$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2586d268-42c8-33c6-ab61-506e6c71e55f.roa File: 2586d268-42c8-33c6-ab61-506e6c71e55f.roa (raw, json) Hash identifier: DddcNcx0HfDreucTnV9O9+LcZQNLD9t0LfoOchvoq/M= Subject key identifier: CA:FE:93:69:EB:8E:6B:6B:CE:D7:58:82:0C:F8:DF:D7:50:8A:26:28 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584908815AA230C24D95909BAE80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2586d268-42c8-33c6-ab61-506e6c71e55f.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 134.224.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:5a:a2:30:c2:4d:95:90:9b:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=04c2fc66-9319-443e-b618-320a409b0e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:f3:9e:aa:ec:e8:1e:95:c8:ce:80:95:4a: 8a:0d:83:ec:f2:64:2c:4f:24:5b:31:10:c3:b2:05: 89:9f:59:5d:21:f0:5b:72:06:16:be:5d:26:a9:16: 78:fe:a6:1d:39:e6:b9:d6:0d:2c:78:7a:9f:71:07: 6d:64:bc:85:c4:50:51:2e:44:07:82:fb:93:62:9e: 0b:d2:03:f0:96:54:f5:bc:5d:81:7d:b8:4c:c7:58: 84:4d:6e:27:8b:45:f9:c9:02:5d:8f:cf:a0:d1:a6: 61:70:ef:e4:64:d1:71:15:b5:85:80:f2:33:1b:07: d7:5d:52:c2:94:2c:66:46:bd:d2:d0:55:23:15:6b: 02:d9:a6:86:06:20:ef:6a:fe:81:f4:85:53:56:9e: a4:1f:e0:e0:8d:c3:de:ea:27:48:b8:e4:8c:f1:c2: c7:14:61:bb:4a:26:08:16:c2:a8:09:bd:aa:82:65: a3:92:96:eb:4b:47:ab:48:3a:2e:46:98:e8:6a:e4: 1f:5b:22:80:27:96:dc:ba:03:23:15:3a:2f:ad:0f: e6:e8:61:c2:18:d5:eb:ad:51:a7:cb:85:71:8b:3a: 94:09:aa:0e:44:f5:54:7b:1e:c9:53:0b:34:62:c7: 6a:a9:26:13:65:b0:7e:41:c9:ba:31:7a:59:f7:90: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FE:93:69:EB:8E:6B:6B:CE:D7:58:82:0C:F8:DF:D7:50:8A:26:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2586d268-42c8-33c6-ab61-506e6c71e55f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:74:01:2b:fd:2f:0f:b9:79:0b:3f:fe:b1:91:55:9b:14:2c: 80:8b:c9:3a:4d:0f:3b:70:88:10:08:b3:5b:d7:36:d3:11:f0: 72:10:34:5d:69:f5:aa:2b:1f:60:92:a2:ef:47:27:ad:44:9b: 2d:a6:4f:ea:ac:9e:6e:ac:16:2b:6f:8c:7f:4e:df:39:f4:74: ee:70:9f:fd:da:bb:9d:6e:4a:cf:29:63:fc:ba:a7:c6:3e:67: 05:57:77:cf:b8:ac:d2:3e:d9:18:c5:12:a8:56:79:2a:90:96: 7d:78:7a:5f:6c:2c:2b:70:c7:f2:1c:e4:57:3e:ae:3e:a7:db: 89:fd:cc:64:03:e5:b6:9d:5a:25:ae:e9:7a:b2:97:eb:00:4e: 86:96:6e:60:76:b8:b4:f2:b6:33:43:d2:0c:1e:d6:27:44:53: 24:8f:86:33:a7:dc:88:1e:88:19:74:15:aa:1b:10:c0:86:71: 32:cd:a7:1e:7e:cf:a4:b7:8c:a2:66:a4:7d:f3:7a:d8:9b:f0: 59:ec:e1:88:42:3a:6b:99:1f:5f:19:75:a0:f6:f9:34:ad:ae: 14:88:fc:8e:45:c6:8e:79:18:bc:66:5f:7b:c3:e4:e6:83:50: 00:4d:58:5d:04:a1:04:1f:f3:9f:f4:c7:b9:7f:80:2f:46:87: 41:d1:da:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgVqiMMJNlZCbroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MDRjMmZjNjYtOTMxOS00NDNlLWI2MTgtMzIwYTQwOWIwZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGLznqrs6B6VyM6AlUqKDYPs8mQsTyRbMRDD sgWJn1ldIfBbcgYWvl0mqRZ4/qYdOea51g0seHqfcQdtZLyFxFBRLkQHgvuTYp4L 0gPwllT1vF2BfbhMx1iETW4ni0X5yQJdj8+g0aZhcO/kZNFxFbWFgPIzGwfXXVLC lCxmRr3S0FUjFWsC2aaGBiDvav6B9IVTVp6kH+DgjcPe6idIuOSM8cLHFGG7SiYI FsKoCb2qgmWjkpbrS0erSDouRpjoauQfWyKAJ5bcugMjFTovrQ/m6GHCGNXrrVGn y4VxizqUCaoORPVUex7JUws0YsdqqSYTZbB+Qcm6MXpZ95CVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr+k2nrjmtrztdYggz439dQiiYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjU4NmQyNjgtNDJjOC0z M2M2LWFiNjEtNTA2ZTZjNzFlNTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhuCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx0ASv9Lw+5eQs//rGRVZsULICLyTpNDztwiBAIs1vXNtMR8HIQNF1p 9aorH2CSou9HJ61Emy2mT+qsnm6sFitvjH9O3zn0dO5wn/3au51uSs8pY/y6p8Y+ ZwVXd8+4rNI+2RjFEqhWeSqQln14el9sLCtwx/Ic5Fc+rj6n24n9zGQD5badWiWu 6Xqyl+sAToaWbmB2uLTytjND0gwe1idEUySPhjOn3IgeiBl0FaobEMCGcTLNpx5+ z6S3jKJmpH3zetib8Fns4YhCOmuZH18ZdaD2+TStrhSI/I5Fxo55GLxmX3vD5OaD UABNWF0EoQQf85/0x7l/gC9Gh0HR2nQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:30 2025 by rpki-client