$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa File: e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa (raw, json) Hash identifier: +hFyXk/+YxHdFlMaCl+TEBjZkCskm2054MGkFymUm4Y= Subject key identifier: 35:3F:18:7E:34:F9:3C:4B:7B:4E:CB:6D:59:8A:EB:47:F0:84:3C:D3 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F432858490E16BCA500C25C29A9AD5E00 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 92 IP address blocks: 128.153.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bc:a5:00:c2:5c:29:a9:ad:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=95c48caa-b63c-4951-8f90-54d40debe2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:50:0f:a8:f7:7b:4f:5f:99:73:5c:97:f4: 63:b3:79:1f:37:cb:cf:01:c3:fb:4a:9d:ee:b7:ff: 5f:0e:e3:7b:e4:04:97:4c:b6:fc:2a:c1:64:bc:b0: 03:13:39:0b:5e:db:45:17:e4:66:df:e3:a9:4e:d9: 83:7a:ba:bf:50:ec:54:6a:5a:d4:ec:f9:c7:ec:3e: 0c:3a:d3:64:1b:53:ef:9b:cb:51:fb:dd:2f:51:75: a5:8b:3d:ca:5d:b9:d8:99:c9:58:b0:66:1d:23:9c: 5d:f4:8c:b9:d3:b8:88:b5:5b:16:f9:d1:19:5c:44: 89:21:78:77:c9:a6:09:e9:14:3d:ca:15:81:da:fc: c2:14:2a:26:00:64:99:23:39:30:7f:80:bc:e7:81: fd:0a:48:2f:0e:58:93:78:9b:63:9a:3f:41:e7:c6: 0a:c3:25:cb:82:e1:87:93:b3:0b:5c:75:fc:05:8d: b3:c1:f9:85:1e:56:d6:0d:4b:94:27:c8:d0:90:7a: 42:f7:9f:ed:77:fa:5c:26:35:bd:33:72:31:87:08: cd:d9:17:9d:67:b5:a9:6c:35:e0:3c:5c:d6:df:03: 14:c3:73:20:90:a7:f7:53:e9:b0:b1:4e:95:f3:af: f6:c9:08:90:c3:c4:96:d4:07:20:44:f5:07:02:48: a4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3F:18:7E:34:F9:3C:4B:7B:4E:CB:6D:59:8A:EB:47:F0:84:3C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:df:5c:39:be:c9:d2:07:32:59:f0:21:32:4a:53:db:6f:59: 22:52:9e:be:51:28:a2:62:e6:01:76:53:84:d4:ef:9c:6b:b1: 1e:66:55:80:5c:6f:2b:69:d3:1e:91:0e:6a:8f:77:83:e8:dd: 3b:c8:a4:49:55:12:ae:1b:f7:bb:c4:2c:5e:ed:89:cb:5d:b1: 33:d1:cb:81:9f:b4:b6:cd:dd:6b:9d:27:62:fa:3a:10:58:e5: 7f:bd:26:1c:29:66:fd:82:b8:6d:27:42:e2:b4:36:89:f9:fc: 02:6e:2b:86:be:0e:be:dc:1b:32:71:e0:ef:ca:71:93:1e:78: 7d:79:b5:08:ec:84:56:be:48:eb:b7:75:c6:e4:0c:39:10:48: 0f:91:df:55:ff:9a:2c:9f:f5:0d:ac:00:50:20:20:df:a3:48: 4f:95:6c:e7:24:d6:f2:27:3c:2d:db:e4:3e:f3:41:de:38:45: 02:fe:ed:69:44:a9:dc:e2:f8:11:06:6b:b1:bb:53:5e:9c:e7: 4a:3e:6a:da:d9:0a:e9:40:b5:5e:a4:29:20:dd:46:5d:63:ec: 6d:ac:7a:99:2a:e6:cc:ee:8a:bf:7b:31:66:f9:69:29:f9:60: d6:95:d0:b6:66:30:24:b5:00:eb:13:66:ab:44:fe:a7:8a:30: 62:62:8a:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrylAMJcKamtXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OTVjNDhjYWEtYjYzYy00OTUxLThmOTAtNTRkNDBkZWJlMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sJQD6j3e09fmXNcl/Rjs3kfN8vPAcP7Sp3u t/9fDuN75ASXTLb8KsFkvLADEzkLXttFF+Rm3+OpTtmDerq/UOxUalrU7PnH7D4M OtNkG1Pvm8tR+90vUXWliz3KXbnYmclYsGYdI5xd9Iy507iItVsW+dEZXESJIXh3 yaYJ6RQ9yhWB2vzCFComAGSZIzkwf4C854H9CkgvDliTeJtjmj9B58YKwyXLguGH k7MLXHX8BY2zwfmFHlbWDUuUJ8jQkHpC95/td/pcJjW9M3IxhwjN2RedZ7WpbDXg PFzW3wMUw3MgkKf3U+mwsU6V86/2yQiQw8SW1AcgRPUHAkikKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU/GH40+TxLe07LbVmK60fwhDzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvZTg4MTY3NTQtZTE2YS0z MmE3LWJiMWYtYTU2ZTI1NGUwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvfXDm+ydIHMlnwITJKU9tvWSJSnr5RKKJi5gF2U4TU75xrsR5mVYBc bytp0x6RDmqPd4Po3TvIpElVEq4b97vELF7tictdsTPRy4GftLbN3WudJ2L6OhBY 5X+9JhwpZv2CuG0nQuK0Non5/AJuK4a+Dr7cGzJx4O/KcZMeeH15tQjshFa+SOu3 dcbkDDkQSA+R31X/miyf9Q2sAFAgIN+jSE+VbOck1vInPC3b5D7zQd44RQL+7WlE qdzi+BEGa7G7U16c50o+atrZCulAtV6kKSDdRl1j7G2sepkq5szuir97MWb5aSn5 YNaV0LZmMCS1AOsTZqtE/qeKMGJiivs= -----END CERTIFICATE-----Generated at Fri Apr 11 21:42:24 2025 by rpki-client