$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa File: 0a3f164c-5f88-301b-adde-657863805f1c.roa (raw, json) Hash identifier: 6hKSd/nOI5B9HAHk5D13rebE60l2wO0an1IDd/npWco= Subject key identifier: 38:B0:0A:8F:95:DF:5F:E6:E9:74:9C:A6:F6:D5:86:F6:7A:27:D6:8C Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F43285849244E8345C0469A3951C2DB00 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:83:45:c0:46:9a:39:51:c2:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=31bbf963-62c8-47a4-9ff2-d1e03bb0e6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3e:c8:18:a7:1e:49:fa:5e:0e:cd:50:17:87: a1:c0:e7:e8:85:f3:48:64:62:0b:64:64:0e:9a:96: cf:b8:c2:d9:d1:81:33:19:62:df:ab:7f:80:0d:50: f3:74:1d:07:f3:d7:f5:7f:a4:5a:f0:66:91:d0:b1: 97:b0:91:ae:b4:48:89:88:91:6d:c0:c4:ea:17:0d: c6:09:50:27:24:e0:6c:46:d9:6f:26:f7:71:4c:be: 18:ec:e1:2f:93:f8:75:5a:d0:50:22:d6:18:e6:30: a6:64:f1:6a:a6:23:11:21:69:42:2e:db:e2:48:95: 62:b5:7c:21:4e:18:91:8f:af:15:f9:be:4c:c6:6a: 2d:d4:1b:09:00:e9:e6:17:11:17:ff:b8:95:9d:72: 9a:68:53:d9:ca:77:a0:30:3d:98:b5:75:ef:e0:db: d4:29:54:65:86:e3:b0:eb:9d:f5:25:f8:42:b7:d4: 1c:85:09:a7:c6:31:7d:0b:1c:d7:ff:dd:d2:3c:48: f2:2c:fb:99:db:69:2e:21:15:5e:e8:f1:c5:49:59: 92:02:e7:66:5c:77:0e:30:f6:1c:13:9d:49:d9:6e: b1:80:fe:47:39:8b:59:f2:08:32:9b:cf:a9:84:e6: 7b:ce:0a:de:03:37:a8:2e:c9:49:06:51:a6:cf:cc: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B0:0A:8F:95:DF:5F:E6:E9:74:9C:A6:F6:D5:86:F6:7A:27:D6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b2:cd:fb:ad:37:b8:14:84:27:9f:0d:fd:df:b7:47:d5:40: 26:f6:e7:c4:f6:d9:0a:f4:1b:29:29:3d:81:3b:b0:f2:16:fb: 70:60:dc:24:98:a5:ea:89:67:c9:36:26:3a:99:4b:85:1d:9d: 66:32:60:38:ca:df:f4:1f:0f:6e:75:35:eb:a1:37:d4:3e:f7: 15:a3:6d:cd:f0:3b:e5:bf:26:6d:65:83:44:f4:f8:0c:90:e1: 27:cf:19:06:91:f3:14:2b:2c:3c:73:7e:b0:f9:29:30:04:26: 24:44:31:aa:19:91:a5:ab:a4:c6:9b:4a:19:ec:7d:41:fb:9a: a8:00:36:81:43:50:15:14:a2:e6:3c:3c:12:08:32:fb:d2:e8: cb:67:ce:8d:e4:24:03:32:f6:2b:58:46:79:c7:6f:1d:d4:11: fb:2f:2a:83:05:c1:06:18:be:6e:54:b5:94:de:35:1f:df:61: ec:ef:4e:8c:a1:83:36:a5:9d:57:0a:02:ce:71:21:ab:c3:41: 30:7c:d1:a6:d6:fc:a5:e8:fe:4e:08:f4:36:63:2d:43:5d:52: 00:fc:db:49:13:77:5e:3a:33:d4:99:9d:06:0b:53:45:68:67: 30:7b:29:db:bb:59:f1:0d:30:e2:c0:0d:58:b5:9f:96:d8:41: 4b:e2:73:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToNFwEaaOVHC2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzFiYmY5NjMtNjJjOC00N2E0LTlmZjItZDFlMDNiYjBlNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT7IGKceSfpeDs1QF4ehwOfohfNIZGILZGQO mpbPuMLZ0YEzGWLfq3+ADVDzdB0H89f1f6Ra8GaR0LGXsJGutEiJiJFtwMTqFw3G CVAnJOBsRtlvJvdxTL4Y7OEvk/h1WtBQItYY5jCmZPFqpiMRIWlCLtviSJVitXwh ThiRj68V+b5Mxmot1BsJAOnmFxEX/7iVnXKaaFPZynegMD2YtXXv4NvUKVRlhuOw 6531JfhCt9QchQmnxjF9CxzX/93SPEjyLPuZ22kuIRVe6PHFSVmSAudmXHcOMPYc E51J2W6xgP5HOYtZ8ggym8+phOZ7zgreAzeoLslJBlGmz8ySoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiwCo+V31/m6XScpvbVhvZ6J9aMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMGEzZjE2NGMtNWY4OC0z MDFiLWFkZGUtNjU3ODYzODA1ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6yzfutN7gUhCefDf3ft0fVQCb258T22Qr0GykpPYE7sPIW+3Bg3CSY peqJZ8k2JjqZS4UdnWYyYDjK3/QfD251NeuhN9Q+9xWjbc3wO+W/Jm1lg0T0+AyQ 4SfPGQaR8xQrLDxzfrD5KTAEJiREMaoZkaWrpMabShnsfUH7mqgANoFDUBUUouY8 PBIIMvvS6Mtnzo3kJAMy9itYRnnHbx3UEfsvKoMFwQYYvm5UtZTeNR/fYezvToyh gzalnVcKAs5xIavDQTB80abW/KXo/k4I9DZjLUNdUgD820kTd146M9SZnQYLU0Vo ZzB7Kdu7WfENMOLADVi1n5bYQUvicwg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:07 2025 by rpki-client