$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa File: f829599e-00f8-3c5a-95c8-1624e200ebd0.roa (raw, json) Hash identifier: Zr5hvRHJvdghSPayCyOmcAmf5XmAJ6FCouh67cPqge8= Subject key identifier: E9:64:1E:FA:CD:37:28:D1:E3:54:49:77:D1:70:09:28:28:95:FD:71 Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F43285849244E7C9765B3E8968D3D7E80 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 194 IP address blocks: 128.117.0.0/16 maxlen: 16 192.43.244.0/24 maxlen: 24 192.52.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7c:97:65:b3:e8:96:8d:3d:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=9f3307f1-3447-4261-a959-18a42924162f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6e:14:37:eb:24:9f:2b:9f:2f:cf:f6:c0:bf: 17:39:c8:dd:fa:86:29:8a:fc:77:20:ad:d3:a7:97: 44:61:51:cd:52:98:4a:aa:4c:c9:2c:a6:38:5a:d9: e7:b1:65:c4:bc:16:08:50:45:33:b0:27:c4:a7:06: 9b:b5:dd:18:de:61:5b:f8:81:f2:9c:05:07:9d:9b: dd:34:9a:fe:bf:a9:ac:c5:e0:52:60:86:80:ea:18: 14:13:55:49:e0:e3:0c:58:bb:18:72:af:87:97:84: a0:6b:14:37:3f:cd:2f:00:ea:21:8e:a0:c0:10:03: 2d:c8:2b:4d:27:d8:d6:c5:37:7f:19:27:7b:d4:d5: fe:70:e7:ad:e2:87:aa:42:ff:28:04:ad:fe:b9:dc: f6:3e:31:c0:55:86:ed:95:9b:9e:f5:1a:00:a8:34: 48:d9:0b:cc:58:50:d4:72:fb:b3:ff:b5:e3:aa:a9: 44:c5:ea:c4:30:5d:e3:09:93:b2:0b:f6:ee:87:b2: 85:e2:6d:c4:a5:f4:c4:f2:0a:e5:49:4e:00:8b:8b: b2:0e:c1:52:e5:47:1b:a4:35:15:1e:6a:a9:ea:ef: fb:3a:30:02:54:36:22:f5:9d:d3:3e:9e:1d:4f:6b: e9:69:6f:ff:6d:7e:3f:91:5c:a2:1b:b1:ae:a6:58: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:64:1E:FA:CD:37:28:D1:E3:54:49:77:D1:70:09:28:28:95:FD:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 128.117.0.0/16 192.43.244.0/24 192.52.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:be:c7:6b:75:95:e5:ea:73:00:ec:dd:84:97:11:91:42:c4: 29:37:f6:3e:61:4d:83:38:2a:46:a2:cb:1d:f8:85:f2:bd:eb: 68:6b:6a:92:8d:89:25:e8:06:1c:28:ec:17:27:52:dc:d4:cc: 62:2a:c1:ab:79:86:cf:36:35:aa:85:d6:fc:e2:92:2c:46:2b: 04:21:6c:99:84:ac:f3:46:d0:e3:9a:4e:04:0f:05:7b:5a:d1: 1e:3b:0e:e2:20:e0:f8:b8:d2:14:38:8e:31:73:fb:ef:58:e9: 15:21:f8:40:64:1f:92:03:ca:9e:1a:fb:d8:52:ea:f7:85:2c: 90:95:89:80:4a:a0:da:03:85:8d:a2:ec:7d:6f:44:10:9e:8a: a3:bd:88:02:01:83:50:cb:c8:50:04:b5:8f:8c:df:04:42:fa: 71:68:e5:ef:bb:82:df:d2:d6:43:cd:5e:7b:a6:38:0f:0f:f3: 76:95:1b:0a:05:78:58:19:6e:e9:70:d9:f5:42:ff:b3:1a:35: d5:2a:ea:1a:36:51:fc:fc:31:bf:f5:76:38:3c:5f:83:5f:90: 67:e6:9d:0c:ff:be:e9:8f:88:e9:1f:38:35:90:7c:56:f0:8c: 3b:5e:7c:34:69:d7:54:5d:36:0d:ce:ad:4f:3c:1d:c5:ff:5f: f8:10:f5:75 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWEkkTnyXZbPolo09foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk OWYzMzA3ZjEtMzQ0Ny00MjYxLWE5NTktMThhNDI5MjQxNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk24UN+sknyufL8/2wL8XOcjd+oYpivx3IK3T p5dEYVHNUphKqkzJLKY4WtnnsWXEvBYIUEUzsCfEpwabtd0Y3mFb+IHynAUHnZvd NJr+v6msxeBSYIaA6hgUE1VJ4OMMWLsYcq+Hl4SgaxQ3P80vAOohjqDAEAMtyCtN J9jWxTd/GSd71NX+cOet4oeqQv8oBK3+udz2PjHAVYbtlZue9RoAqDRI2QvMWFDU cvuz/7XjqqlExerEMF3jCZOyC/buh7KF4m3EpfTE8grlSU4Ai4uyDsFS5UcbpDUV Hmqp6u/7OjACVDYi9Z3TPp4dT2vpaW//bX4/kVyiG7GuplgnAQIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFOlkHvrNNyjR41RJd9FwCSgolf1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZjgyOTU5OWUtMDBmOC0z YzVhLTk1YzgtMTYyNGUyMDBlYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAgHUDBADA K/QDBADANGowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAOb7Ha3WV5epzAOzdhJcRkULEKTf2PmFNgzgqRqLL HfiF8r3raGtqko2JJegGHCjsFydS3NTMYirBq3mGzzY1qoXW/OKSLEYrBCFsmYSs 80bQ45pOBA8Fe1rRHjsO4iDg+LjSFDiOMXP771jpFSH4QGQfkgPKnhr72FLq94Us kJWJgEqg2gOFjaLsfW9EEJ6Ko72IAgGDUMvIUAS1j4zfBEL6cWjl77uC39LWQ81e e6Y4Dw/zdpUbCgV4WBlu6XDZ9UL/sxo11SrqGjZR/Pwxv/V2ODxfg1+QZ+adDP++ 6Y+I6R84NZB8VvCMO158NGnXVF02Dc6tTzwdxf9f+BD1dQ== -----END CERTIFICATE-----Generated at Sat Apr 12 01:59:54 2025 by rpki-client