$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/41149ca8-84ee-3c37-b491-83ba1a424870.roa File: 41149ca8-84ee-3c37-b491-83ba1a424870.roa (raw, json) Hash identifier: QiYnGlrlkPpgNtQ8Tikq4itCEFf0SIAsFdYEaplV8Ns= Subject key identifier: C2:13:56:1F:D4:FE:0D:2B:5D:97:43:D5:D5:5A:52:C4:B8:CE:E3:8F Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F432858490F7C00F6E73C6E2BE8CB9C40 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/41149ca8-84ee-3c37-b491-83ba1a424870.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 22413 IP address blocks: 69.173.192.0/19 maxlen: 24 69.173.224.0/21 maxlen: 24 192.96.23.0/24 maxlen: 24 192.124.126.0/24 maxlen: 24 199.66.96.0/22 maxlen: 24 199.68.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:00:f6:e7:3c:6e:2b:e8:cb:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=ce308b36-ce84-450d-a0cc-9bda44d29610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:40:aa:8a:5d:d1:9a:aa:24:3b:c2:be:b7: 13:74:1a:5c:a2:2a:c9:30:25:e5:f5:6f:b7:32:5f: 6b:1e:da:5c:d8:e5:97:f0:d2:26:5e:eb:ee:22:d5: a8:02:74:cf:15:ab:4a:29:3c:6b:3d:c1:17:dd:8b: 62:02:64:cc:28:4a:18:f8:5e:5e:33:de:8e:8f:3f: bc:47:e4:1e:f7:88:95:5a:72:07:32:34:89:45:0d: e8:4e:cb:10:d9:c8:21:3b:97:b4:41:11:fa:d0:23: 80:aa:d2:64:99:68:b2:f6:61:87:c7:df:05:90:60: bf:17:85:8b:ab:79:5a:b4:af:05:90:0f:af:6b:c8: 62:15:5e:bf:8d:1b:79:d8:b2:39:31:8b:04:5a:d5: 0f:bc:91:f7:93:2a:80:d5:4e:19:7e:33:1d:19:93: e1:87:b7:b3:65:89:9e:25:a5:6e:5d:24:49:bf:8f: 72:37:48:94:a1:e4:59:9a:c3:36:41:11:be:49:27: 21:ee:a6:79:10:17:48:0e:4d:0a:42:f0:18:79:e2: ea:f4:d3:37:84:c4:17:7c:ff:50:ca:6f:e0:69:ac: 1d:6b:81:77:81:cb:22:f3:22:5e:a4:a9:56:e0:7e: 80:d9:a7:67:63:4e:aa:ea:b1:b8:a5:79:bd:23:77: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:13:56:1F:D4:FE:0D:2B:5D:97:43:D5:D5:5A:52:C4:B8:CE:E3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/41149ca8-84ee-3c37-b491-83ba1a424870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv4: 69.173.192.0-69.173.231.255 192.96.23.0/24 192.124.126.0/24 199.66.96.0/22 199.68.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:49:13:04:22:46:47:db:c8:93:ef:30:77:59:99:33:3c:c2: d0:07:48:6b:c4:65:f1:93:ae:6b:7f:78:72:1b:f3:d5:34:d6: 45:22:73:c1:72:4f:38:a0:3e:d6:55:f9:d1:1b:e1:41:73:c1: d1:87:7e:fe:6c:f9:3e:24:04:86:fb:bf:59:d6:f3:e8:34:e8: 19:e4:ee:87:0a:66:f0:24:c4:09:19:a8:9f:2b:ef:d8:8d:78: e5:9d:2b:2c:cf:31:9d:ed:51:43:20:4d:02:ed:98:69:16:bc: f4:db:df:dd:ed:fa:cb:b4:dc:bb:df:fc:b1:84:03:6a:83:b6: b0:1b:9d:ab:c5:f1:52:7c:89:ba:c6:ed:6f:64:3c:8c:84:14: 40:ab:b9:36:4b:3e:b0:df:1c:0e:77:22:d9:95:12:ae:ef:c9: e5:5a:0a:24:20:ae:ab:b0:39:2a:70:dc:ca:35:1f:ef:7a:a0: fc:45:4f:c4:f9:06:c9:58:c1:19:f6:51:df:6f:3e:d1:55:da: 5b:1e:eb:69:84:c7:63:6d:85:08:ca:5e:2e:7f:f8:f7:80:4d: 28:9c:2a:e3:19:fb:5b:60:25:5f:98:9c:9f:3a:39:6a:ba:96: c9:a1:fd:da:e9:08:ee:cb:b4:98:a7:50:e8:2a:9c:26:12:02: a5:9e:ce:35 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEkPfAD25zxuK+jLnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk Y2UzMDhiMzYtY2U4NC00NTBkLWEwY2MtOWJkYTQ0ZDI5NjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1VAqopd0ZqqJDvCvrcTdBpcoirJMCXl9W+3 Ml9rHtpc2OWX8NImXuvuItWoAnTPFatKKTxrPcEX3YtiAmTMKEoY+F5eM96Ojz+8 R+Qe94iVWnIHMjSJRQ3oTssQ2cghO5e0QRH60COAqtJkmWiy9mGHx98FkGC/F4WL q3latK8FkA+va8hiFV6/jRt52LI5MYsEWtUPvJH3kyqA1U4ZfjMdGZPhh7ezZYme JaVuXSRJv49yN0iUoeRZmsM2QRG+SSch7qZ5EBdIDk0KQvAYeeLq9NM3hMQXfP9Q ym/gaawda4F3gcsi8yJepKlW4H6A2adnY06q6rG4pXm9I3fPOwIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFMITVh/U/g0rXZdD1dVaUsS4zuOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvNDExNDljYTgtODRlZS0z YzM3LWI0OTEtODNiYTFhNDI0ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAZFrcAD BANFreADBADAYBcDBADAfH4DBALHQmADBAPHROAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgUkTBCJGR9vI k+8wd1mZMzzC0AdIa8Rl8ZOua394chvz1TTWRSJzwXJPOKA+1lX50RvhQXPB0Yd+ /mz5PiQEhvu/Wdbz6DToGeTuhwpm8CTECRmonyvv2I145Z0rLM8xne1RQyBNAu2Y aRa89Nvf3e36y7Tcu9/8sYQDaoO2sBudq8XxUnyJusbtb2Q8jIQUQKu5Nks+sN8c Dnci2ZUSru/J5VoKJCCuq7A5KnDcyjUf73qg/EVPxPkGyVjBGfZR328+0VXaWx7r aYTHY22FCMpeLn/494BNKJwq4xn7W2AlX5icnzo5arqWyaH92ukI7su0mKdQ6Cqc JhICpZ7ONQ== -----END CERTIFICATE-----Generated at Fri Apr 11 21:50:38 2025 by rpki-client