$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa File: 2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa (raw, json) Hash identifier: MjSOjlo1YYL2cdhwTC8Kh5hukRz0ifQ08eavLB5AkF4= Subject key identifier: 1F:93:4A:05:22:4A:01:D8:E9:A9:F7:D2:D1:D3:71:F0:A5:54:B2:94 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F43285848DEA11D6A5E187847277DCFC0 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 14977 IP address blocks: 137.85.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1d:6a:5e:18:78:47:27:7d:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=e255bf7b-203f-40aa-a1d7-a434e15d3145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:9e:9b:1b:e1:88:1c:31:e2:94:15:18:4a: 0e:0a:b8:2d:ae:0a:76:2c:d1:0d:36:bf:f9:6e:d4: 62:93:d2:82:c2:3b:cc:db:6c:77:f2:45:f4:d4:2d: ab:f0:4f:aa:97:cc:2d:98:61:a4:5f:25:6d:4a:4a: 82:e7:fa:aa:44:49:cc:08:52:1f:74:fc:ec:b0:b3: 4f:a0:08:90:14:6d:9d:3c:34:ce:12:f9:00:03:ee: 67:e1:90:a5:b0:49:58:d1:60:19:05:28:62:cf:b7: 68:45:3e:53:8d:57:20:da:54:0f:1f:8e:24:da:de: 80:56:7d:30:4d:a3:fe:5d:80:49:7c:ad:fb:35:dd: 19:88:c2:b6:14:fe:c4:81:ed:9c:e0:7f:66:b7:f4: 56:65:01:7d:d2:2c:d8:b6:28:80:08:b8:36:cd:8e: 37:99:a2:dd:c9:aa:99:c8:7c:a7:d9:63:a6:2f:6d: dc:94:da:ac:40:05:76:cc:c5:d8:a5:f9:55:18:1c: af:2e:52:1e:f3:7d:ab:97:16:d9:90:e2:3a:e8:f6: e9:2f:0c:cb:77:2e:49:b8:83:aa:8e:69:fe:ec:ad: 3a:99:98:03:12:db:45:ab:1b:0d:b6:ca:5f:07:cf: f1:71:8a:d2:de:92:02:02:72:89:8c:95:0c:1a:93: b9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:4A:05:22:4A:01:D8:E9:A9:F7:D2:D1:D3:71:F0:A5:54:B2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.85.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a0:ab:98:f4:02:fb:74:c6:61:0b:13:ba:18:d8:3c:3e:8e: 33:f4:2f:0b:3f:30:ab:a6:da:ea:f8:c2:54:e3:4f:6b:e2:73: 90:4e:07:7a:40:2c:4d:cb:46:ce:02:3b:20:4b:c3:c2:17:c1: b8:31:a5:08:ba:8b:39:b5:21:97:66:d4:b1:04:7e:0b:5a:57: 71:68:36:38:23:1b:8c:0e:a3:64:cf:d3:9b:83:2e:e3:68:0b: bc:b3:11:b3:c6:35:1b:65:e5:6c:25:bd:f1:56:1a:d1:03:3b: 2d:71:5f:b7:6a:a2:70:a8:9c:88:90:64:58:2a:aa:96:65:4c: 36:3f:66:d4:42:ad:94:ae:60:c7:9b:63:5c:a6:f7:54:42:45: 21:4c:72:d5:e0:09:ba:3a:d5:19:b7:2a:3e:3b:a9:88:cb:9f: 96:d2:fc:6c:f8:7a:27:f3:6c:2c:e5:e0:39:8d:8f:6e:ba:84: a4:d4:bd:87:82:25:c6:c5:7a:7f:b5:b8:d4:09:42:10:24:45: b1:02:db:f1:10:2e:5f:a2:55:4e:81:2e:74:9e:20:54:8b:d8: 06:a3:1a:bd:22:8b:88:f5:95:70:9d:55:00:f6:3d:0a:d7:78: 7e:40:ee:3b:d4:f2:27:38:12:6d:fd:30:d4:e3:e4:2b:1e:75: 8b:38:a6:79 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjeoR1qXhh4Ryd9z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZTI1NWJmN2ItMjAzZi00MGFhLWExZDctYTQzNGUxNWQzMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjCemxvhiBwx4pQVGEoOCrgtrgp2LNENNr/5 btRik9KCwjvM22x38kX01C2r8E+ql8wtmGGkXyVtSkqC5/qqREnMCFIfdPzssLNP oAiQFG2dPDTOEvkAA+5n4ZClsElY0WAZBShiz7doRT5TjVcg2lQPH44k2t6AVn0w TaP+XYBJfK37Nd0ZiMK2FP7Ege2c4H9mt/RWZQF90izYtiiACLg2zY43maLdyaqZ yHyn2WOmL23clNqsQAV2zMXYpflVGByvLlIe832rlxbZkOI66PbpLwzLdy5JuIOq jmn+7K06mZgDEttFqxsNtspfB8/xcYrS3pICAnKJjJUMGpO5XwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB+TSgUiSgHY6an30tHTcfClVLKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvMmU2YWUxMzMtNjUzZC0z YWNhLTkwNTMtOGYzOGVhNDhlZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAuKCrmPQC+3TGYQsTuhjYPD6OM/QvCz8wq6ba6vjCVONPa+JzkE4HekAs TctGzgI7IEvDwhfBuDGlCLqLObUhl2bUsQR+C1pXcWg2OCMbjA6jZM/Tm4Mu42gL vLMRs8Y1G2XlbCW98VYa0QM7LXFft2qicKiciJBkWCqqlmVMNj9m1EKtlK5gx5tj XKb3VEJFIUxy1eAJujrVGbcqPjupiMufltL8bPh6J/NsLOXgOY2PbrqEpNS9h4Il xsV6f7W41AlCECRFsQLb8RAuX6JVToEudJ4gVIvYBqMavSKLiPWVcJ1VAPY9Ctd4 fkDuO9TyJzgSbf0w1OPkKx51izimeQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:20:49 2025 by rpki-client