$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa File: cc509968-63d9-33f6-b60c-2664e0511e7f.roa (raw, json) Hash identifier: HxTBHHgHSiIyBLkfZyNIVm7ShLRqhbzEvwhhlALKAW4= Subject key identifier: 7E:71:56:2B:4B:D8:0A:EC:0B:72:86:0A:17:1D:1D:6D:D5:9A:0E:0B Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F43285848E59BB5FDA5E2A836B99D8C00 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 144.81.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b5:fd:a5:e2:a8:36:b9:9d:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d4bf28f5-c3f1-4f99-806a-be2a8d31fc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:35:3f:9d:bc:47:41:b6:ec:6f:85:68:71: 8c:16:37:75:4c:f0:de:d4:55:ab:66:1c:0b:c8:ea: b6:b1:ee:87:2c:19:a8:d5:93:55:20:5a:72:07:1e: 59:29:49:7f:d9:23:26:51:05:28:55:d5:8e:85:bf: 85:0f:09:34:1b:ba:f1:a8:40:a2:fc:1e:ae:10:9d: 23:5d:ae:34:66:da:a0:82:58:3e:6e:0c:dc:83:a7: 66:c7:a6:05:3b:49:bc:76:f3:29:f4:fe:fc:a6:d9: da:31:fd:0b:f3:23:f5:56:0e:7f:af:d2:3f:99:97: 33:6b:8e:93:9c:8d:0c:f0:26:7c:17:ae:49:3b:44: 31:06:8f:69:3e:d6:61:59:36:95:12:2b:d8:ec:29: 8a:bd:97:13:9e:83:cf:bb:90:fa:20:f2:de:c1:7a: 99:a8:1c:57:9c:2a:26:71:dc:26:75:94:b9:fc:53: 98:7b:48:15:25:2c:3d:db:80:e7:78:4e:13:ff:01: 06:cd:2c:94:54:8c:9a:ac:a1:63:93:e7:e4:04:a4: 5b:e6:96:a0:8f:ec:00:c0:53:e4:c3:b2:44:c6:31: d9:af:05:74:16:23:8f:80:61:60:88:72:65:46:28: 1f:fa:b2:8d:a4:9a:71:f8:18:d5:5c:f4:1c:3e:25: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:71:56:2B:4B:D8:0A:EC:0B:72:86:0A:17:1D:1D:6D:D5:9A:0E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f7:25:b2:c2:4b:62:4a:7c:a0:53:2c:2c:4d:44:34:bf:e8: c7:5a:bc:09:0f:4b:6c:b7:b2:a3:ef:3c:85:bd:76:5a:cf:73: 82:e7:80:e6:4e:a0:dc:d2:25:b9:52:d9:a8:9e:a9:da:fa:bd: 89:f9:75:fe:2d:a7:10:cd:47:a5:ed:22:23:07:6c:31:4c:59: 02:fc:79:76:72:89:0d:d9:13:91:5f:0d:a0:96:5f:08:48:70: 77:6f:c0:fc:21:38:65:0b:f6:c4:f8:6b:25:97:e4:7c:6b:2a: 9c:bd:be:8b:27:fe:ce:4f:45:e5:5c:9d:a2:b4:f6:69:30:65: f8:40:d1:0d:e4:d8:db:52:e8:d4:e5:88:bc:4a:99:22:78:88: 6d:36:8b:9f:89:04:ed:b4:35:dd:a8:fa:54:0c:74:39:89:45: 2c:38:67:c1:de:71:cf:d1:3e:a3:51:a6:11:b2:c8:53:31:e8: f5:2a:9a:de:1a:52:9a:de:b2:12:12:6c:64:b5:54:76:7f:cd: e2:50:ee:85:b9:c2:74:f9:58:25:35:9a:78:b9:e9:ff:09:fe: 5a:37:e6:31:95:ef:0c:3f:ce:ed:be:d8:4c:f2:4c:10:2a:72: 63:c8:51:1e:52:e1:1d:6e:45:32:1f:9b:fa:a4:d3:ad:7b:93: 2c:20:d8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7X9peKoNrmdjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDRiZjI4ZjUtYzNmMS00Zjk5LTgwNmEtYmUyYThkMzFmYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr481P528R0G27G+FaHGMFjd1TPDe1FWrZhwL yOq2se6HLBmo1ZNVIFpyBx5ZKUl/2SMmUQUoVdWOhb+FDwk0G7rxqECi/B6uEJ0j Xa40Ztqgglg+bgzcg6dmx6YFO0m8dvMp9P78ptnaMf0L8yP1Vg5/r9I/mZcza46T nI0M8CZ8F65JO0QxBo9pPtZhWTaVEivY7CmKvZcTnoPPu5D6IPLewXqZqBxXnCom cdwmdZS5/FOYe0gVJSw924DneE4T/wEGzSyUVIyarKFjk+fkBKRb5pagj+wAwFPk w7JExjHZrwV0FiOPgGFgiHJlRigf+rKNpJpx+BjVXPQcPiW1bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5xVitL2ArsC3KGChcdHW3Vmg4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvY2M1MDk5NjgtNjNkOS0z M2Y2LWI2MGMtMjY2NGUwNTExZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn3JbLCS2JKfKBTLCxNRDS/6MdavAkPS2y3sqPvPIW9dlrPc4LngOZO oNzSJblS2aieqdr6vYn5df4tpxDNR6XtIiMHbDFMWQL8eXZyiQ3ZE5FfDaCWXwhI cHdvwPwhOGUL9sT4ayWX5HxrKpy9vosn/s5PReVcnaK09mkwZfhA0Q3k2NtS6NTl iLxKmSJ4iG02i5+JBO20Nd2o+lQMdDmJRSw4Z8Hecc/RPqNRphGyyFMx6PUqmt4a UpreshISbGS1VHZ/zeJQ7oW5wnT5WCU1mni56f8J/lo35jGV7ww/zu2+2EzyTBAq cmPIUR5S4R1uRTIfm/qk0617kywg2H0= -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:28 2025 by rpki-client