$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b104a5e2-e68c-3cbf-94bb-3a6131d11d03.roa File: b104a5e2-e68c-3cbf-94bb-3a6131d11d03.roa (raw, json) Hash identifier: xWVdzIcYWHq878s6uvMccx1vX50j7XMKlycYJ5HzFC4= Subject key identifier: 0B:0D:9B:14:CE:DD:97:32:4C:A2:A5:A1:BD:F6:72:BA:A8:21:F6:29 Certificate issuer: /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Certificate serial: 010D0C9F43285848AC60C3420E7A8CB677195A80 Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b104a5e2-e68c-3cbf-94bb-3a6131d11d03.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 5650 IP address blocks: 167.253.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:c3:42:0e:7a:8c:b6:77:19:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=f7429479-dc31-4364-8a1e-67e8d8b62ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f3:cb:58:91:e4:fe:8d:63:6b:ca:3e:48:0c: 5a:6a:71:d8:8b:15:e1:be:98:a6:4c:05:8e:9f:34: c8:4f:de:2c:c3:04:89:08:ee:0f:5f:d5:33:1e:2b: 15:c2:c3:89:6f:9e:d2:00:47:d6:1c:85:5d:a9:96: 7a:ae:6d:3d:b0:17:15:84:15:3b:bd:b9:50:e2:1f: 9d:2c:08:b4:5f:9f:f1:5f:8e:36:0c:dc:c5:99:45: 82:19:9f:b3:c0:64:b7:10:b7:cc:18:6f:a5:70:fd: 05:5a:ac:b7:aa:48:d3:6b:9e:84:3e:1c:72:98:1e: 5f:1a:3d:ec:5a:16:d5:95:29:0b:16:da:da:dd:95: 62:79:72:ba:97:4c:3d:3d:53:ae:e6:3f:90:91:a1: a2:ff:65:7c:ab:36:9b:33:a2:03:4c:f3:f4:2e:5e: 05:1f:a4:97:7a:17:9e:2a:fc:2f:07:30:4f:ff:9c: b9:90:89:a4:27:24:62:e5:fe:03:4a:30:0f:06:f8: cd:92:90:55:a4:27:7a:c4:b6:43:e7:36:c5:32:2d: 46:eb:dc:6a:ef:fe:be:cc:4a:e5:b2:bf:34:10:a2: b5:86:f2:a6:7b:c8:36:42:5c:de:f7:12:d4:f8:c9: 18:1d:44:3b:bb:7e:df:19:d7:97:f5:15:f7:f0:88: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0D:9B:14:CE:DD:97:32:4C:A2:A5:A1:BD:F6:72:BA:A8:21:F6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b104a5e2-e68c-3cbf-94bb-3a6131d11d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl X509v3 Authority Key Identifier: keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer sbgp-ipAddrBlock: critical IPv4: 167.253.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:71:8c:f4:12:26:85:7a:08:ec:6f:04:dd:3b:3d:1f:90:9a: 20:36:e8:fd:c6:a3:21:f7:52:1d:23:9b:54:00:62:b5:03:f4: eb:64:7d:e4:5a:17:9f:8b:9e:e2:17:39:7e:c5:65:28:06:1b: a2:6e:41:d4:23:1e:c6:27:a8:2f:f5:6d:01:52:62:77:47:05: 47:10:02:94:ed:f5:6f:ca:a0:f6:65:39:3e:65:9b:da:91:d4: 67:33:77:fd:a4:cc:a5:5e:aa:a7:18:50:58:e5:03:a0:71:f1: e8:74:48:ac:96:c5:3f:d8:58:de:e6:5f:82:32:8a:c6:e5:16: c3:ee:6c:a4:84:89:b5:ad:aa:87:e7:09:87:88:39:17:bf:8a: 07:d7:5e:d0:ff:56:11:51:6a:c8:08:2b:0a:95:43:d9:bf:81: 38:ac:a4:48:a7:df:ce:d3:4f:da:be:c0:9e:0d:0e:de:54:d1: 7e:e0:7b:2f:04:32:0d:41:19:8e:67:97:3f:04:c0:e4:60:71: 32:58:e0:a3:a1:33:cf:f7:1a:04:df:ae:fa:ed:32:74:21:c7: ba:b6:90:d8:a6:bf:da:31:49:79:1c:43:dc:35:1c:3a:93:ab: 0f:7d:55:ed:9f:65:fd:3c:c2:e5:dd:54:dc:c3:cc:8f:07:f2: d9:ad:ae:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYMNCDnqMtncZWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNhNmI2ZjktYTA1Ni00NzFjLWJmOTYtZjJmZDUzMzBk YWM0MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk Zjc0Mjk0NzktZGMzMS00MzY0LThhMWUtNjdlOGQ4YjYyZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvPLWJHk/o1ja8o+SAxaanHYixXhvpimTAWO nzTIT94swwSJCO4PX9UzHisVwsOJb57SAEfWHIVdqZZ6rm09sBcVhBU7vblQ4h+d LAi0X5/xX442DNzFmUWCGZ+zwGS3ELfMGG+lcP0FWqy3qkjTa56EPhxymB5fGj3s WhbVlSkLFtra3ZVieXK6l0w9PVOu5j+QkaGi/2V8qzabM6IDTPP0Ll4FH6SXehee KvwvBzBP/5y5kImkJyRi5f4DSjAPBvjNkpBVpCd6xLZD5zbFMi1G69xq7/6+zErl sr80EKK1hvKme8g2Qlze9xLU+MkYHUQ7u37fGdeX9RX38IijIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsNmxTO3ZcyTKKlob32crqoIfYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yY2E2 YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZkNTMzMGRhYzQvYjEwNGE1ZTItZTY4Yy0z Y2JmLTk0YmItM2E2MTMxZDExZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmNhNmI2ZjktYTA1Ni00NzFjLWJm OTYtZjJmZDUzMzBkYWM0LzJjYTZiNmY5LWEwNTYtNDcxYy1iZjk2LWYyZmQ1MzMw ZGFjNC5jcmwwHwYDVR0jBBgwFoAU0Gj22st2u5o08zsvhIvODS5JlDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yY2E2YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZk NTMzMGRhYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1xjPQSJoV6COxvBN07PR+QmiA26P3GoyH3Uh0jm1QAYrUD9OtkfeRa F5+LnuIXOX7FZSgGG6JuQdQjHsYnqC/1bQFSYndHBUcQApTt9W/KoPZlOT5lm9qR 1Gczd/2kzKVeqqcYUFjlA6Bx8eh0SKyWxT/YWN7mX4IyisblFsPubKSEibWtqofn CYeIORe/igfXXtD/VhFRasgIKwqVQ9m/gTispEin387TT9q+wJ4NDt5U0X7gey8E Mg1BGY5nlz8EwORgcTJY4KOhM8/3GgTfrvrtMnQhx7q2kNimv9oxSXkcQ9w1HDqT qw99Ve2fZf08wuXdVNzDzI8H8tmtrh8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:48 2025 by rpki-client