$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/51b864bb-5fc8-3f13-9e49-7ed1acd1dd02.roa File: 51b864bb-5fc8-3f13-9e49-7ed1acd1dd02.roa (raw, json) Hash identifier: nn9fEPvy3dvPZ55ZpE4YfVqyhLcVZtih8aIuikLlYEE= Subject key identifier: FA:8F:29:BD:E6:00:4F:64:F5:52:F0:E9:5F:AC:2A:0E:A6:D0:3B:01 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6BB61020413DFA81C8BD0 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/51b864bb-5fc8-3f13-9e49-7ed1acd1dd02.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 6401 IP address blocks: 159.18.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:bb:61:02:04:13:df:a8:1c:8b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=c49757c2-6679-4f52-bf46-ffa8637049e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7b:8c:c2:db:fc:8c:2c:b4:bd:75:bf:59:23: 9e:26:2a:9c:65:27:64:f4:2e:e6:7b:3e:19:2a:26: 71:77:e6:bd:29:70:17:83:d9:00:78:c9:c9:c2:a0: 7a:24:7f:4f:4d:e0:61:90:04:f0:bd:a7:45:87:65: d2:a5:6f:0e:b0:4d:5e:a5:4c:d7:12:b9:ee:60:1c: e7:6d:87:af:e1:9f:9b:f3:42:9e:e6:65:2c:02:30: 34:24:f5:f2:f3:3e:ac:6e:7a:67:a2:25:f9:ff:d2: 54:53:8f:ba:6b:fa:08:cf:d0:81:dc:69:a2:6d:7f: d8:e9:5c:ba:e9:f7:f8:5d:73:34:ef:ba:98:8b:9f: ac:f1:f0:33:2d:be:da:3d:77:b9:ff:cb:e2:a5:ec: 6d:ec:58:94:62:f3:ab:b8:4b:49:40:41:c3:9a:ec: 06:7f:ee:0c:67:aa:9d:ab:46:60:e8:da:fe:bc:9e: 05:80:f5:62:cf:cc:48:78:4c:43:7d:43:08:7b:bb: 90:ac:70:d8:17:c6:42:81:61:27:29:4b:7c:95:75: b3:99:84:75:82:8a:b0:b4:ae:de:fb:5c:03:1e:f3: bd:9c:71:76:b5:41:7e:4f:7d:2b:85:a0:9e:f0:1d: 37:cb:81:7e:09:95:8c:d9:5d:87:24:45:52:f9:13: ec:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8F:29:BD:E6:00:4F:64:F5:52:F0:E9:5F:AC:2A:0E:A6:D0:3B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/51b864bb-5fc8-3f13-9e49-7ed1acd1dd02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 159.18.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:42:b3:3d:19:83:1f:4d:da:1c:3d:92:1d:b3:e6:24:cc:ba: 1b:c5:1d:c5:45:34:27:6f:91:e9:85:3f:bc:35:e5:26:81:61: 4c:da:aa:2b:d1:2e:e3:06:d8:06:b6:82:a8:e4:9f:29:86:96: 44:f6:66:75:49:ba:21:05:fe:7b:4b:43:e9:f8:14:00:36:09: 68:c3:5d:e4:94:83:f5:f1:c7:7f:58:87:39:76:86:9e:c1:ad: eb:1a:1b:cc:16:6e:02:35:eb:94:de:bf:18:0b:97:93:c2:c8: 0f:4b:04:3f:5c:4a:28:a0:8c:1a:55:a3:97:b1:2c:ca:88:6e: e2:20:a4:64:07:ef:ba:7b:81:09:06:df:ef:f6:46:1c:be:06: 99:fc:a2:de:80:42:a9:18:bd:eb:74:87:f1:87:2e:34:68:0c: fc:48:af:dc:e6:84:22:62:99:ff:84:31:0d:97:d2:ff:9d:66: 6c:4f:ed:bd:54:11:e9:36:d3:a1:7d:56:aa:de:e1:3b:2a:6b: 88:d7:ec:d0:53:8c:46:56:2c:88:81:04:71:d3:d0:54:4d:b3: 49:19:94:e4:a0:a1:74:08:74:28:82:65:14:c8:e8:82:8b:1c: 4c:21:9c:68:fe:61:18:e9:21:13:76:8e:18:a4:30:9a:71:c2: fb:69:2e:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprthAgQT36gci9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YzQ5NzU3YzItNjY3OS00ZjUyLWJmNDYtZmZhODYzNzA0OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3uMwtv8jCy0vXW/WSOeJiqcZSdk9C7mez4Z KiZxd+a9KXAXg9kAeMnJwqB6JH9PTeBhkATwvadFh2XSpW8OsE1epUzXErnuYBzn bYev4Z+b80Ke5mUsAjA0JPXy8z6sbnpnoiX5/9JUU4+6a/oIz9CB3GmibX/Y6Vy6 6ff4XXM077qYi5+s8fAzLb7aPXe5/8vipext7FiUYvOruEtJQEHDmuwGf+4MZ6qd q0Zg6Nr+vJ4FgPViz8xIeExDfUMIe7uQrHDYF8ZCgWEnKUt8lXWzmYR1goqwtK7e +1wDHvO9nHF2tUF+T30rhaCe8B03y4F+CZWM2V2HJEVS+RPsGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqPKb3mAE9k9VLw6V+sKg6m0DsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNTFiODY0YmItNWZjOC0z ZjEzLTllNDktN2VkMWFjZDFkZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxITMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJCsz0Zgx9N2hw9kh2z5iTMuhvFHcVFNCdvkemFP7w15SaBYUzaqivR LuMG2Aa2gqjknymGlkT2ZnVJuiEF/ntLQ+n4FAA2CWjDXeSUg/Xxx39Yhzl2hp7B resaG8wWbgI165TevxgLl5PCyA9LBD9cSiigjBpVo5exLMqIbuIgpGQH77p7gQkG 3+/2Rhy+Bpn8ot6AQqkYvet0h/GHLjRoDPxIr9zmhCJimf+EMQ2X0v+dZmxP7b1U Eek206F9Vqre4Tsqa4jX7NBTjEZWLIiBBHHT0FRNs0kZlOSgoXQIdCiCZRTI6IKL HEwhnGj+YRjpIRN2jhikMJpxwvtpLgg= -----END CERTIFICATE-----Generated at Sun Apr 6 18:19:43 2025 by rpki-client