$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa File: 5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa (raw, json) Hash identifier: rF9Bb6wkQ3IaR1RyLNyyeDXEv1N+KWZO0f56GDUzigU= Subject key identifier: 01:34:5E:C4:AC:51:E0:4B:0D:CD:71:BB:13:41:69:43:5A:26:5A:C5 Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Certificate serial: 010D0C9F43285848960B57780D60F207CF422AE0 Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 131.226.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:57:78:0d:60:f2:07:cf:42:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=1e2b1a55-d453-462c-9e5b-32c75659e19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6e:b6:f1:55:05:ef:14:ca:87:18:2b:f8:d6: 17:54:3f:ce:58:64:05:ee:a3:e4:07:18:34:21:eb: c3:32:4f:e9:1f:3d:b2:d6:14:06:94:fd:b0:3f:22: bd:50:86:52:ab:35:74:f1:fd:cc:26:5b:51:d1:5a: 42:2b:3a:80:a2:0f:33:68:e3:70:a5:9b:0f:a6:3f: 69:98:83:1b:8c:25:ef:1f:e1:9b:fe:e4:63:c4:5f: dc:15:c7:34:17:af:6c:7e:30:d2:9f:6f:a9:ba:fc: 33:6e:4f:5d:b8:34:94:67:fd:ee:de:6a:f4:4f:3b: 3e:e7:7f:67:1b:e6:ec:e3:93:e0:a3:7c:79:3b:16: cc:a5:46:dd:5d:cd:e0:4a:9a:93:85:79:64:c0:4a: 8b:2c:86:8f:f3:20:f4:fc:b5:6e:49:19:1b:5e:e2: be:2a:82:41:a4:57:39:14:66:29:a2:4f:88:3e:5c: ca:5f:84:0c:6f:90:c6:44:01:d1:61:5d:bb:a3:e2: a9:73:bc:69:11:20:98:a1:9c:30:0f:38:19:e7:e6: f6:ca:ce:b5:db:b4:1a:47:5c:13:f8:bd:76:ec:46: 9d:2b:ba:49:be:ad:ca:42:4c:00:03:db:55:43:6c: 03:02:32:f6:0c:56:3f:66:73:83:1e:d8:56:7d:10: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:34:5E:C4:AC:51:E0:4B:0D:CD:71:BB:13:41:69:43:5A:26:5A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl X509v3 Authority Key Identifier: keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer sbgp-ipAddrBlock: critical IPv4: 131.226.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:88:50:05:26:a6:d8:ab:d6:6a:d1:42:1a:b2:02:63:eb:c9: 5f:e2:c1:07:bf:b7:5d:06:71:39:ec:49:e1:ec:58:4c:26:13: d8:84:3e:61:0f:1e:df:b6:4f:10:28:5f:39:3e:ba:ba:e8:aa: 45:14:5c:4c:0a:e8:c3:28:28:85:76:d6:31:a8:83:fd:d4:f9: a0:b1:ba:84:fe:98:42:ce:b5:03:8c:4a:69:b0:8a:35:30:a4: 2c:fa:a6:96:e2:18:86:d0:59:cb:94:c4:ee:8b:11:a1:0c:48: 57:76:cb:8f:6c:e7:13:bd:48:a8:f8:2c:03:1a:54:d4:90:52: c0:53:05:89:e6:25:d8:c3:b1:64:23:bc:b5:ec:13:08:d2:d8: bb:68:45:cc:a8:5d:8b:33:61:6b:67:9c:50:03:b2:36:fa:eb: 63:2f:0c:79:89:88:2a:05:d9:8d:c6:4f:d1:99:4b:1a:99:93: 05:67:66:74:ce:f2:de:1f:14:46:c4:5b:74:13:b7:ae:6a:d1: d3:01:52:3c:a6:38:ec:c2:2a:80:cc:90:de:b5:26:54:fe:6a: 93:09:5f:be:79:0a:5b:33:20:4c:74:66:ea:07:41:9f:1c:4d: f7:ec:c7:9d:57:91:35:15:d1:ef:31:e6:a1:67:6c:bc:17:92: 20:c6:bf:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1d4DWDyB89CKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNh NzU1MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MWUyYjFhNTUtZDQ1My00NjJjLTllNWItMzJjNzU2NTllMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm628VUF7xTKhxgr+NYXVD/OWGQF7qPkBxg0 IevDMk/pHz2y1hQGlP2wPyK9UIZSqzV08f3MJltR0VpCKzqAog8zaONwpZsPpj9p mIMbjCXvH+Gb/uRjxF/cFcc0F69sfjDSn2+puvwzbk9duDSUZ/3u3mr0Tzs+539n G+bs45Pgo3x5OxbMpUbdXc3gSpqThXlkwEqLLIaP8yD0/LVuSRkbXuK+KoJBpFc5 FGYpok+IPlzKX4QMb5DGRAHRYV27o+Kpc7xpESCYoZwwDzgZ5+b2ys6127QaR1wT +L127EadK7pJvq3KQkwAA9tVQ2wDAjL2DFY/ZnODHthWfRB+XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAE0XsSsUeBLDc1xuxNBaUNaJlrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2 ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvNWE3ZTMyNDMtZTEwZS0z OWJjLWI1YzQtYTYzYWZiNjNiOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWY4NmZlNTItNWI3Ny00NmI2LTk1 MDItNTFjY2NjZjNhNzU1L2FmODZmZTUyLTViNzctNDZiNi05NTAyLTUxY2NjY2Yz YTc1NS5jcmwwHwYDVR0jBBgwFoAUpCnYdby96fIjd9cnL82GRWj9YvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNj Y2NmM2E3NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg+K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSIUAUmptir1mrRQhqyAmPryV/iwQe/t10GcTnsSeHsWEwmE9iEPmEP Ht+2TxAoXzk+urroqkUUXEwK6MMoKIV21jGog/3U+aCxuoT+mELOtQOMSmmwijUw pCz6ppbiGIbQWcuUxO6LEaEMSFd2y49s5xO9SKj4LAMaVNSQUsBTBYnmJdjDsWQj vLXsEwjS2LtoRcyoXYszYWtnnFADsjb662MvDHmJiCoF2Y3GT9GZSxqZkwVnZnTO 8t4fFEbEW3QTt65q0dMBUjymOOzCKoDMkN61JlT+apMJX755ClszIEx0ZuoHQZ8c Tffsx51XkTUV0e8x5qFnbLwXkiDGv3A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:54 2025 by rpki-client