$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa File: d2bbd598-d050-3e9c-b8b7-18a976731d02.roa (raw, json) Hash identifier: LyalhSAUGPRF47RRaX9fOx/J+BDQ5Ae0WQY5Mqzm+LQ= Subject key identifier: 42:FE:BF:0F:74:B9:19:00:C2:A3:EE:50:45:42:20:CD:B7:1C:67:51 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584975445F6B8FD323A2CAD46400 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 397976 IP address blocks: 158.247.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5f:6b:8f:d3:23:a2:ca:d4:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=57d97392-ba7f-4ae7-b4ca-1b7ff0ce2e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:75:06:f4:27:e7:9d:57:95:54:1f:9a:bc:c0: df:0f:26:7a:da:58:3f:bf:24:a4:5c:a7:44:79:c2: 09:47:d5:6b:1c:4d:ad:fb:f3:ae:93:41:4a:85:a9: d9:60:23:f5:d1:ea:29:d5:ad:bf:3f:51:4d:69:92: 07:77:4f:38:ef:f8:a2:dd:57:cc:ce:00:43:ef:6c: e1:9c:7d:be:1c:c1:85:51:72:4e:02:7d:dd:e8:be: 7a:df:07:7e:9d:12:d3:be:e7:a5:55:c6:83:b1:c6: ca:f3:8c:4c:a6:87:df:0f:75:12:fb:cc:4d:95:de: 32:f1:b4:e6:ce:73:47:9e:18:21:ca:34:22:13:33: c8:02:b8:be:ab:0d:dc:b2:1f:c7:a6:e0:52:1f:10: 77:0d:37:85:b0:b3:5d:d4:0e:11:55:94:b6:e5:59: c0:49:11:a5:0e:83:6a:bc:e8:c1:57:89:c1:50:22: 2a:71:f6:4a:7f:45:b5:e7:f6:ce:19:44:66:73:0d: b1:58:43:80:f4:cb:9a:94:0a:e3:c7:56:07:31:bd: 17:e8:dd:60:4e:1a:3b:e2:f3:6a:27:ea:f3:fb:38: 89:94:3c:54:88:f6:0e:e6:41:5f:0c:c0:7b:16:42: 1f:b0:36:a0:24:e1:63:00:b3:e0:da:91:fe:f0:f0: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FE:BF:0F:74:B9:19:00:C2:A3:EE:50:45:42:20:CD:B7:1C:67:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 158.247.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f0:42:15:3f:5d:6a:f0:30:72:8b:1b:85:bb:30:73:10:f6: ef:1e:75:24:cb:30:3a:c3:6d:ee:91:14:ad:30:b3:67:b4:d2: 31:2e:f9:40:6c:6a:7e:b3:6b:b5:14:a8:e3:78:18:6c:14:79: b2:eb:df:df:6d:00:32:cc:35:95:20:46:0c:73:5e:dd:96:8a: 20:6c:15:b1:44:13:90:80:9a:d6:ac:b6:ea:34:ff:94:6e:9b: 3f:a5:4b:95:6e:8c:f0:14:e3:a0:56:34:6a:8e:83:f0:79:cc: 0f:6d:41:37:6b:56:d9:8b:ec:1b:9e:c7:b7:b9:79:e1:ed:07: b6:a0:0c:ea:ec:ff:f2:17:46:e9:3f:65:37:c6:f4:28:d9:3c: e6:2d:69:8b:af:b5:64:24:3f:8c:27:94:70:10:46:13:f4:96: eb:b9:b4:c8:28:b1:16:25:c8:16:a6:ad:57:0e:a1:ef:72:17: 57:95:45:21:72:be:1b:c4:d2:53:cc:b4:0c:b8:ff:e8:b0:59: 13:08:3d:7c:d1:1c:2c:d7:86:81:76:10:8b:94:b8:cc:86:96: 83:e4:0c:5a:9b:b8:d1:86:da:da:2c:a4:d8:99:04:9c:b4:f4: af:c9:d8:e6:62:7c:13:ac:5a:49:f2:bb:e2:97:8f:62:99:d5: 54:22:05:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RF9rj9MjosrUZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NTdkOTczOTItYmE3Zi00YWU3LWI0Y2EtMWI3ZmYwY2UyZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3UG9CfnnVeVVB+avMDfDyZ62lg/vySkXKdE ecIJR9VrHE2t+/Ouk0FKhanZYCP10eop1a2/P1FNaZIHd0847/ii3VfMzgBD72zh nH2+HMGFUXJOAn3d6L563wd+nRLTvuelVcaDscbK84xMpoffD3US+8xNld4y8bTm znNHnhghyjQiEzPIAri+qw3csh/HpuBSHxB3DTeFsLNd1A4RVZS25VnASRGlDoNq vOjBV4nBUCIqcfZKf0W15/bOGURmcw2xWEOA9MualArjx1YHMb0X6N1gTho74vNq J+rz+ziJlDxUiPYO5kFfDMB7FkIfsDagJOFjALPg2pH+8PDgBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL+vw90uRkAwqPuUEVCIM23HGdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvZDJiYmQ1OTgtZDA1MC0z ZTljLWI4YjctMThhOTc2NzMxZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPwQhU/XWrwMHKLG4W7MHMQ9u8edSTLMDrDbe6RFK0ws2e00jEu+UBs an6za7UUqON4GGwUebLr399tADLMNZUgRgxzXt2WiiBsFbFEE5CAmtastuo0/5Ru mz+lS5VujPAU46BWNGqOg/B5zA9tQTdrVtmL7Buex7e5eeHtB7agDOrs//IXRuk/ ZTfG9CjZPOYtaYuvtWQkP4wnlHAQRhP0luu5tMgosRYlyBamrVcOoe9yF1eVRSFy vhvE0lPMtAy4/+iwWRMIPXzRHCzXhoF2EIuUuMyGloPkDFqbuNGG2tospNiZBJy0 9K/J2OZifBOsWknyu+KXj2KZ1VQiBTc= -----END CERTIFICATE-----Generated at Mon Apr 21 04:08:51 2025 by rpki-client