$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/53bfe652-722c-3146-800a-5b71cacb3ff7.roa File: 53bfe652-722c-3146-800a-5b71cacb3ff7.roa (raw, json) Hash identifier: 1yC4RbfWER6ZZX5lNsc+5Gjrm74F7eveZaQZdcm9FkY= Subject key identifier: 70:53:1B:6B:30:CE:80:84:CE:FA:FF:40:D0:9C:27:EC:9A:10:79:66 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858493B498E66A5363D26A83FB2C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/53bfe652-722c-3146-800a-5b71cacb3ff7.roa Signing time: Tue 18 Mar 2025 18:34:43 +0000 ROA not before: Tue 18 Mar 2025 18:34:43 +0000 ROA not after: Mon 16 Jun 2025 18:34:43 +0000 asID: 401152 IP address blocks: 96.126.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:49:8e:66:a5:36:3d:26:a8:3f:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 18 18:34:43 2025 GMT Not After : Jun 16 18:34:43 2025 GMT Subject: CN=03072e7c-29c9-4968-a833-0923b8035699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:65:93:18:4f:76:08:eb:7d:8f:62:3c:d8:4f: f6:89:ec:d2:67:46:41:18:4f:ae:e3:f3:3b:78:a2: 66:6a:4a:a3:30:e4:e2:2e:f5:00:fa:df:13:0e:42: 9c:40:f4:f4:8d:a9:de:a7:7e:6c:b5:dd:66:38:81: 1d:52:99:88:b5:7d:bf:09:5c:71:2f:59:f2:5d:88: 68:1f:da:d7:68:55:a4:c1:d2:13:5e:89:4e:0a:f4: ed:b4:37:18:cf:6f:82:6e:16:63:81:78:dd:87:f9: 4e:68:28:a7:54:e4:45:3f:eb:68:79:84:92:ea:43: dc:bc:cf:82:55:96:e7:44:f6:d7:49:d4:7f:b5:13: 24:99:c3:20:7c:f4:ef:db:72:06:61:10:da:c9:15: 11:d9:d2:96:29:17:28:f9:b1:ec:9f:88:b1:ea:10: 3d:e0:0e:59:1b:ac:79:ef:e7:b4:70:2f:5d:14:aa: c3:0e:09:bc:ec:cc:78:40:89:06:8d:7d:47:fa:ee: fe:c9:c7:9f:5b:01:d5:c8:f2:73:98:0d:7b:9e:d4: c1:97:96:be:cb:95:78:ee:c1:b2:c8:4d:db:81:ab: cc:46:f2:b5:b2:67:ae:17:0a:06:6b:a7:3b:4a:66: 53:c9:7b:38:f6:e6:de:e5:de:af:ad:4b:e2:a5:3e: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:1B:6B:30:CE:80:84:CE:FA:FF:40:D0:9C:27:EC:9A:10:79:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/53bfe652-722c-3146-800a-5b71cacb3ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 96.126.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:22:b9:94:37:2d:a0:b2:96:53:4d:9d:a3:c4:77:96:49:5a: f4:f6:5a:68:58:18:f4:ec:a1:a7:ba:27:28:5d:e5:29:68:19: c4:95:f2:78:39:4d:2f:05:50:5c:15:e2:14:29:3c:5a:b5:cc: 2e:d1:bb:6c:04:22:19:8d:51:74:5d:cb:28:9b:5f:4b:88:d9: 5d:3d:de:37:91:cd:bd:50:fe:3c:1c:b9:31:16:8f:19:63:5a: cb:50:5d:6b:ab:e1:aa:70:13:6d:0d:5d:a8:ea:5d:33:0b:43: 09:a0:8e:26:9a:eb:80:f7:1f:54:0b:bb:43:db:0c:a9:0f:43: 67:74:44:c7:08:4b:a0:fa:f6:1a:30:b3:e6:e1:fa:99:a0:ef: eb:81:aa:a9:07:18:0e:23:2f:f1:95:09:18:e0:e6:41:60:51: 04:49:8b:36:94:9e:7d:43:d8:52:6c:dd:7a:95:e4:ad:9b:c5: 4f:ba:8f:a6:c3:55:c3:4a:26:d3:eb:05:8f:06:d1:8d:06:f0: 94:50:b6:3c:97:9d:ba:ec:ed:7b:ba:f9:95:96:16:84:90:4b: bf:3e:f6:4b:72:2f:3d:9b:d0:fa:e6:57:b7:57:55:63:2d:ab: 97:32:32:71:91:f7:fd:6b:43:d4:4f:67:92:22:d9:d5:f9:3c: e5:99:54:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7SY5mpTY9Jqg/ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMxODE4MzQ0M1oXDTI1MDYxNjE4MzQ0M1owLzEtMCsGA1UEAxMk MDMwNzJlN2MtMjljOS00OTY4LWE4MzMtMDkyM2I4MDM1Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22WTGE92COt9j2I82E/2iezSZ0ZBGE+u4/M7 eKJmakqjMOTiLvUA+t8TDkKcQPT0janep35std1mOIEdUpmItX2/CVxxL1nyXYho H9rXaFWkwdITXolOCvTttDcYz2+CbhZjgXjdh/lOaCinVORFP+toeYSS6kPcvM+C VZbnRPbXSdR/tRMkmcMgfPTv23IGYRDayRUR2dKWKRco+bHsn4ix6hA94A5ZG6x5 7+e0cC9dFKrDDgm87Mx4QIkGjX1H+u7+ycefWwHVyPJzmA17ntTBl5a+y5V47sGy yE3bgavMRvK1smeuFwoGa6c7SmZTyXs49ube5d6vrUvipT4NDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBTG2swzoCEzvr/QNCcJ+yaEHlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTNiZmU2NTItNzIyYy0z MTQ2LTgwMGEtNWI3MWNhY2IzZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYH6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoiuZQ3LaCyllNNnaPEd5ZJWvT2WmhYGPTsoae6Jyhd5SloGcSV8ng5 TS8FUFwV4hQpPFq1zC7Ru2wEIhmNUXRdyyibX0uI2V093jeRzb1Q/jwcuTEWjxlj WstQXWur4apwE20NXajqXTMLQwmgjiaa64D3H1QLu0PbDKkPQ2d0RMcIS6D69how s+bh+pmg7+uBqqkHGA4jL/GVCRjg5kFgUQRJizaUnn1D2FJs3XqV5K2bxU+6j6bD VcNKJtPrBY8G0Y0G8JRQtjyXnbrs7Xu6+ZWWFoSQS78+9ktyLz2b0PrmV7dXVWMt q5cyMnGR9/1rQ9RPZ5Ii2dX5POWZVCw= -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:18 2025 by rpki-client