$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa File: 23168d98-beae-3197-8375-14702f665631.roa (raw, json) Hash identifier: 7WI1uYqEKARiskyG2SUM4nXprU5dd0DuS95AidCGn3c= Subject key identifier: 16:F8:1A:B7:24:E8:39:30:53:77:D6:31:87:CE:98:E2:BE:4C:3A:E2 Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F43285848E16BE69B1B6C608FAEFAC840 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 3676 IP address blocks: 128.255.0.0/16 maxlen: 24 129.255.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e6:9b:1b:6c:60:8f:ae:fa:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=54b83d34-e1a2-4533-ba44-00577bb895fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:1d:b2:fa:d7:f2:90:f5:8c:0e:a6:b4:17: a8:9e:e3:c3:a3:4f:84:fe:b8:0c:29:a8:34:97:e5: 0c:11:ab:41:db:2d:d7:6f:30:0e:57:79:de:d1:4d: 88:9a:8c:93:c7:77:85:55:13:e0:99:a0:7e:99:a8: 25:8a:97:ec:bc:27:71:68:49:22:bc:fc:f7:ad:f7: 25:2b:38:c7:fe:4e:60:ad:90:de:82:52:40:be:ad: 98:79:b4:29:71:32:f0:e6:1f:79:64:b3:95:e3:cf: df:6b:19:78:5e:59:db:7d:06:50:8a:99:be:b8:d3: bb:5e:9b:8e:9a:44:c5:60:c8:be:c4:f8:6d:f9:cb: 28:61:65:16:da:fe:a4:19:e5:18:b4:1a:83:f0:08: 0c:5e:40:5c:95:b2:41:ec:a9:b5:28:c8:20:50:78: ee:30:18:dd:fe:3d:18:2a:45:24:01:80:f0:77:9f: d1:35:53:b9:54:e2:f4:64:fc:42:e3:2a:37:c9:f5: 19:af:de:c4:f1:1a:dd:74:0d:ee:5e:b5:3d:63:e8: 93:bf:fd:73:7d:1b:c8:de:01:f2:9d:b9:94:44:e9: e9:60:86:52:21:e3:a3:b8:70:23:08:86:b8:b5:54: 58:03:40:46:26:bf:8c:95:0b:ec:04:f9:5e:73:2d: fb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F8:1A:B7:24:E8:39:30:53:77:D6:31:87:CE:98:E2:BE:4C:3A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ee:d6:be:30:45:88:f2:20:8c:a3:ec:a7:5a:32:98:93:b6: 4d:0e:99:70:18:49:7d:4d:fd:da:ed:74:4f:7f:fa:ce:f5:3a: ad:9c:21:bb:55:f9:b0:d0:21:71:2a:26:c3:31:be:41:13:58: 51:5d:ed:89:e6:ca:59:ae:e7:03:a8:b3:c8:f8:17:13:6f:47: 6c:69:21:c4:63:84:81:8f:ab:92:6b:3a:74:0c:91:13:ba:dd: fd:a2:83:51:f2:b5:7a:3d:84:2a:ca:f0:84:1b:30:b9:e4:96: c5:88:7c:30:d1:0a:e2:22:2f:69:61:e1:07:74:d1:20:1f:67: 83:7c:46:c6:a6:a7:42:55:e4:e0:77:4e:4f:76:d0:f1:91:1e: 96:c7:05:74:da:99:c5:66:0e:c5:87:b6:23:2e:c8:35:a2:e7: 4a:01:bc:4a:26:49:a1:cd:45:83:ee:aa:57:d8:63:2a:06:19: 09:05:7d:46:fb:09:24:e6:76:14:1d:4e:cb:48:bd:88:9f:08: 03:b2:fa:cc:15:27:aa:af:ef:cb:c5:2f:51:a4:6a:93:42:77: 9b:7a:b9:fb:59:dc:9b:9e:77:33:b3:bd:b5:61:85:b8:a8:f0: 8c:b3:03:39:6a:84:b7:19:d9:38:97:9f:ab:43:81:b6:84:5e: a9:82:0d:39 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEjha+abG2xgj676yEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NTRiODNkMzQtZTFhMi00NTMzLWJhNDQtMDA1NzdiYjg5NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvEdsvrX8pD1jA6mtBeonuPDo0+E/rgMKag0 l+UMEatB2y3XbzAOV3ne0U2ImoyTx3eFVRPgmaB+maglipfsvCdxaEkivPz3rfcl KzjH/k5grZDeglJAvq2YebQpcTLw5h95ZLOV48/faxl4XlnbfQZQipm+uNO7XpuO mkTFYMi+xPht+csoYWUW2v6kGeUYtBqD8AgMXkBclbJB7Km1KMggUHjuMBjd/j0Y KkUkAYDwd5/RNVO5VOL0ZPxC4yo3yfUZr97E8RrddA3uXrU9Y+iTv/1zfRvI3gHy nbmUROnpYIZSIeOjuHAjCIa4tVRYA0BGJr+MlQvsBPlecy37BQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFBb4Grck6DkwU3fWMYfOmOK+TDriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMjMxNjhkOTgtYmVhZS0z MTk3LTgzNzUtMTQ3MDJmNjY1NjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgP8DAwCB /zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCn7ta+MEWI8iCMo+ynWjKYk7ZNDplwGEl9Tf3a7XRPf/rO9Tqt nCG7Vfmw0CFxKibDMb5BE1hRXe2J5spZrucDqLPI+BcTb0dsaSHEY4SBj6uSazp0 DJETut39ooNR8rV6PYQqyvCEGzC55JbFiHww0QriIi9pYeEHdNEgH2eDfEbGpqdC VeTgd05PdtDxkR6WxwV02pnFZg7Fh7YjLsg1oudKAbxKJkmhzUWD7qpX2GMqBhkJ BX1G+wkk5nYUHU7LSL2InwgDsvrMFSeqr+/LxS9RpGqTQnebern7Wdybnnczs721 YYW4qPCMswM5aoS3Gdk4l5+rQ4G2hF6pgg05 -----END CERTIFICATE-----Generated at Fri Apr 11 23:35:30 2025 by rpki-client