$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa File: ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa (raw, json) Hash identifier: OXvkctHxM/Qq5+MhKuqTAeYFQoIRF2/TTaqkkM1w51o= Subject key identifier: D8:AD:FD:D1:11:96:4B:F8:5F:A9:76:FA:66:22:7B:AE:AB:3E:9F:13 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584863CB02D84B1EC54A815A2280 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 14061 IP address blocks: 134.199.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:02:d8:4b:1e:c5:4a:81:5a:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=3358bd9a-79c1-4943-b55f-049f78d3476a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:87:6c:77:fc:50:cc:a4:ea:a4:31:33:4b:6d: 98:f9:30:a8:2b:43:01:94:6a:7f:7b:c1:e1:9b:e7: 71:66:92:cc:3f:ad:5c:f4:f5:5f:e2:7a:1a:4a:8a: cd:24:66:1c:0c:23:fe:ce:b5:4c:03:23:7d:ba:6a: bc:57:7b:d8:24:a7:5e:94:ca:7d:b5:83:44:5d:f4: 26:78:24:71:c5:ea:1a:fa:93:5c:97:5f:e6:1d:97: 2d:3c:18:5d:b9:ee:49:31:5e:7c:b0:47:a1:37:99: 0e:57:3a:ec:75:f6:b0:6f:a5:93:1b:23:92:be:d9: a7:4d:d3:4e:b5:0b:d2:67:0f:f7:b0:7d:44:bf:66: 07:26:43:b7:6d:9c:39:b4:2f:64:cb:d8:02:8c:03: 49:5b:d8:7e:f6:0b:1a:bd:7f:90:e7:a8:0a:fa:a8: ce:4b:12:8f:f1:87:1d:b4:71:f5:0a:3d:50:7d:84: 64:88:2c:df:2f:54:e0:1d:70:ec:8a:e4:3d:e8:32: bd:86:53:08:fc:92:b7:03:d7:de:c5:ed:91:59:9f: 30:8b:87:c1:c7:c0:aa:57:b8:33:c6:79:80:57:3a: 6d:5b:33:66:b5:06:55:0b:49:04:eb:a8:9e:cd:4a: 5f:fd:b5:9d:d6:2d:e9:41:8e:6a:bb:f9:dd:5c:3a: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:FD:D1:11:96:4B:F8:5F:A9:76:FA:66:22:7B:AE:AB:3E:9F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 134.199.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:35:49:4e:9b:90:3e:15:be:60:32:50:9a:cc:bd:11:ea:b5: 22:c9:ec:c6:5c:88:ec:80:f2:ee:72:bc:1d:4b:d5:6e:74:b5: e3:79:b8:d9:b5:f5:21:9e:6d:44:fe:10:8a:7a:ce:b9:04:be: 32:30:97:82:9c:df:4c:60:f8:84:a2:25:c4:24:77:30:05:ba: ef:f2:70:92:9f:54:d9:87:d8:5a:76:7d:1e:11:e3:36:ae:0a: 83:ec:d7:fc:3e:79:c6:2a:4d:1b:42:48:f7:fe:c1:44:6b:98: 43:83:30:c0:4e:59:61:ee:0f:c2:53:b6:bb:0e:8a:86:fc:2c: 40:cc:f8:82:e7:98:0d:d7:d0:15:c5:86:01:7c:5a:cc:0f:f2: 55:62:53:28:40:ec:d4:7c:ec:68:8b:c4:d5:8a:eb:24:d6:85: 69:e3:80:51:88:32:30:d2:f4:bb:0c:d7:95:dd:79:52:fb:e7: a7:0b:73:a0:ad:8f:6b:52:5e:97:46:7c:a8:8e:39:c6:9d:85: 8e:91:83:51:ca:bc:a9:59:ce:f3:94:2e:47:40:1b:2c:b8:8c: 21:c6:46:75:18:65:1e:5f:5d:30:84:f4:c5:78:82:63:a8:59: 27:61:c4:8e:e6:86:7b:09:0e:4a:b3:41:4c:b1:04:3f:54:97: a7:53:ec:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywLYSx7FSoFaIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk MzM1OGJkOWEtNzljMS00OTQzLWI1NWYtMDQ5Zjc4ZDM0NzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYdsd/xQzKTqpDEzS22Y+TCoK0MBlGp/e8Hh m+dxZpLMP61c9PVf4noaSorNJGYcDCP+zrVMAyN9umq8V3vYJKdelMp9tYNEXfQm eCRxxeoa+pNcl1/mHZctPBhdue5JMV58sEehN5kOVzrsdfawb6WTGyOSvtmnTdNO tQvSZw/3sH1Ev2YHJkO3bZw5tC9ky9gCjANJW9h+9gsavX+Q56gK+qjOSxKP8Ycd tHH1Cj1QfYRkiCzfL1TgHXDsiuQ96DK9hlMI/JK3A9fexe2RWZ8wi4fBx8CqV7gz xnmAVzptWzNmtQZVC0kE66iezUpf/bWd1i3pQY5qu/ndXDpNcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNit/dERlkv4X6l2+mYie66rPp8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYWUyOWUxYzMtOGU4Ny0z YjYwLWFiOGYtYzFmNjU2NGU1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhseAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY1SU6bkD4VvmAyUJrMvRHqtSLJ7MZciOyA8u5yvB1L1W50teN5uNm1 9SGebUT+EIp6zrkEvjIwl4Kc30xg+ISiJcQkdzAFuu/ycJKfVNmH2Fp2fR4R4zau CoPs1/w+ecYqTRtCSPf+wURrmEODMMBOWWHuD8JTtrsOiob8LEDM+ILnmA3X0BXF hgF8WswP8lViUyhA7NR87GiLxNWK6yTWhWnjgFGIMjDS9LsM15XdeVL756cLc6Ct j2tSXpdGfKiOOcadhY6Rg1HKvKlZzvOULkdAGyy4jCHGRnUYZR5fXTCE9MV4gmOo WSdhxI7mhnsJDkqzQUyxBD9Ul6dT7DU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:35 2025 by rpki-client