$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa File: 2cf973ac-9292-3942-9252-f179184447a4.roa (raw, json) Hash identifier: mTZhkXUselBsDPYijzvWCFQSj8RGqbj5x/4F2Y/MgPY= Subject key identifier: 77:7C:86:1E:4F:6F:DF:39:94:42:1D:7A:DA:52:89:4A:94:4D:AB:78 Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F43285848B090B3994C597C5F9FC27700 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 1002 IP address blocks: 165.140.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b3:99:4c:59:7c:5f:9f:c2:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=e7428fe7-b762-4b60-bd34-742c13e9afb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:b7:de:a4:42:f1:2b:ad:05:0e:94:b1:b3: 5a:3a:2d:f3:01:38:be:b1:4f:91:d6:70:8b:bb:87: d2:fb:cd:09:8d:00:2b:46:7b:6f:d8:e8:24:09:ae: 83:26:bc:27:20:cd:99:4a:94:4a:fa:72:c9:00:82: cd:b9:ae:3e:f0:af:49:8d:4c:c5:09:a5:68:76:da: ff:d3:1d:5b:1a:ed:df:00:6d:e6:b9:9b:0e:36:dc: 79:09:c2:a7:9b:fe:e9:3f:d1:1c:14:f6:94:c0:69: cb:b2:c6:80:49:54:21:5b:06:b0:55:d9:41:82:25: 6c:26:cf:47:76:d6:c0:f1:11:7a:d9:65:88:48:ae: f3:fd:39:19:d2:cd:2a:2d:43:5d:68:51:7d:ac:e5: 30:97:4c:0d:1b:05:d5:bd:bf:98:ea:44:f2:0c:88: 41:71:1c:1b:1f:39:dc:1a:9e:7e:34:60:21:95:f7: 28:47:61:27:fb:bf:7f:4b:da:b5:13:4b:c1:b2:67: 96:0c:2f:14:0b:86:38:34:5d:fc:a3:07:35:d3:7e: 4a:6d:fb:ed:26:3a:5f:6a:ee:3c:13:a9:18:9a:c9: bd:a9:9f:fc:b4:0b:a5:ce:5d:43:82:30:99:fd:6a: 19:7d:b1:08:c2:19:c2:bc:5b:24:da:05:87:f5:b2: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7C:86:1E:4F:6F:DF:39:94:42:1D:7A:DA:52:89:4A:94:4D:AB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7f:b0:f7:37:04:75:73:7d:99:5d:a2:21:e1:47:74:4f:11: 3e:d1:1c:8c:52:17:3d:b8:d3:1f:68:08:df:05:32:53:3c:4a: ff:8f:38:5e:9c:da:40:c1:1f:08:20:67:50:b4:3a:57:81:4b: 80:f4:2a:c0:89:39:bf:8b:0b:47:31:35:96:12:47:f0:69:ed: 28:09:11:ad:0b:8f:a1:ac:80:44:c7:04:b3:f9:d4:17:72:a9: 8e:87:19:e9:22:e2:1e:6c:c5:11:26:84:d8:be:2b:bd:01:8a: a4:89:39:ec:c4:11:07:fc:a2:a5:3f:36:38:39:da:81:69:25: 1a:46:54:1c:44:d7:7f:3f:55:ab:8f:da:87:98:ae:3d:47:c5: 51:6c:e0:7f:c1:4b:32:17:0c:d4:16:21:6a:d4:f6:c8:c2:92: bc:76:e5:fd:30:6e:fb:86:a1:01:57:13:2d:10:15:56:69:35: 6b:62:a8:3c:5f:f2:e9:6d:b6:ed:cb:8e:55:27:0a:3d:49:1d: f7:b5:bd:0b:34:dd:51:46:45:28:ac:8e:fd:b5:1f:17:bc:f5: fa:35:a3:d2:3d:16:42:27:9f:92:5b:f3:6b:90:fd:15:fe:d3: 25:5e:75:ad:2e:b0:c0:20:5d:41:e6:85:6b:59:60:e2:c8:d4: 97:7a:a2:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwkLOZTFl8X5/CdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk ZTc0MjhmZTctYjc2Mi00YjYwLWJkMzQtNzQyYzEzZTlhZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNW33qRC8SutBQ6UsbNaOi3zATi+sU+R1nCL u4fS+80JjQArRntv2OgkCa6DJrwnIM2ZSpRK+nLJAILNua4+8K9JjUzFCaVodtr/ 0x1bGu3fAG3muZsONtx5CcKnm/7pP9EcFPaUwGnLssaASVQhWwawVdlBgiVsJs9H dtbA8RF62WWISK7z/TkZ0s0qLUNdaFF9rOUwl0wNGwXVvb+Y6kTyDIhBcRwbHznc Gp5+NGAhlfcoR2En+79/S9q1E0vBsmeWDC8UC4Y4NF38owc1035KbfvtJjpfau48 E6kYmsm9qZ/8tAulzl1DgjCZ/WoZfbEIwhnCvFsk2gWH9bLVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd8hh5Pb985lEIdetpSiUqUTat4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvMmNmOTczYWMtOTI5Mi0z OTQyLTkyNTItZjE3OTE4NDQ0N2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh/sPc3BHVzfZldoiHhR3RPET7RHIxSFz240x9oCN8FMlM8Sv+POF6c 2kDBHwggZ1C0OleBS4D0KsCJOb+LC0cxNZYSR/Bp7SgJEa0Lj6GsgETHBLP51Bdy qY6HGeki4h5sxREmhNi+K70BiqSJOezEEQf8oqU/Njg52oFpJRpGVBxE138/VauP 2oeYrj1HxVFs4H/BSzIXDNQWIWrU9sjCkrx25f0wbvuGoQFXEy0QFVZpNWtiqDxf 8ulttu3LjlUnCj1JHfe1vQs03VFGRSisjv21Hxe89fo1o9I9FkInn5Jb82uQ/RX+ 0yVeda0usMAgXUHmhWtZYOLI1Jd6ohc= -----END CERTIFICATE-----Generated at Sat Apr 12 14:07:44 2025 by rpki-client