$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa File: 87ef1e25-a9ba-3e98-a722-fc379493d000.roa (raw, json) Hash identifier: lHtsI6tn5SBLbwGZabySablA+3nkfCYruxaSYLbSALk= Subject key identifier: 40:EE:D0:AA:BD:A8:47:75:C6:68:10:73:F3:7E:D7:1B:92:5D:E7:D4 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584909E69FA5E97F383E7E0DC300 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 134.224.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9f:a5:e9:7f:38:3e:7e:0d:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=72890a2b-75be-4ad3-adf4-f3c3ef6b68e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:54:d7:f6:ea:33:a1:e3:da:84:14:aa:f2: 67:96:88:ba:de:d4:45:ea:75:4d:9e:15:c7:df:4f: bb:98:1b:ef:a3:59:be:a7:7a:b4:f8:fa:27:78:a7: dd:29:52:7f:5a:73:65:4e:c1:4f:3c:61:5e:4a:71: 66:62:26:d8:a0:0d:c6:80:5b:c3:42:2f:e1:a5:3f: 12:96:8e:1a:81:4e:a3:ea:ce:48:f7:66:db:bd:4d: 51:08:c7:32:60:6f:88:ed:99:da:0d:8d:89:35:a5: 02:b5:25:61:c4:0c:99:98:05:b6:48:0f:46:d7:2c: 76:6a:af:8d:95:97:1a:2a:f6:c6:fc:ec:72:60:a8: 6e:f0:0f:9c:6d:d2:c6:7c:ad:ab:19:15:99:72:8d: a2:2a:06:7b:b8:e0:4d:ef:86:df:cb:f9:fc:0a:29: 15:c7:98:d9:3a:39:0a:06:64:5c:0e:01:4a:a5:4b: 93:82:3d:0c:87:92:e4:2a:25:41:59:cf:cb:7b:70: 49:bc:e8:57:91:c3:0e:39:81:69:46:99:5c:0f:49: 07:c9:0b:91:ae:a7:9d:63:29:9c:3a:45:fd:5e:46: d9:8c:15:6d:6f:14:56:6a:93:64:d0:c4:04:ba:cf: 14:9c:e5:34:5a:25:4b:98:e0:82:c5:4f:84:f5:82: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EE:D0:AA:BD:A8:47:75:C6:68:10:73:F3:7E:D7:1B:92:5D:E7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:bc:a0:fc:80:71:b1:ce:11:d8:4c:1d:cf:7a:9b:5e:f1:30: 80:93:14:e3:c3:a2:d5:3a:90:a9:50:28:4e:41:af:d9:48:25: eb:fb:46:7e:3a:41:b2:d9:14:2f:2c:12:5a:95:c1:2f:60:86: 45:3e:90:48:87:19:e9:75:dc:8c:af:ae:7a:57:32:b4:69:d5: 81:9a:51:09:6e:00:b8:c2:0b:c3:70:0e:92:45:70:5e:a0:99: 38:e3:11:f2:9f:28:68:4a:0b:af:a7:b5:9d:46:e9:58:06:c0: b4:c9:c0:ef:b6:56:4e:81:fd:9d:95:00:b7:a8:a2:17:a7:bd: 6f:12:87:5d:87:b0:0f:e9:54:07:4d:22:ae:51:11:13:d9:63: f9:e8:64:5f:3a:1f:41:87:93:98:1c:e1:7a:39:34:d1:74:b5: 96:a8:42:17:13:dc:94:c9:86:45:a4:ba:5e:55:fa:c6:4a:de: 30:dd:fe:5f:6f:d3:94:6b:c1:bf:35:97:bf:6b:a1:b0:e7:d2: 71:9d:ee:07:89:ad:42:ef:6c:71:03:4d:82:73:63:d6:4b:62: e5:83:8a:aa:64:02:a0:ae:d4:d9:9d:33:e6:fc:3a:b9:c4:a0: 56:ee:84:b4:f8:45:25:67:1b:c8:66:c9:45:1d:f2:c2:58:c9: f3:a5:2c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p+l6X84Pn4NwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NzI4OTBhMmItNzViZS00YWQzLWFkZjQtZjNjM2VmNmI2OGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG5U1/bqM6Hj2oQUqvJnloi63tRF6nVNnhXH 30+7mBvvo1m+p3q0+PoneKfdKVJ/WnNlTsFPPGFeSnFmYibYoA3GgFvDQi/hpT8S lo4agU6j6s5I92bbvU1RCMcyYG+I7ZnaDY2JNaUCtSVhxAyZmAW2SA9G1yx2aq+N lZcaKvbG/OxyYKhu8A+cbdLGfK2rGRWZco2iKgZ7uOBN74bfy/n8CikVx5jZOjkK BmRcDgFKpUuTgj0Mh5LkKiVBWc/Le3BJvOhXkcMOOYFpRplcD0kHyQuRrqedYymc OkX9XkbZjBVtbxRWapNk0MQEus8UnOU0WiVLmOCCxU+E9YJVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDu0Kq9qEd1xmgQc/N+1xuSXefUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvODdlZjFlMjUtYTliYS0z ZTk4LWE3MjItZmMzNzk0OTNkMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhuCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS8oPyAcbHOEdhMHc96m17xMICTFOPDotU6kKlQKE5Br9lIJev7Rn46 QbLZFC8sElqVwS9ghkU+kEiHGel13IyvrnpXMrRp1YGaUQluALjCC8NwDpJFcF6g mTjjEfKfKGhKC6+ntZ1G6VgGwLTJwO+2Vk6B/Z2VALeoohenvW8Sh12HsA/pVAdN Iq5RERPZY/noZF86H0GHk5gc4Xo5NNF0tZaoQhcT3JTJhkWkul5V+sZK3jDd/l9v 05Rrwb81l79robDn0nGd7geJrULvbHEDTYJzY9ZLYuWDiqpkAqCu1NmdM+b8OrnE oFbuhLT4RSVnG8hmyUUd8sJYyfOlLAk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:05 2025 by rpki-client