$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/161da5aa-ec1c-3a7a-ae21-2e0a9a6777a8.roa File: 161da5aa-ec1c-3a7a-ae21-2e0a9a6777a8.roa (raw, json) Hash identifier: zzorY3LXuQfPndS0lwOD3bs3z+NUCVrysofYEEjjI4I= Subject key identifier: FE:0C:2D:DA:24:9B:CD:31:97:1C:3E:36:E2:58:A0:CB:FF:C9:25:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B736AEF5CD747F321BC66852 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/161da5aa-ec1c-3a7a-ae21-2e0a9a6777a8.roa Signing time: Thu 30 Jan 2025 11:10:00 +0000 ROA not before: Thu 30 Jan 2025 11:10:00 +0000 ROA not after: Wed 30 Apr 2025 10:10:00 +0000 asID: 30036 IP address blocks: 150.195.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:ae:f5:cd:74:7f:32:1b:c6:68:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:10:00 2025 GMT Not After : Apr 30 10:10:00 2025 GMT Subject: CN=b87d2e53-1fcf-492f-adf9-716c588ce724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:5e:80:fc:0b:35:42:ff:9a:1b:3d:f6:68: 70:dd:cd:36:e9:d5:77:6f:c8:61:26:95:a1:b0:e0: 83:62:68:b9:75:2f:7a:36:5d:f2:e7:ee:71:e3:f0: bc:c5:15:43:77:8d:1b:f3:a5:fb:a2:ed:8a:f8:be: 20:06:db:a2:8f:9f:be:5b:71:06:27:59:cb:64:6a: 1b:4d:ae:35:f8:46:f2:fa:35:d4:d7:75:93:ab:69: ad:98:b6:f1:70:5e:d1:05:e0:8e:6f:16:99:7d:81: 67:6b:be:fd:df:7d:8e:3f:1e:d2:74:b3:43:52:97: 92:4c:d9:2f:50:a6:f9:b5:0a:fc:47:02:99:9c:c7: 76:76:bc:6e:a8:ff:b0:ca:f7:40:91:8b:d1:01:fb: f3:e1:6f:33:a9:6e:05:21:d1:64:aa:b1:a9:67:6f: 4f:0b:1d:ca:2c:5d:74:dc:4f:be:ef:f7:63:29:12: 5d:f9:dc:5a:79:be:e7:52:f7:f3:4b:1a:a0:0f:bd: 3b:96:cb:38:d6:71:30:41:f6:e3:47:aa:da:f4:db: e3:4f:df:52:69:4f:08:5a:70:58:e2:51:b7:7c:09: cf:67:eb:47:ec:73:65:e7:9e:09:21:20:39:3f:65: 83:32:0d:b6:81:57:70:54:9c:b1:e5:d7:b8:09:fe: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0C:2D:DA:24:9B:CD:31:97:1C:3E:36:E2:58:A0:CB:FF:C9:25:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/161da5aa-ec1c-3a7a-ae21-2e0a9a6777a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:51:7f:04:c3:ba:7d:05:78:12:a7:27:54:06:66:60:4d:99: 29:4a:6a:94:fe:a1:49:51:a8:5b:6d:be:38:1f:a4:11:a7:a3: 24:4c:61:ed:a8:76:17:d5:69:a3:3b:92:16:89:12:47:27:53: ad:39:17:95:8b:2d:fd:d9:85:71:57:e5:fa:46:1d:fa:f2:61: 11:e3:12:de:ef:cd:0d:f0:7d:ae:a8:8f:5c:2a:9f:5e:a4:03: cf:73:aa:52:79:82:52:d7:75:5d:44:a9:fd:8e:57:15:ff:56: e8:3f:8e:68:8e:08:67:a2:7a:f3:75:d3:1b:c3:83:1b:46:76: 44:02:23:ef:7b:20:7d:e3:f6:be:5a:46:04:0f:b9:71:9d:2d: 04:ee:af:9c:5d:86:cd:06:f6:8a:ce:ec:a0:f9:61:0a:d7:ad: f0:f3:35:cf:bf:d7:43:7a:0a:36:df:0e:af:a9:dd:2b:3f:fe: ad:c6:56:01:8c:21:f9:3a:25:32:0e:55:59:96:2f:fd:7f:cd: 1e:f2:75:0b:5a:22:f9:61:f1:48:63:06:ee:88:f1:77:aa:ba: cb:96:cb:db:86:0f:53:fa:06:cd:8a:11:dd:0c:b7:e2:db:b1: 27:e3:4c:ab:b9:ae:e1:30:2e:8a:26:9f:64:53:dd:18:8a:b0: d8:94:8b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nq71zXR/MhvGaFIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTAwMFoXDTI1MDQzMDEwMTAwMFowLzEtMCsGA1UEAxMk Yjg3ZDJlNTMtMWZjZi00OTJmLWFkZjktNzE2YzU4OGNlNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBJegPwLNUL/mhs99mhw3c026dV3b8hhJpWh sOCDYmi5dS96Nl3y5+5x4/C8xRVDd40b86X7ou2K+L4gBtuij5++W3EGJ1nLZGob Ta41+Eby+jXU13WTq2mtmLbxcF7RBeCObxaZfYFna779332OPx7SdLNDUpeSTNkv UKb5tQr8RwKZnMd2drxuqP+wyvdAkYvRAfvz4W8zqW4FIdFkqrGpZ29PCx3KLF10 3E++7/djKRJd+dxaeb7nUvfzSxqgD707lss41nEwQfbjR6ra9NvjT99SaU8IWnBY 4lG3fAnPZ+tH7HNl554JISA5P2WDMg22gVdwVJyx5de4Cf7JowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4MLdokm80xlxw+NuJYoMv/ySUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTYxZGE1YWEtZWMxYy0z YTdhLWFlMjEtMmUwYTlhNjc3N2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNRfwTDun0FeBKnJ1QGZmBNmSlKapT+oUlRqFttvjgfpBGnoyRMYe2o dhfVaaM7khaJEkcnU605F5WLLf3ZhXFX5fpGHfryYRHjEt7vzQ3wfa6oj1wqn16k A89zqlJ5glLXdV1Eqf2OVxX/Vug/jmiOCGeievN10xvDgxtGdkQCI+97IH3j9r5a RgQPuXGdLQTur5xdhs0G9orO7KD5YQrXrfDzNc+/10N6CjbfDq+p3Ss//q3GVgGM Ifk6JTIOVVmWL/1/zR7ydQtaIvlh8UhjBu6I8XequsuWy9uGD1P6Bs2KEd0Mt+Lb sSfjTKu5ruEwLoomn2RT3RiKsNiUi50= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:11 2025 by rpki-client