$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/aba22578-4c4b-3457-8df9-829eb41b19d3.roa File: aba22578-4c4b-3457-8df9-829eb41b19d3.roa (raw, json) Hash identifier: dZbPIY7wwVX9wE1uXEp9JVJcgDuj/Z/5/9YnwNStekM= Subject key identifier: 87:04:AE:82:3D:BF:96:8D:D9:D7:60:A6:9A:73:8D:8A:E0:2E:8C:53 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848A1360BEC27AD3E678561CD40 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/aba22578-4c4b-3457-8df9-829eb41b19d3.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 62651 IP address blocks: 173.255.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0b:ec:27:ad:3e:67:85:61:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=5c79c361-1d46-4687-934b-4b37b0ae9ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:00:db:5c:2f:31:a6:87:03:9d:f8:fa:cd: a8:82:60:d4:a9:d8:9f:d6:d2:c0:6f:19:d3:d4:84: 9c:59:57:48:6a:34:d6:75:1d:5c:ad:61:e9:c2:95: 13:1a:42:a3:f9:22:3c:ba:b9:09:81:42:a6:8c:50: 29:d7:05:fb:d6:e1:bc:c4:21:e6:14:15:ad:23:e0: 0e:c1:68:ff:24:2b:72:fd:68:5c:57:98:8b:09:cc: b9:82:96:bc:5a:20:58:8a:97:48:3e:98:5b:82:be: b7:31:b8:3a:84:4e:42:6b:18:8e:fa:37:c5:95:94: fd:e0:7e:62:a5:73:00:b7:36:d0:34:4c:f8:8f:d4: 71:d0:86:98:82:f3:62:13:5f:f2:d6:37:31:cf:6f: 88:33:cb:6e:5c:e9:7e:39:31:48:fc:5c:99:d1:a4: 97:8e:b4:c1:be:91:34:1e:4d:1c:e4:48:3c:21:f4: 99:aa:96:ed:39:87:9a:0e:0f:43:ad:60:68:ac:a5: 9c:26:99:4b:52:2e:f3:70:8a:4b:cc:78:01:df:6c: 1d:ab:03:56:19:ac:d8:4c:ec:13:20:ef:ce:1c:1e: 1f:6a:24:8e:cc:22:7b:e0:c9:cc:eb:2a:17:b0:78: c8:23:8a:87:0b:ab:3f:b1:99:a2:f5:a7:d5:0d:74: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:04:AE:82:3D:BF:96:8D:D9:D7:60:A6:9A:73:8D:8A:E0:2E:8C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/aba22578-4c4b-3457-8df9-829eb41b19d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:37:b9:ea:2c:e3:88:16:fb:02:db:6e:d8:bd:40:cb:ca:4b: 9f:4f:91:1c:78:73:62:1f:8c:34:97:0a:50:f9:f0:b2:f0:e9: d8:88:09:35:2c:09:71:a1:ae:55:50:0c:7e:1f:de:58:53:19: 7c:1f:41:aa:aa:5d:a4:a5:46:3b:2f:f6:c1:22:52:f9:90:e6: 68:77:a0:57:ad:2e:fb:45:a3:ae:ba:53:7f:7d:67:f8:f9:3a: d2:d2:64:c5:61:ff:7a:fd:c8:11:6e:32:2e:37:2b:a5:c5:47: f4:23:e5:57:21:2a:b5:12:ed:a1:e9:c4:f2:e0:f8:a2:21:fb: c8:7d:ac:f4:1a:a2:7b:71:ff:d1:7c:f5:a4:47:45:0f:c1:35: 3f:f5:7a:e2:11:85:59:58:78:df:0b:77:a4:7b:43:2f:b4:80: 8d:5d:31:1d:da:a0:6b:90:5e:6e:64:ef:e9:07:88:b0:5e:82: b8:57:88:60:5c:d0:25:de:b0:93:c9:e6:60:24:03:6c:05:c6: 4d:ed:21:d5:ca:a5:51:ab:17:16:6e:85:6c:a6:76:5d:6b:fb: 50:15:1f:68:8d:d2:27:bd:26:55:ad:79:95:8e:83:3c:f7:e5: 6e:64:93:d1:3f:ff:81:9b:6d:af:1b:6b:7e:58:71:39:94:b5: 9d:c7:38:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNgvsJ60+Z4VhzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NWM3OWMzNjEtMWQ0Ni00Njg3LTkzNGItNGIzN2IwYWU5ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswoA21wvMaaHA534+s2ogmDUqdif1tLAbxnT 1IScWVdIajTWdR1crWHpwpUTGkKj+SI8urkJgUKmjFAp1wX71uG8xCHmFBWtI+AO wWj/JCty/WhcV5iLCcy5gpa8WiBYipdIPphbgr63Mbg6hE5CaxiO+jfFlZT94H5i pXMAtzbQNEz4j9Rx0IaYgvNiE1/y1jcxz2+IM8tuXOl+OTFI/FyZ0aSXjrTBvpE0 Hk0c5Eg8IfSZqpbtOYeaDg9DrWBorKWcJplLUi7zcIpLzHgB32wdqwNWGazYTOwT IO/OHB4faiSOzCJ74MnM6yoXsHjII4qHC6s/sZmi9afVDXQ8awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcEroI9v5aN2ddgpppzjYrgLoxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYWJhMjI1NzgtNGM0Yi0z NDU3LThkZjktODI5ZWI0MWIxOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf+tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs3ueos44gW+wLbbti9QMvKS59PkRx4c2IfjDSXClD58LLw6diICTUs CXGhrlVQDH4f3lhTGXwfQaqqXaSlRjsv9sEiUvmQ5mh3oFetLvtFo666U399Z/j5 OtLSZMVh/3r9yBFuMi43K6XFR/Qj5VchKrUS7aHpxPLg+KIh+8h9rPQaontx/9F8 9aRHRQ/BNT/1euIRhVlYeN8Ld6R7Qy+0gI1dMR3aoGuQXm5k7+kHiLBegrhXiGBc 0CXesJPJ5mAkA2wFxk3tIdXKpVGrFxZuhWymdl1r+1AVH2iN0ie9JlWteZWOgzz3 5W5kk9E//4Gbba8ba35YcTmUtZ3HOIc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:47 2025 by rpki-client