$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa File: 3672ce80-0d2a-362b-ae2d-f084212a54ba.roa (raw, json) Hash identifier: yl8HWOK36oonEML49jrKGuif5NEOB1wcZH15q3In86Y= Subject key identifier: A0:6F:88:92:B4:93:E1:46:7D:AC:C1:66:77:0F:AC:EB:C3:7B:A7:29 Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F43285848E8665DD678FCE2D37E4DC580 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 144.81.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:5d:d6:78:fc:e2:d3:7e:4d:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=3519aa3e-aab3-401c-82e1-a15c4d675cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:04:7d:a0:47:4d:31:90:3a:f1:67:ce:36: c1:e2:35:ba:00:6d:d9:ce:d3:90:ee:a9:b9:58:fb: 37:32:c0:d7:30:5b:86:c3:c2:00:5f:a7:11:16:27: a0:3d:5e:d1:f6:1e:2d:3b:59:a5:20:bd:ef:b5:4d: 81:18:1f:09:1c:98:1c:c3:13:dd:fd:a8:32:a4:15: 17:99:9a:54:98:4c:51:cf:62:2f:34:76:7b:3f:66: 0d:82:44:4a:c4:49:58:7f:5b:2f:e3:af:23:91:80: 7e:1b:4c:e4:50:d4:a3:b2:04:5d:72:b1:17:51:b2: 42:09:97:3b:79:f7:18:df:5f:c3:f1:6c:40:5d:d7: dd:a0:39:e2:4f:d9:95:13:3e:82:37:39:cc:be:09: 9b:73:15:5a:45:96:d9:cc:e8:57:41:ac:5b:dd:af: 71:31:bf:10:36:20:a8:95:d1:5e:1f:04:96:4f:8d: 0d:3d:d9:ce:dd:47:5b:db:85:be:7b:da:7d:60:64: 42:d6:a3:4c:68:68:23:fb:5b:6c:b8:6b:09:e2:67: 7e:b2:72:4d:c2:b6:34:a9:ab:2c:be:5e:16:58:25: 0c:59:f9:90:f6:ae:5a:3b:e9:d1:a0:b2:1b:1f:a8: 08:28:cf:2d:a2:da:35:96:93:03:dc:0f:9b:2b:9f: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6F:88:92:B4:93:E1:46:7D:AC:C1:66:77:0F:AC:EB:C3:7B:A7:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6b:ad:05:f1:ec:9a:bc:e2:d4:97:52:83:a2:ee:9e:60:2b: 8f:be:99:73:75:5a:f6:61:38:92:68:f8:82:db:8f:ef:3b:d6: fa:6b:c8:71:f3:e6:e3:03:9a:7a:6e:80:16:38:f6:9e:0e:ef: 97:ed:73:c6:a4:47:fe:68:ea:71:d5:3e:0e:11:f1:ec:a0:9e: 6a:6b:cf:f8:d4:05:48:50:53:2a:0f:19:43:95:5b:64:43:73: c6:39:a3:9a:9f:e7:ed:cc:c1:1d:d6:23:c1:91:31:39:17:e3: 33:aa:5a:ab:c6:bf:b8:ce:bb:16:18:6e:56:2b:bb:dd:93:1b: 84:56:0e:3c:14:08:3c:dc:44:fa:28:21:3f:e5:40:a0:0a:c4: e4:89:08:3d:0c:1f:fb:ee:9f:af:ae:70:5f:2a:ec:70:c1:04: cf:e5:9b:68:84:4c:b4:6b:46:84:c4:cd:fc:f1:e1:9f:96:f0: ce:db:1d:b7:48:28:a5:6a:06:44:74:81:24:58:e5:18:ca:08: 5f:bb:43:e0:b3:82:61:15:9d:0b:2f:06:e4:37:14:ca:04:1c: 89:07:19:13:e6:60:6d:04:96:cb:88:e8:5a:f6:18:f0:59:2c: 3f:e3:2a:8a:bf:9a:74:9c:e5:0b:fb:49:1e:3e:98:6f:71:0b: 45:a2:c8:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZl3WePzi035NxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk MzUxOWFhM2UtYWFiMy00MDFjLTgyZTEtYTE1YzRkNjc1Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9wEfaBHTTGQOvFnzjbB4jW6AG3ZztOQ7qm5 WPs3MsDXMFuGw8IAX6cRFiegPV7R9h4tO1mlIL3vtU2BGB8JHJgcwxPd/agypBUX mZpUmExRz2IvNHZ7P2YNgkRKxElYf1sv468jkYB+G0zkUNSjsgRdcrEXUbJCCZc7 efcY31/D8WxAXdfdoDniT9mVEz6CNznMvgmbcxVaRZbZzOhXQaxb3a9xMb8QNiCo ldFeHwSWT40NPdnO3Udb24W+e9p9YGRC1qNMaGgj+1tsuGsJ4md+snJNwrY0qass vl4WWCUMWfmQ9q5aO+nRoLIbH6gIKM8toto1lpMD3A+bK5/w/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBviJK0k+FGfazBZncPrOvDe6cpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvMzY3MmNlODAtMGQyYS0z NjJiLWFlMmQtZjA4NDIxMmE1NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRrrQXx7Jq84tSXUoOi7p5gK4++mXN1WvZhOJJo+ILbj+871vpryHHz 5uMDmnpugBY49p4O75ftc8akR/5o6nHVPg4R8eygnmprz/jUBUhQUyoPGUOVW2RD c8Y5o5qf5+3MwR3WI8GRMTkX4zOqWqvGv7jOuxYYblYru92TG4RWDjwUCDzcRPoo IT/lQKAKxOSJCD0MH/vun6+ucF8q7HDBBM/lm2iETLRrRoTEzfzx4Z+W8M7bHbdI KKVqBkR0gSRY5RjKCF+7Q+CzgmEVnQsvBuQ3FMoEHIkHGRPmYG0ElsuI6Fr2GPBZ LD/jKoq/mnSc5Qv7SR4+mG9xC0WiyJg= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:37 2025 by rpki-client