$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa File: ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa (raw, json) Hash identifier: pg8UgP4DVSrdhosTH3jF2rAG7KgA7PTYMYPDv/BG/3k= Subject key identifier: E3:2F:5C:BE:E9:61:00:13:F4:DD:4D:D4:F1:16:F3:FE:0B:7B:0B:FF Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F43285848DEA11DAA57FB373D40ED3800 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 14977 IP address blocks: 137.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1d:aa:57:fb:37:3d:40:ed:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=6f68bfa6-a316-4052-9cc2-db25eced65fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:4a:87:be:ec:23:e6:aa:36:bb:80:a0:8a: 6a:c4:bd:69:ea:bf:bf:ab:81:a5:ac:a7:b9:95:14: 7c:f2:9a:7f:d6:38:dc:6e:de:ba:1b:f9:af:14:10: a7:79:83:e7:01:ff:c0:bf:fb:d3:fc:db:f5:b5:d2: 9e:e9:83:84:39:55:48:b7:8e:e7:39:01:91:66:2b: a5:c6:cd:56:b2:8d:24:74:eb:25:58:1c:d2:6e:7b: ca:b0:0a:34:b2:7a:57:d9:2a:20:a8:9b:54:64:a9: 0a:80:49:91:80:06:a2:7a:41:f8:82:b1:6c:9b:ca: 44:65:08:3f:69:53:8d:28:a2:51:5e:91:80:72:b0: e7:23:43:1a:05:35:40:45:96:2d:bf:b1:d5:74:08: e8:69:04:53:4a:48:1e:2d:cf:74:b5:d4:93:6d:9e: 06:a8:bb:cf:fd:8f:a4:b5:74:26:42:e7:c9:45:35: 22:d5:67:76:4b:6f:62:5a:a2:6d:97:d7:6d:8b:b5: c1:4f:09:b9:65:6a:89:c5:6d:81:8c:60:86:9a:ac: 65:d5:03:0a:fc:85:1e:2f:85:90:91:b0:b1:1d:0d: b4:4e:ab:07:6e:bd:fa:3a:ed:e2:1c:95:38:83:d3: 87:5e:1e:71:33:95:e6:76:34:3a:ed:a2:61:c6:c6: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2F:5C:BE:E9:61:00:13:F4:DD:4D:D4:F1:16:F3:FE:0B:7B:0B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.88.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ac:85:d1:95:2d:7c:52:0c:1b:8a:20:24:7d:68:97:49:64: 3e:45:d8:02:14:bb:d9:22:f4:28:71:d7:73:bb:f7:f5:c1:3a: 26:cb:a3:f7:18:0c:df:4a:e8:d9:8c:26:56:92:b8:a6:d2:13: 2d:af:31:88:b3:56:bf:46:aa:bd:29:d2:f1:70:3e:75:a3:31: 5e:6f:c2:0e:35:eb:bc:c7:47:dc:13:f4:e5:bc:93:d8:3e:15: 08:b7:b6:74:1f:c1:4a:19:88:a1:2c:6a:21:c5:ed:d8:4a:31: ff:97:73:90:cf:7b:7c:b1:46:fe:ca:c7:bd:90:5d:fc:8b:14: b8:88:32:8e:f2:1a:2f:d6:3c:0c:a6:8d:e9:2b:44:51:10:26: 7d:fc:7a:33:45:9d:a0:ee:17:b8:e5:43:cb:5d:4d:16:6e:e0: 2c:e6:f2:b9:bc:8b:07:3c:a5:43:bb:d6:0a:7e:5e:32:60:fb: 35:99:07:83:14:fe:16:09:9c:ae:ce:7c:b7:8e:2a:6d:0f:fe: 34:40:bd:6e:48:74:46:0b:2d:cc:83:5e:96:f5:c3:9a:6a:71: 84:25:c9:c3:76:85:1d:55:20:2b:57:77:94:02:f2:99:85:d2: fd:a6:65:0c:cb:df:c4:1c:fb:ee:59:73:7c:e7:ab:ce:52:4d: 28:04:06:e0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjeoR2qV/s3PUDtOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NmY2OGJmYTYtYTMxNi00MDUyLTljYzItZGIyNWVjZWQ2NWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcJKh77sI+aqNruAoIpqxL1p6r+/q4GlrKe5 lRR88pp/1jjcbt66G/mvFBCneYPnAf/Av/vT/Nv1tdKe6YOEOVVIt47nOQGRZiul xs1Wso0kdOslWBzSbnvKsAo0snpX2SogqJtUZKkKgEmRgAaiekH4grFsm8pEZQg/ aVONKKJRXpGAcrDnI0MaBTVARZYtv7HVdAjoaQRTSkgeLc90tdSTbZ4GqLvP/Y+k tXQmQufJRTUi1Wd2S29iWqJtl9dti7XBTwm5ZWqJxW2BjGCGmqxl1QMK/IUeL4WQ kbCxHQ20TqsHbr36Ou3iHJU4g9OHXh5xM5XmdjQ67aJhxsaj0QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOMvXL7pYQAT9N1N1PEW8/4Lewv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvY2U2OGE4OWItYTU0YS0z NDZmLWE5YTItZDhkNmIyYzc5OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAa6yF0ZUtfFIMG4ogJH1ol0lkPkXYAhS72SL0KHHXc7v39cE6Jsuj9xgM 30ro2YwmVpK4ptITLa8xiLNWv0aqvSnS8XA+daMxXm/CDjXrvMdH3BP05byT2D4V CLe2dB/BShmIoSxqIcXt2Eox/5dzkM97fLFG/srHvZBd/IsUuIgyjvIaL9Y8DKaN 6StEURAmffx6M0WdoO4XuOVDy11NFm7gLObyubyLBzylQ7vWCn5eMmD7NZkHgxT+ Fgmcrs58t44qbQ/+NEC9bkh0RgstzINelvXDmmpxhCXJw3aFHVUgK1d3lALymYXS /aZlDMvfxBz77llzfOerzlJNKAQG4A== -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:33 2025 by rpki-client