$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa File: 502f559a-6adf-3a43-95b5-07df039f3802.roa (raw, json) Hash identifier: 2FDwpQmIWO125cPBmIIpNBYOFf+aA5Cvogg9FuHPojM= Subject key identifier: 73:75:10:E7:03:26:38:A7:A7:63:93:60:B3:DE:53:4E:32:D0:4E:0C Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F43285848F65BECDB3D5C1D1ED9832B80 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 23277 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ec:db:3d:5c:1d:1e:d9:83:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=f874b215-913a-4710-9493-8e2336607817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:bc:bc:b1:ca:79:af:49:93:12:1c:29:26: 7d:5a:6a:8c:5c:67:d2:28:dd:d4:cd:24:9d:80:f0: 86:64:6d:55:a6:ae:fa:b6:9b:b3:7c:e7:ea:14:1c: f1:b4:c7:0b:24:cd:c1:a1:f4:bd:54:08:c3:99:3b: 36:a6:42:f6:50:33:a1:c1:24:cc:11:98:f1:7a:05: 1f:0e:12:ca:08:c3:98:36:55:be:55:c2:5f:d5:16: d1:ab:85:79:cb:bb:6b:33:c1:d3:a5:ba:dd:c0:e5: 43:ae:b4:ce:e5:67:d0:ba:68:61:f8:51:3c:f1:38: 5b:8f:c3:a6:9d:9a:58:7e:8d:30:90:28:ee:52:43: 86:56:a9:b4:55:dd:65:87:57:f9:e4:4a:a1:d9:c8: 64:69:65:fe:03:dc:95:0c:f1:82:a2:48:71:2c:c5: 21:49:36:d5:4a:8a:fd:ac:ba:f2:05:cd:bc:6b:f6: 85:a3:76:c4:79:4b:c7:13:2c:1c:3b:f3:ae:69:06: e6:b3:d2:80:d4:08:2a:07:d2:d6:72:4b:3b:29:87: ab:ae:e2:29:99:ca:1a:ec:96:70:c2:22:d2:5d:8d: 69:de:58:10:66:c4:d7:3b:26:74:c6:38:7a:10:ca: ff:3d:d1:55:88:15:9a:96:df:c7:d2:d2:6b:71:a6: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:75:10:E7:03:26:38:A7:A7:63:93:60:B3:DE:53:4E:32:D0:4E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fa:0f:a2:c5:12:ee:1b:9b:de:e8:fa:01:05:d1:7f:85:11: a3:93:91:da:bb:a7:51:45:e6:d0:e7:f5:cc:a0:13:a7:04:ac: 5f:53:2b:b5:4e:49:99:b5:dc:66:b0:15:e5:93:74:39:cf:56: 55:0d:7c:87:d7:06:1f:4e:80:7e:08:6a:23:07:db:df:8e:aa: f8:f0:7d:84:fc:12:ff:56:39:25:d1:3e:25:bf:0e:b4:ed:c3: 80:bc:7b:52:f4:8f:c9:a9:29:78:5a:13:3f:1c:d2:29:98:ec: fe:a8:49:1f:d8:61:f3:3b:d4:35:de:4a:1f:b1:4a:0d:63:48: 0b:45:82:b9:31:3d:cb:c6:22:39:75:53:d9:9b:95:83:46:f0: 44:90:f1:20:33:c3:ff:6d:cd:1d:94:08:ce:b4:05:c3:a4:12: 9f:fe:3a:18:0f:9f:29:11:06:85:c5:49:ad:e0:f5:8d:82:43: 79:69:8f:03:3f:a7:99:da:e6:2c:75:0a:f0:21:20:b4:2b:b4: 5e:03:54:3d:9a:e1:4a:b4:6d:ad:b4:a3:4b:0e:0b:c5:fa:3f: 3e:3d:c4:76:ef:f7:d2:c1:f5:b0:9d:c5:eb:1c:93:98:39:00: 03:97:8c:ba:25:ab:5d:ec:30:4f:a0:5b:7a:50:bd:c6:60:41: 1c:04:ef:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+zbPVwdHtmDK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Zjg3NGIyMTUtOTEzYS00NzEwLTk0OTMtOGUyMzM2NjA3ODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfm8vLHKea9JkxIcKSZ9WmqMXGfSKN3UzSSd gPCGZG1Vpq76tpuzfOfqFBzxtMcLJM3BofS9VAjDmTs2pkL2UDOhwSTMEZjxegUf DhLKCMOYNlW+VcJf1RbRq4V5y7trM8HTpbrdwOVDrrTO5WfQumhh+FE88Thbj8Om nZpYfo0wkCjuUkOGVqm0Vd1lh1f55Eqh2chkaWX+A9yVDPGCokhxLMUhSTbVSor9 rLryBc28a/aFo3bEeUvHEywcO/OuaQbms9KA1AgqB9LWcks7KYerruIpmcoa7JZw wiLSXY1p3lgQZsTXOyZ0xjh6EMr/PdFViBWalt/H0tJrcabUawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN1EOcDJjinp2OTYLPeU04y0E4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvNTAyZjU1OWEtNmFkZi0z YTQzLTk1YjUtMDdkZjAzOWYzODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn6D6LFEu4bm97o+gEF0X+FEaOTkdq7p1FF5tDn9cygE6cErF9TK7VO SZm13GawFeWTdDnPVlUNfIfXBh9OgH4IaiMH29+OqvjwfYT8Ev9WOSXRPiW/DrTt w4C8e1L0j8mpKXhaEz8c0imY7P6oSR/YYfM71DXeSh+xSg1jSAtFgrkxPcvGIjl1 U9mblYNG8ESQ8SAzw/9tzR2UCM60BcOkEp/+OhgPnykRBoXFSa3g9Y2CQ3lpjwM/ p5na5ix1CvAhILQrtF4DVD2a4Uq0ba20o0sOC8X6Pz49xHbv99LB9bCdxesck5g5 AAOXjLolq13sME+gW3pQvcZgQRwE77E= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:31 2025 by rpki-client