$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa File: cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa (raw, json) Hash identifier: xqUA17+K2Q8NaFW1RLWov0zSfHsGCJS0vVfQCIR8OGo= Subject key identifier: 0A:AA:CC:A5:A2:DE:BD:F0:BB:49:28:17:70:5A:C0:75:20:1A:C2:11 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584882808BCBAE4E1ABE2D1885C0 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 5769 IP address blocks: 147.253.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:8b:cb:ae:4e:1a:be:2d:18:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=6024683a-2da4-41a1-a495-87ae37447fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e0:25:a2:d6:67:00:5f:cb:17:32:47:44:d7: 49:70:77:9e:2c:1e:2a:34:9d:cb:08:b2:61:2e:3c: 13:29:08:50:d4:32:d2:22:c4:47:d0:91:e7:c0:1e: f3:8a:be:2e:29:af:ab:cd:34:6a:9a:e9:e2:c3:df: 70:9f:c1:52:8b:aa:4b:59:9e:51:b4:4f:56:e1:12: be:65:c0:84:79:36:d5:9f:bf:87:fd:51:8f:df:78: a9:10:a9:6c:34:a6:7e:51:50:2a:88:65:bc:0d:5e: 5a:82:6f:fb:dc:9f:18:80:07:b7:c9:de:07:ce:0e: 50:d3:78:15:f1:79:d2:15:4c:c8:53:a3:0b:b1:08: bf:38:9f:d9:c2:0b:db:cf:81:37:00:d3:88:7b:25: 92:d2:f4:8c:23:26:e8:d4:29:3e:3d:57:60:56:20: 09:8f:41:be:e0:72:71:1d:a5:f5:c2:78:b4:15:63: 62:44:a7:17:2c:47:5f:5d:25:fc:8c:2c:6c:1b:d1: 74:5d:27:99:f3:1a:c3:68:ef:21:eb:db:e0:9d:74: 74:1f:f5:0e:67:f1:4c:f1:85:c1:e3:ca:12:2a:44: ac:13:d0:e2:e5:83:97:97:fe:0f:77:29:4d:87:24: ff:67:f8:c6:7f:f7:2c:c9:c2:e9:0c:00:fe:4c:05: 80:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AA:CC:A5:A2:DE:BD:F0:BB:49:28:17:70:5A:C0:75:20:1A:C2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 147.253.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:57:35:8e:a8:2e:52:c5:31:97:43:0d:5f:66:da:fe:9e:3e: 80:03:12:cc:33:53:cb:72:6a:38:76:06:c0:e2:bd:bd:45:74: 3e:42:ff:56:da:35:9a:9b:e8:fd:76:65:37:12:30:50:96:b9: 54:f9:fc:f6:bb:39:8d:c7:64:c7:41:6b:66:ae:d6:17:5a:e5: e9:89:32:38:e5:57:ad:29:d9:88:4f:e8:20:9a:9e:cc:15:02: 48:b7:ee:f0:b1:96:ad:8d:3e:ef:72:c3:f2:ec:64:4f:32:a3: cf:dd:09:a5:f9:c7:59:49:35:6d:bc:15:ea:dc:31:9f:ed:31: 29:0e:8f:80:b7:81:b4:a5:c6:70:f0:64:84:86:5f:11:d5:56: 2d:0f:0f:27:43:fb:3b:d8:27:a5:53:1c:af:7b:79:77:31:32: fe:6a:79:e1:a8:37:b3:76:9d:d3:06:cc:57:db:4f:2a:57:6f: 5a:7a:a7:ec:30:6a:f1:b3:ef:fe:62:45:a3:c7:6a:02:76:28: 17:f0:67:59:6a:7e:81:f0:f0:1f:38:29:d4:45:12:c8:bc:69: 50:b9:e9:ba:8e:3d:c7:34:15:b2:81:ce:13:59:8c:02:41:32: dc:01:95:a5:81:c4:75:5f:dd:4d:14:24:7f:a0:7f:dc:20:09: 1e:17:f5:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIvLrk4avi0YhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjAyNDY4M2EtMmRhNC00MWExLWE0OTUtODdhZTM3NDQ3ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eAlotZnAF/LFzJHRNdJcHeeLB4qNJ3LCLJh LjwTKQhQ1DLSIsRH0JHnwB7zir4uKa+rzTRqmuniw99wn8FSi6pLWZ5RtE9W4RK+ ZcCEeTbVn7+H/VGP33ipEKlsNKZ+UVAqiGW8DV5agm/73J8YgAe3yd4Hzg5Q03gV 8XnSFUzIU6MLsQi/OJ/Zwgvbz4E3ANOIeyWS0vSMIybo1Ck+PVdgViAJj0G+4HJx HaX1wni0FWNiRKcXLEdfXSX8jCxsG9F0XSeZ8xrDaO8h69vgnXR0H/UOZ/FM8YXB 48oSKkSsE9Di5YOXl/4PdylNhyT/Z/jGf/csycLpDAD+TAWAywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqqzKWi3r3wu0koF3BawHUgGsIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvY2IzOTIyOGQtMzI2YS0z YTQzLWIyYjItMjMzOWViNWFiNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGk/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9XNY6oLlLFMZdDDV9m2v6ePoADEswzU8tyajh2BsDivb1FdD5C/1ba NZqb6P12ZTcSMFCWuVT5/Pa7OY3HZMdBa2au1hda5emJMjjlV60p2YhP6CCanswV Aki37vCxlq2NPu9yw/LsZE8yo8/dCaX5x1lJNW28FercMZ/tMSkOj4C3gbSlxnDw ZISGXxHVVi0PDydD+zvYJ6VTHK97eXcxMv5qeeGoN7N2ndMGzFfbTypXb1p6p+ww avGz7/5iRaPHagJ2KBfwZ1lqfoHw8B84KdRFEsi8aVC56bqOPcc0FbKBzhNZjAJB MtwBlaWBxHVf3U0UJH+gf9wgCR4X9RQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:15 2025 by rpki-client