ed:b7:c1: a2:29:4e:37:04:e9:b3:ed:8d:9a:b9:1b:30:1a:36: da:1f:8a:96:04:00:a1:dc:4a:8e:13:4c:07:76:e2: 62:a3:30:49:43:c1:9b:d2:c9:1e:9f:d0:53:ab:2f: 3e:c5:a0:fd:b8:ac:0e:08:72:17:81:2c:c4:9a:8d: be:86:c5:17:f5:44:ae:01:6b:f1:73:15:eb:04:db: da:cf:48:4c:5e:92:30:a5:37:66:9f:34:5e:f4:7c: d5:34:a2:ef:b1:46:e9:d8:a2:29:01:de:3a:02:da: 2f:aa:37:bd:26:80:07:01:26:3a:dd:11:c5:ad:f5: d9:5e:a6:2e:91:1b:5a:61:f5:92:13:41:f6:fc:46: 94:ca:41:5c:9f:41:b3:63:9f:90:6a:9c:51:ce:2b: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:72:F9:59:9E:10:52:8E:F7:0D:52:D8:87:71:0D:13:CE:8F:16:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 134.231.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6b:8d:c1:2c:3f:46:d7:15:c6:07:df:de:e2:0f:fc:a6:15: 34:30:7c:cb:e0:6c:d7:da:0b:39:08:cc:3f:72:01:ab:29:ff: 3c:f6:ff:d3:c3:3a:15:49:15:be:e0:78:2f:3a:b2:7a:84:1d: 7a:80:4f:f2:a9:ab:b5:aa:3d:e2:7d:71:0e:4d:dc:51:b0:55: 61:5f:08:44:7b:c0:f8:0c:38:d0:a0:4e:39:d9:a9:91:59:16: dc:68:a0:da:7c:ef:8d:3d:5d:19:4b:60:54:a8:d7:11:47:ea: 08:96:5b:52:4e:d9:4a:d3:c5:64:59:cf:80:a9:47:6a:be:8d: 78:6d:44:67:5e:df:cd:0a:50:47:cf:a3:67:b9:5f:db:d4:15: 20:e6:e5:e6:71:75:20:50:64:cb:85:df:04:c6:1f:fa:86:64: a5:42:b9:20:4b:67:8a:f9:3a:cb:ea:09:2f:56:f9:ee:42:a8: e8:2f:ed:cf:df:26:b0:6f:2f:db:52:2a:52:72:27:0b:1e:97: cc:aa:c2:05:cb:fb:9e:92:36:07:82:c9:dc:18:ea:02:4f:0a: 96:bf:9d:86:00:e1:9d:26:2c:d0:c2:85:73:02:26:0c:0f:7e: 6a:64:a0:fe:cf:b5:46:ff:8f:15:dc:c4:75:47:1f:58:c1:98: f3:2a:19:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZft6SgKGF6oezQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk NzViM2QwZjktYjE5ZC00ZmJkLTgxMjAtZWVlNjNhNzY3YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1himqRPQv8x4l7rXd9Pay7Hlg+jPVJgHb0w/ Zwd+3Y+FQTZKc1fGiFK/yg77IW1q51l5pGLrLKjecC0YsQ1F9DvH2fA/kkAmOXt+ bskAzS5nGUMRG5VK/l7a4ela7miQraklPWztt8GiKU43BOmz7Y2auRswGjbaH4qW BACh3EqOE0wHduJiozBJQ8Gb0sken9BTqy8+xaD9uKwOCHIXgSzEmo2+hsUX9USu AWvxcxXrBNvaz0hMXpIwpTdmnzRe9HzVNKLvsUbp2KIpAd46Atovqje9JoAHASY6 3RHFrfXZXqYukRtaYfWSE0H2/EaUykFcn0GzY5+QapxRzivNXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJy+VmeEFKO9w1S2IdxDRPOjxa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2QyNWJiNmMtZmE0OC0z YzQ0LTkyYjEtZjU4MjczOTU5ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhucgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJrjcEsP0bXFcYH397iD/ymFTQwfMvgbNfaCzkIzD9yAasp/zz2/9PD OhVJFb7geC86snqEHXqAT/Kpq7WqPeJ9cQ5N3FGwVWFfCER7wPgMONCgTjnZqZFZ FtxooNp87409XRlLYFSo1xFH6giWW1JO2UrTxWRZz4CpR2q+jXhtRGde380KUEfP o2e5X9vUFSDm5eZxdSBQZMuF3wTGH/qGZKVCuSBLZ4r5OsvqCS9W+e5CqOgv7c/f JrBvL9tSKlJyJwsel8yqwgXL+56SNgeCydwY6gJPCpa/nYYA4Z0mLNDChXMCJgwP fmpkoP7PtUb/jxXcxHVHH1jBmPMqGfM= -----END CERTIFICATE-----Generated at Tue Apr 8 10:09:38 2025 by rpki-client