$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa File: d4c36706-7a07-30a3-8ac0-4f853f76d634.roa (raw, json) Hash identifier: AlbG7xH9r/GrSJR2D6VmDMyd/M9n+LADI7zkZLAFZ6A= Subject key identifier: 48:B8:1E:50:77:AD:B5:BB:F9:53:94:2D:4A:D4:87:AF:0C:56:13:C9 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F432858490CB165EA94EB33734BFCA980 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 54203 IP address blocks: 173.255.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:65:ea:94:eb:33:73:4b:fc:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=a17d5547-e7e7-4af2-8aba-343f2a57b51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:89:9c:29:19:c8:b3:2d:4b:91:e5:0b:a9:0b: 9d:84:67:72:41:90:0c:dc:60:20:fe:82:85:5b:c7: 19:38:40:87:e4:1e:46:50:3a:7c:9c:1b:5d:31:e8: fc:f3:08:dd:67:ff:89:f1:0b:c4:d6:c7:be:a1:01: f7:13:01:06:bc:ff:16:17:06:97:0e:11:6b:d1:f4: 5a:af:b2:75:a8:e2:83:25:d8:93:cd:71:58:7c:48: da:0f:c5:9b:38:78:9a:93:40:13:f6:dd:87:dd:67: eb:20:73:e9:0f:2d:23:ff:25:bf:f0:68:de:a0:d7: 76:62:86:8f:6a:c5:56:08:1b:ad:44:7a:72:56:da: d2:02:52:a4:61:02:bd:87:7f:79:61:6e:c9:64:7b: f7:e2:ed:f1:96:4e:97:9d:7e:07:13:4b:ad:1f:73: 1c:1c:cd:b4:4a:e7:1c:34:74:6d:cc:14:22:21:f9: 84:1d:45:d2:b2:34:b8:72:f7:10:e5:b5:4f:67:12: d4:91:21:0e:f5:c3:da:55:d0:ff:ab:a5:d9:b3:58: ef:d3:9d:98:62:84:4f:4a:a5:96:1d:e1:c8:54:4d: f9:48:66:8b:b8:09:8d:ce:6e:30:38:e8:1c:1c:4b: f5:72:e5:14:bc:22:25:fa:c8:2b:55:f5:60:b3:97: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B8:1E:50:77:AD:B5:BB:F9:53:94:2D:4A:D4:87:AF:0C:56:13:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2a:ff:7f:5c:d2:58:65:e6:35:63:af:83:5e:e4:eb:e7:99: 63:d8:e4:0a:f5:ea:0a:fb:7b:f2:a7:dc:c6:04:f9:e0:73:a6: ae:4b:a9:49:ee:24:e2:96:db:8b:84:ad:15:e4:77:37:ef:5c: e0:ea:71:6f:f2:ae:7d:42:06:d3:47:f0:b9:b0:b1:ba:70:34: 80:9b:60:bc:c4:86:72:af:41:d8:ca:d5:21:e5:2c:7e:b2:27: 41:de:b4:48:8b:a7:e1:ce:64:69:62:5c:b6:f4:35:7a:0f:5c: ba:2e:64:0a:a4:5a:02:76:d5:55:18:52:3e:25:54:41:d1:32: 9d:e9:0b:8d:be:95:d0:e3:4c:4e:6a:1b:d4:9e:57:d0:47:97: 4f:7e:94:be:71:2b:8e:12:60:44:ab:de:7c:53:ee:04:a7:f1: cb:2b:88:7d:62:df:81:28:47:e5:54:c7:c8:2a:df:11:54:be: e7:d2:38:1a:54:80:23:02:ad:9e:3c:e1:ef:d1:15:7b:ab:89: a8:d5:67:ac:40:91:27:66:0b:9d:ce:08:e0:39:df:6f:e3:67: 2d:7c:85:3a:e6:be:f8:7e:33:20:1d:7c:fd:bb:99:75:e8:56: 09:b0:60:12:e1:7b:72:fd:c4:7a:05:49:55:d5:47:1a:a3:9e: 8f:ed:3e:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWXqlOszc0v8qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YTE3ZDU1NDctZTdlNy00YWYyLThhYmEtMzQzZjJhNTdiNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYmcKRnIsy1LkeULqQudhGdyQZAM3GAg/oKF W8cZOECH5B5GUDp8nBtdMej88wjdZ/+J8QvE1se+oQH3EwEGvP8WFwaXDhFr0fRa r7J1qOKDJdiTzXFYfEjaD8WbOHiak0AT9t2H3WfrIHPpDy0j/yW/8GjeoNd2YoaP asVWCButRHpyVtrSAlKkYQK9h395YW7JZHv34u3xlk6XnX4HE0utH3McHM20Succ NHRtzBQiIfmEHUXSsjS4cvcQ5bVPZxLUkSEO9cPaVdD/q6XZs1jv052YYoRPSqWW HeHIVE35SGaLuAmNzm4wOOgcHEv1cuUUvCIl+sgrVfVgs5cn2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi4HlB3rbW7+VOULUrUh68MVhPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzY3MDYtN2EwNy0z MGEzLThhYzAtNGY4NTNmNzZkNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYq/39c0lhl5jVjr4Ne5OvnmWPY5Ar16gr7e/Kn3MYE+eBzpq5LqUnu JOKW24uErRXkdzfvXODqcW/yrn1CBtNH8LmwsbpwNICbYLzEhnKvQdjK1SHlLH6y J0HetEiLp+HOZGliXLb0NXoPXLouZAqkWgJ21VUYUj4lVEHRMp3pC42+ldDjTE5q G9SeV9BHl09+lL5xK44SYESr3nxT7gSn8csriH1i34EoR+VUx8gq3xFUvufSOBpU gCMCrZ484e/RFXuriajVZ6xAkSdmC53OCOA532/jZy18hTrmvvh+MyAdfP27mXXo VgmwYBLhe3L9xHoFSVXVRxqjno/tPkg= -----END CERTIFICATE-----Generated at Sat Apr 5 12:42:01 2025 by rpki-client