$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa File: fdbb518e-6301-32f6-9311-491af1e25efe.roa (raw, json) Hash identifier: 0b0ea7Jsp0mjQkWe3awJSlZtCqlI7aOUcTLWqaYEG1Y= Subject key identifier: 1A:60:2F:0B:93:55:B2:06:FE:C2:4F:DE:B8:CD:76:08:7F:48:6A:12 Certificate issuer: /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Certificate serial: 010D0C9F43285848B8F0CA79C579395085B3B1C0 Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 394434 IP address blocks: 168.86.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:ca:79:c5:79:39:50:85:b3:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=7a43b52e-5395-4239-b4e9-2e2ff6bcce91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e0:66:c2:a5:7f:79:aa:99:19:37:fa:82:45: 27:7c:31:23:25:09:f5:5e:94:c3:cd:0e:53:76:bf: 85:9d:a8:a2:88:4d:b4:50:3b:81:54:61:39:12:09: 85:75:89:ca:05:8c:58:da:c6:e8:d9:ec:71:d6:77: 12:54:4e:6a:9b:ce:f9:a2:27:80:fc:3a:95:cb:3e: 6a:f0:89:75:cf:c7:29:b5:65:22:65:0d:bc:de:93: e5:ae:e7:b0:17:3c:cd:61:8a:92:54:68:a0:52:3f: 7e:29:81:4d:e1:f5:50:8c:15:df:05:a0:04:89:d6: d2:5e:0b:e6:5a:03:db:9b:96:21:d5:5b:38:bf:4b: 02:d3:b2:21:2a:d4:48:e4:70:98:d3:84:5b:c7:f9: 5d:65:34:98:47:61:66:34:fc:61:a6:cf:c7:6e:85: 21:a5:2e:02:58:32:c9:73:3c:92:96:ef:35:ae:38: 06:d0:ec:80:c7:16:87:64:78:66:ec:7d:29:a6:da: 01:4b:1b:8f:cb:94:91:27:d0:e2:e0:d8:01:e8:d5: d9:09:0a:cb:92:4d:a1:2b:8f:b7:f0:58:97:81:55: f7:dc:1c:d2:fc:e9:35:d4:55:38:04:aa:38:a4:9f: 0e:4e:48:0e:86:ec:89:4a:da:15:5b:1a:58:2c:34: 5b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:60:2F:0B:93:55:B2:06:FE:C2:4F:DE:B8:CD:76:08:7F:48:6A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl X509v3 Authority Key Identifier: keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer sbgp-ipAddrBlock: critical IPv4: 168.86.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e8:4c:71:9e:dc:d2:db:fa:e3:4b:8a:d4:d1:e8:c8:e1:d5: f0:ad:39:09:66:f8:89:d7:42:8d:0b:2f:59:f1:82:fa:43:df: ee:ce:c1:24:5b:6f:19:b9:50:e9:7a:6b:8e:5a:0d:06:59:a8: 03:57:c6:07:9c:cd:93:f0:02:dc:06:ea:01:4c:96:33:08:20: 0f:24:dc:2f:bc:a8:7e:28:e2:df:55:63:aa:7a:5d:8f:35:05: 0e:4f:d1:6e:5d:8c:6b:39:d5:5c:b8:98:33:d4:85:d5:b5:51: 7a:4f:a9:20:b9:7c:db:4a:9b:a5:4a:f9:75:3b:3c:ab:07:f7: 08:e7:7f:1f:56:ab:8c:70:40:3b:5a:85:1d:47:0f:7f:ca:a8: 7c:6f:8f:37:12:01:21:03:23:91:7c:04:38:6d:0c:ab:b6:d5: 85:da:c6:d0:9c:d0:54:a2:9c:f9:3f:75:32:ce:0e:6f:a9:e6: d2:65:f9:cc:00:49:e8:1f:30:b4:27:3b:22:13:96:dd:8d:20: 2b:e9:ac:0b:a9:5b:e6:ae:0f:57:c3:5f:46:08:1d:44:d0:4a: 39:1c:38:e6:7b:94:5f:88:d8:f9:6f:97:dd:61:0e:04:5e:d8: c3:ba:4f:3e:cb:f1:e2:a6:ce:5d:1c:90:e4:4d:53:0b:67:71: 49:0a:4a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48Mp5xXk5UIWzscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjMzJlNTItNzkxOS00YWQ0LWE0ODYtNGJlZDIzYTVj M2FiMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk N2E0M2I1MmUtNTM5NS00MjM5LWI0ZTktMmUyZmY2YmNjZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheBmwqV/eaqZGTf6gkUnfDEjJQn1XpTDzQ5T dr+FnaiiiE20UDuBVGE5EgmFdYnKBYxY2sbo2exx1ncSVE5qm875oieA/DqVyz5q 8Il1z8cptWUiZQ283pPlruewFzzNYYqSVGigUj9+KYFN4fVQjBXfBaAEidbSXgvm WgPbm5Yh1Vs4v0sC07IhKtRI5HCY04Rbx/ldZTSYR2FmNPxhps/HboUhpS4CWDLJ czySlu81rjgG0OyAxxaHZHhm7H0pptoBSxuPy5SRJ9Di4NgB6NXZCQrLkk2hK4+3 8FiXgVX33BzS/Ok11FU4BKo4pJ8OTkgOhuyJStoVWxpYLDRblQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpgLwuTVbIG/sJP3rjNdgh/SGoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMz MmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVkMjNhNWMzYWIvZmRiYjUxOGUtNjMwMS0z MmY2LTkzMTEtNDkxYWYxZTI1ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGRjMzJlNTItNzkxOS00YWQ0LWE0 ODYtNGJlZDIzYTVjM2FiLzBkYzMyZTUyLTc5MTktNGFkNC1hNDg2LTRiZWQyM2E1 YzNhYi5jcmwwHwYDVR0jBBgwFoAU5f0U87CPcdIf6cpjpPRwU/jwArIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMzMmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVk MjNhNWMzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqFaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfoTHGe3NLb+uNLitTR6Mjh1fCtOQlm+InXQo0LL1nxgvpD3+7OwSRb bxm5UOl6a45aDQZZqANXxgeczZPwAtwG6gFMljMIIA8k3C+8qH4o4t9VY6p6XY81 BQ5P0W5djGs51Vy4mDPUhdW1UXpPqSC5fNtKm6VK+XU7PKsH9wjnfx9Wq4xwQDta hR1HD3/KqHxvjzcSASEDI5F8BDhtDKu21YXaxtCc0FSinPk/dTLODm+p5tJl+cwA SegfMLQnOyITlt2NICvprAupW+auD1fDX0YIHUTQSjkcOOZ7lF+I2Plvl91hDgRe 2MO6Tz7L8eKmzl0ckORNUwtncUkKSog= -----END CERTIFICATE-----Generated at Fri Apr 11 23:02:42 2025 by rpki-client