$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa File: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (raw, json) Hash identifier: 8w1jo/THoIY3AXyvfRf58BQsxmwfvEwKvEXcIKzBpeg= Subject key identifier: BB:DF:0B:32:33:6A:81:8B:39:FF:BD:8D:D3:97:4E:13:82:BC:ED:0C Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F432858494CC93A55AC8B64974CF6C100 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 26258 IP address blocks: 144.29.0.0/16 maxlen: 24 144.29.0.0/17 maxlen: 24 144.29.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3a:55:ac:8b:64:97:4c:f6:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=28f07d73-9c24-4e7e-bf15-919d10cefe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:95:50:4b:e3:db:bb:4b:fb:d3:c3:99:78:2d: a5:b8:58:12:d0:5a:e3:18:07:66:e9:e5:40:75:d1: 11:62:a4:35:16:38:dd:77:87:c7:c3:dc:96:1d:f0: 6b:45:87:48:36:66:9c:3c:d2:7c:4c:f8:4a:da:db: 06:73:ee:bd:cd:36:65:88:d0:83:6a:dd:85:a9:ff: b3:51:84:b3:80:3c:3f:bf:54:2f:27:fd:c5:df:8f: ca:5b:c6:c8:d5:82:82:4d:29:fd:d1:6e:25:c1:80: cd:3c:dd:eb:18:5b:2f:1e:ec:ad:c1:98:48:e3:cd: a6:f6:57:7b:61:35:21:9b:71:6f:4d:56:f2:33:75: c3:e0:db:3f:a8:01:df:eb:0c:10:0b:88:04:2b:f0: 03:88:cc:e4:62:b9:b4:12:f2:22:22:e8:cd:fd:f9: 3a:60:47:cf:10:f0:0f:e5:83:e0:25:e5:8e:15:0f: 01:fb:c8:07:9d:fd:ac:b0:05:58:1f:71:17:5e:ee: 99:27:1f:99:b0:9d:fa:46:c1:7c:5b:69:87:a7:1b: f6:38:71:f8:00:1d:70:c6:c6:ae:ee:af:0d:d4:4a: 29:fd:f2:2a:77:16:7f:bf:ee:83:35:ee:ab:c7:ba: 26:bd:5e:3d:34:1d:ab:b7:f3:eb:d9:bc:62:9d:f6: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DF:0B:32:33:6A:81:8B:39:FF:BD:8D:D3:97:4E:13:82:BC:ED:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:64:50:95:f6:cf:a9:54:b8:28:a4:ff:16:52:3e:e3:85:a7: 80:14:5f:a2:4d:f2:a7:9a:a5:5b:c0:d7:fa:84:89:28:fa:ca: fc:ad:17:96:90:45:c7:e0:72:90:d4:f3:a0:d9:f1:b8:77:0d: 3a:f0:f2:fe:28:00:31:bd:88:c5:e8:35:e4:37:b3:08:67:eb: bb:d6:ac:ba:4d:75:5b:76:7e:73:fa:ec:21:4d:1d:77:8e:92: b2:cc:ad:d0:5e:d5:ed:a4:31:4f:2c:4b:cf:f8:0d:85:0d:e0: 29:3c:10:e5:5e:5b:30:84:98:77:ca:66:6b:c1:3a:c8:9f:b3: 5f:9d:38:17:7a:ba:6a:b5:7e:43:63:49:f4:38:bf:df:c0:53: 91:cb:e4:05:4f:f2:62:0c:d2:a1:1e:d0:de:9b:35:06:eb:85: b9:e9:b0:5e:f1:33:83:07:c5:00:a5:50:02:d9:6c:05:30:e4: 7b:ec:d6:ff:95:12:5e:95:bf:10:5f:7e:e3:b7:b2:e0:a9:3f: 03:5b:9a:e4:21:6a:01:67:d9:db:40:60:87:d9:b2:d2:40:d9: a7:9b:1e:cc:5a:13:a1:f4:c2:9d:b0:dd:4d:36:5a:d6:80:33: 3f:06:48:62:18:5b:e3:bf:c2:75:e3:98:91:35:f7:77:81:49: 25:96:a8:81 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElMyTpVrItkl0z2wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MjhmMDdkNzMtOWMyNC00ZTdlLWJmMTUtOTE5ZDEwY2VmZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5VQS+Pbu0v708OZeC2luFgS0FrjGAdm6eVA ddERYqQ1Fjjdd4fHw9yWHfBrRYdINmacPNJ8TPhK2tsGc+69zTZliNCDat2Fqf+z UYSzgDw/v1QvJ/3F34/KW8bI1YKCTSn90W4lwYDNPN3rGFsvHuytwZhI482m9ld7 YTUhm3FvTVbyM3XD4Ns/qAHf6wwQC4gEK/ADiMzkYrm0EvIiIujN/fk6YEfPEPAP 5YPgJeWOFQ8B+8gHnf2ssAVYH3EXXu6ZJx+ZsJ36RsF8W2mHpxv2OHH4AB1wxsau 7q8N1Eop/fIqdxZ/v+6DNe6rx7omvV49NB2rt/Pr2bxinfYv7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLvfCzIzaoGLOf+9jdOXThOCvO0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvNTNjY2FlMDYtNGVhYy0z MzA5LThkZTItMjRmNjI2MjRmY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPGRQlfbPqVS4KKT/FlI+44WngBRfok3yp5qlW8DX+oSJKPrK/K0XlpBF x+BykNTzoNnxuHcNOvDy/igAMb2Ixeg15DezCGfru9asuk11W3Z+c/rsIU0dd46S ssyt0F7V7aQxTyxLz/gNhQ3gKTwQ5V5bMISYd8pma8E6yJ+zX504F3q6arV+Q2NJ 9Di/38BTkcvkBU/yYgzSoR7Q3ps1BuuFuemwXvEzgwfFAKVQAtlsBTDke+zW/5US XpW/EF9+47ey4Kk/A1ua5CFqAWfZ20Bgh9my0kDZp5sezFoTofTCnbDdTTZa1oAz PwZIYhhb47/CdeOYkTX3d4FJJZaogQ== -----END CERTIFICATE-----Generated at Fri Apr 11 23:06:03 2025 by rpki-client