$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa File: 47631e88-a2aa-356e-a96a-74ad262ed819.roa (raw, json) Hash identifier: qQ1BYjPZCM85eHh9qgs6oIEpQh2N09jkSqVSXD8rWW4= Subject key identifier: CC:C6:7B:93:D4:1C:AE:B0:EC:68:4F:A2:F7:A5:7B:26:3A:24:54:03 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F43285848AC60D1D18BADBBBE5F1D5480 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 150.9.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d1:d1:8b:ad:bb:be:5f:1d:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=84a547f8-f287-47e3-b45f-da4f3236cae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:0b:93:98:d3:05:9a:2d:a1:57:ab:60:52: 27:92:8f:d0:c6:36:ce:9b:94:1d:7e:78:48:21:3e: 9a:c9:6e:e5:9c:21:25:78:21:e4:b7:82:f6:82:4b: 64:3e:f2:e7:16:da:4f:07:9e:d9:66:e9:87:a6:c1: f7:b9:e2:7d:1c:48:ba:cb:87:a3:6a:36:fe:d3:6d: ef:8d:1b:8d:c1:f5:c8:0b:9d:72:48:a7:9a:b1:dc: 75:f9:72:18:ee:51:6d:c4:1a:e4:2e:f2:4a:20:6c: 29:ad:6e:ea:f6:68:2d:93:b1:73:82:ba:e1:62:fa: 4d:48:de:2d:e8:c1:cc:ae:8b:26:dc:97:56:63:98: 45:7b:d8:56:df:4d:81:d4:50:21:1a:75:81:22:93: 65:32:52:28:1b:bd:f1:25:7b:80:de:14:b6:34:75: 37:dd:b3:17:50:a1:24:cf:4e:1b:21:40:34:c6:24: 73:51:24:22:d2:a1:fe:2b:ec:8f:89:bf:7b:b4:b2: ec:94:07:50:7b:ce:bd:bf:99:12:e0:75:18:16:6b: 9e:60:c5:89:3b:7f:22:e0:39:96:57:ce:66:0f:ba: 30:ef:a2:ba:c5:09:d2:61:69:31:02:9c:7b:c4:aa: fc:76:b6:54:8b:9c:28:fc:10:e2:e5:ce:f4:66:67: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C6:7B:93:D4:1C:AE:B0:EC:68:4F:A2:F7:A5:7B:26:3A:24:54:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4d:91:d7:e6:3b:00:f7:aa:13:84:a0:33:c2:fb:53:54:0f: 99:18:b6:2d:c3:36:d6:57:96:56:07:c4:eb:33:19:9b:02:9a: c0:87:d0:c2:78:52:1c:4a:7c:2c:26:a3:32:20:de:fc:35:62: 73:fe:c5:2a:59:5c:cd:ed:0f:b6:b6:a2:49:20:1f:0b:88:02: 26:ad:18:eb:5c:0e:b4:68:e9:63:94:b0:df:75:ac:a8:c0:a5: fb:ed:3c:91:18:9b:a5:dd:de:18:ec:95:de:55:32:44:34:2b: 5c:ed:30:56:7d:0f:cf:82:a0:38:d7:59:ea:96:fe:3a:1d:a9: bb:0a:70:22:f0:a8:33:79:60:87:2c:07:63:8a:8c:17:a0:98: 7b:cc:2e:47:c2:cc:a5:6d:c8:67:fe:44:6c:a2:0e:85:f3:1f: f4:f4:21:bf:dd:52:85:8b:6d:b4:c3:b0:3d:22:36:87:b4:8a: e6:4b:ad:4d:48:5c:82:de:ce:a3:5a:01:41:7e:01:f0:ca:6e: 99:42:70:75:14:cf:98:f2:8d:d8:36:86:cd:8b:3d:41:e1:58: 97:25:70:52:27:e9:77:01:35:0f:cc:cd:79:32:51:ae:7b:4b: dc:3f:b3:cc:df:d8:b1:8f:22:6c:d7:7d:2a:86:3b:ab:0d:cd: 47:e7:5a:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNHRi627vl8dVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk ODRhNTQ3ZjgtZjI4Ny00N2UzLWI0NWYtZGE0ZjMyMzZjYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdILk5jTBZotoVerYFInko/QxjbOm5QdfnhI IT6ayW7lnCEleCHkt4L2gktkPvLnFtpPB57ZZumHpsH3ueJ9HEi6y4ejajb+023v jRuNwfXIC51ySKeasdx1+XIY7lFtxBrkLvJKIGwprW7q9mgtk7FzgrrhYvpNSN4t 6MHMrosm3JdWY5hFe9hW302B1FAhGnWBIpNlMlIoG73xJXuA3hS2NHU33bMXUKEk z04bIUA0xiRzUSQi0qH+K+yPib97tLLslAdQe869v5kS4HUYFmueYMWJO38i4DmW V85mD7ow76K6xQnSYWkxApx7xKr8drZUi5wo/BDi5c70ZmdrNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzGe5PUHK6w7GhPoveleyY6JFQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvNDc2MzFlODgtYTJhYS0z NTZlLWE5NmEtNzRhZDI2MmVkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExNkdfmOwD3qhOEoDPC+1NUD5kYti3DNtZXllYHxOszGZsCmsCH0MJ4 UhxKfCwmozIg3vw1YnP+xSpZXM3tD7a2okkgHwuIAiatGOtcDrRo6WOUsN91rKjA pfvtPJEYm6Xd3hjsld5VMkQ0K1ztMFZ9D8+CoDjXWeqW/jodqbsKcCLwqDN5YIcs B2OKjBegmHvMLkfCzKVtyGf+RGyiDoXzH/T0Ib/dUoWLbbTDsD0iNoe0iuZLrU1I XILezqNaAUF+AfDKbplCcHUUz5jyjdg2hs2LPUHhWJclcFIn6XcBNQ/MzXkyUa57 S9w/s8zf2LGPImzXfSqGO6sNzUfnWps= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:05 2025 by rpki-client