$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa File: cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa (raw, json) Hash identifier: HmbHyw4PGi+V/UPmR7ZT3rqzaEIfPHWFWDPIxgLVjiU= Subject key identifier: 6F:3C:1E:A9:5B:42:F4:52:68:AE:1B:61:B3:D2:BB:4C:9D:17:12:C6 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584961B990906C50389B2C9C0A00 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 5769 IP address blocks: 147.253.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:90:90:6c:50:38:9b:2c:9c:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=2e86fbd5-ebda-4c40-a73f-993815c734bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:67:3f:32:93:69:b0:3b:9a:bc:00:2a:d6: 9d:34:09:55:f8:f5:be:52:d5:5b:5b:c3:a1:ab:18: e7:27:5b:bc:30:4e:f3:51:80:f8:e3:25:5e:d8:15: 52:1f:ca:1b:e6:97:d1:3b:5e:4b:b9:24:ef:ad:53: e4:d5:33:65:bf:85:60:cb:2c:82:bc:48:89:5d:93: e6:09:1f:1e:d3:e6:34:f1:9a:4d:c2:bc:d0:f5:15: 5d:ae:9a:bd:e6:76:af:99:38:c6:ac:62:74:97:c8: e2:41:7c:ba:a9:01:dd:72:a0:a4:65:80:d0:cc:9b: 11:6f:b4:b8:db:78:48:03:7f:bd:2c:9c:4d:9f:0e: 6a:4a:af:1f:b6:65:8f:4a:4b:57:10:49:1b:96:0d: 0b:02:dd:27:55:d2:9b:01:e5:b5:7c:65:84:16:fa: dd:d0:1b:3a:55:11:c5:85:b9:0d:e9:06:65:20:56: 8b:c0:b7:82:e6:5c:41:f5:ca:29:6c:69:d0:cc:8c: 56:bb:4b:88:02:6b:f5:c5:98:46:07:37:85:11:b1: ae:78:13:b2:33:7c:ee:3e:a7:05:92:c4:c4:6b:9c: 26:67:c1:30:5a:03:da:c0:74:b7:f2:26:94:a9:6b: 1f:cc:ad:66:e5:8a:c4:1f:12:46:7b:ae:4a:d8:39: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3C:1E:A9:5B:42:F4:52:68:AE:1B:61:B3:D2:BB:4C:9D:17:12:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 147.253.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e7:5a:1c:ef:df:dd:2d:c8:3d:94:d8:36:7b:74:a4:92:7b: 48:0c:34:e7:fa:ee:20:d4:9e:45:91:85:df:c6:39:a6:a3:40: 30:6b:a5:18:ca:15:36:eb:93:30:54:dc:af:70:61:e9:cc:b8: fa:00:6c:7d:90:17:a7:a7:0b:51:91:60:e1:ff:5e:fc:69:39: 5e:ef:a6:39:ee:44:70:ab:c6:f1:a2:f0:1a:12:89:98:65:bb: 0d:46:74:20:44:f1:e0:41:a4:9c:d9:55:64:6d:a5:85:c7:92: 44:05:e9:f8:4b:5b:d3:ae:ae:f5:a4:16:d5:27:cf:0a:bf:eb: 93:b0:c1:a4:8a:ed:33:d1:ea:62:0a:cb:b0:e5:ae:13:f0:c0: 49:50:6f:32:bf:03:99:36:01:8d:50:e3:a9:2a:f9:af:1b:bd: 05:6c:4f:75:44:d4:05:24:14:8c:51:2f:ad:f7:d1:2f:80:46: 5c:5d:62:99:d7:eb:6d:0b:f2:23:58:2f:8e:82:f5:d9:38:62: bd:c8:e4:ee:dc:d5:1b:4c:73:0d:fe:be:dc:e6:25:09:86:26: f4:c5:00:d9:2d:90:8a:24:56:e6:c7:4f:5c:72:c2:7d:3d:1c: 10:c5:7f:3f:2d:43:cf:ec:53:8d:d8:4d:f7:45:cf:5a:70:29: c7:ac:1d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZCQbFA4myycCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MmU4NmZiZDUtZWJkYS00YzQwLWE3M2YtOTkzODE1YzczNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+tnPzKTabA7mrwAKtadNAlV+PW+UtVbW8Oh qxjnJ1u8ME7zUYD44yVe2BVSH8ob5pfRO15LuSTvrVPk1TNlv4VgyyyCvEiJXZPm CR8e0+Y08ZpNwrzQ9RVdrpq95navmTjGrGJ0l8jiQXy6qQHdcqCkZYDQzJsRb7S4 23hIA3+9LJxNnw5qSq8ftmWPSktXEEkblg0LAt0nVdKbAeW1fGWEFvrd0Bs6VRHF hbkN6QZlIFaLwLeC5lxB9copbGnQzIxWu0uIAmv1xZhGBzeFEbGueBOyM3zuPqcF ksTEa5wmZ8EwWgPawHS38iaUqWsfzK1m5YrEHxJGe65K2DkK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG88HqlbQvRSaK4bYbPSu0ydFxLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvY2IzOTIyOGQtMzI2YS0z YTQzLWIyYjItMjMzOWViNWFiNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGk/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPnWhzv390tyD2U2DZ7dKSSe0gMNOf67iDUnkWRhd/GOaajQDBrpRjK FTbrkzBU3K9wYenMuPoAbH2QF6enC1GRYOH/XvxpOV7vpjnuRHCrxvGi8BoSiZhl uw1GdCBE8eBBpJzZVWRtpYXHkkQF6fhLW9OurvWkFtUnzwq/65OwwaSK7TPR6mIK y7DlrhPwwElQbzK/A5k2AY1Q46kq+a8bvQVsT3VE1AUkFIxRL6330S+ARlxdYpnX 620L8iNYL46C9dk4Yr3I5O7c1RtMcw3+vtzmJQmGJvTFANktkIokVubHT1xywn09 HBDFfz8tQ8/sU43YTfdFz1pwKcesHVk= -----END CERTIFICATE-----Generated at Tue Apr 15 06:06:23 2025 by rpki-client