$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa File: 2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa (raw, json) Hash identifier: YCfDVk9WF8FDwdowiIwBKnIU9GdSqJBxm9xjj0mIfY0= Subject key identifier: 21:14:69:1E:F1:7B:FE:D0:D2:30:DB:F0:CB:34:5E:1E:B2:F1:9F:80 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285848B090B66B5F383EC360CE6700 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b6:6b:5f:38:3e:c3:60:ce:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=77f97da1-0b3a-43f7-8353-802b2767f25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:17:ea:7b:1a:0c:18:5c:69:d9:c4:ce:5d: 25:77:d0:e9:95:42:12:42:c6:f9:23:89:a8:13:3c: f8:b0:d6:3f:f6:3a:2a:12:d5:5b:40:d6:74:01:b6: 9b:01:69:02:1e:13:53:09:45:77:40:ce:55:4b:ba: 47:19:67:4f:3e:fc:b7:1b:8c:e0:ab:08:c9:23:11: a1:6a:ad:9a:37:ad:56:0d:91:72:7a:49:43:a8:8f: 2b:52:c4:82:8e:b4:42:a7:06:3b:d5:a2:b6:a9:66: 0d:92:21:11:f5:94:c2:a6:68:97:60:db:2b:5b:e3: b7:75:13:50:1a:20:1b:81:6c:46:16:dd:03:d4:76: 13:86:68:b0:5a:2d:1c:f5:2e:4a:e3:73:98:ab:28: ba:d0:0c:31:87:4f:fd:34:a0:f4:11:15:3d:1a:ad: cc:04:6b:ed:56:6e:b7:d2:7b:75:45:86:fd:ae:21: 07:b9:07:00:a0:8f:f4:7d:68:48:f7:62:24:f5:7a: a0:41:16:52:0a:94:1c:53:68:2a:4b:39:fc:4f:f2: 29:ba:3d:54:38:9b:49:ec:6d:f0:86:c9:2f:65:eb: 66:c2:c2:76:49:bb:2b:e1:60:d6:a4:ee:c6:1c:7d: 05:9b:83:8f:07:96:00:da:68:e7:db:94:42:0c:eb: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:14:69:1E:F1:7B:FE:D0:D2:30:DB:F0:CB:34:5E:1E:B2:F1:9F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:02:dd:1c:0e:f6:ea:10:97:be:45:1e:27:09:36:b4:5f:1a: 4a:4a:6c:3c:50:ee:7a:51:75:26:98:9f:3e:cb:52:83:61:66: 3b:1b:b8:c6:7b:ce:51:02:a2:21:91:38:3c:9a:a9:b6:ed:b0: 2f:13:16:35:4b:3e:dc:82:de:32:3b:ac:68:a9:46:b2:56:c1: 7d:46:99:87:5d:d9:8f:34:a8:b6:95:e5:e9:49:59:87:6a:a5: 66:64:c6:f4:80:c7:79:39:ca:64:a3:8e:c9:9c:3b:5d:b3:aa: 26:84:ca:db:27:2a:2c:db:6d:49:1d:47:13:00:d0:a8:68:10: 82:85:76:39:a4:ff:38:60:db:c6:36:5b:e8:70:de:c5:66:26: e9:f6:19:82:09:23:cf:b4:b2:09:bd:41:79:2b:7b:46:89:b4: 97:5a:cf:7a:ec:13:90:2e:c0:30:1f:6f:20:1a:f8:08:cd:c9: b2:ba:b3:de:0e:73:f9:d3:25:cb:52:d9:6e:b9:9b:c3:db:4c: 21:52:bd:a3:d1:54:e3:13:f6:26:c1:58:5b:b5:61:3c:2e:f2: f4:bf:3e:07:65:3e:ab:55:7e:c3:ff:f1:ed:f2:7f:3d:9f:24: 4d:5a:c9:6e:a1:fb:5b:77:29:0d:be:1e:6e:d0:94:cd:fd:df: 17:c1:52:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwkLZrXzg+w2DOZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk NzdmOTdkYTEtMGIzYS00M2Y3LTgzNTMtODAyYjI3NjdmMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPUX6nsaDBhcadnEzl0ld9DplUISQsb5I4mo Ezz4sNY/9joqEtVbQNZ0AbabAWkCHhNTCUV3QM5VS7pHGWdPPvy3G4zgqwjJIxGh aq2aN61WDZFyeklDqI8rUsSCjrRCpwY71aK2qWYNkiER9ZTCpmiXYNsrW+O3dRNQ GiAbgWxGFt0D1HYThmiwWi0c9S5K43OYqyi60Awxh0/9NKD0ERU9Gq3MBGvtVm63 0nt1RYb9riEHuQcAoI/0fWhI92Ik9XqgQRZSCpQcU2gqSzn8T/Ipuj1UOJtJ7G3w hskvZetmwsJ2Sbsr4WDWpO7GHH0Fm4OPB5YA2mjn25RCDOvhkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEUaR7xe/7Q0jDb8Ms0Xh6y8Z+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMmI0ZTZiNzAtMzlkZC0z ZmQzLTkxZGEtODdkNGM5NmM5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUC3RwO9uoQl75FHicJNrRfGkpKbDxQ7npRdSaYnz7LUoNhZjsbuMZ7 zlECoiGRODyaqbbtsC8TFjVLPtyC3jI7rGipRrJWwX1GmYdd2Y80qLaV5elJWYdq pWZkxvSAx3k5ymSjjsmcO12zqiaEytsnKizbbUkdRxMA0KhoEIKFdjmk/zhg28Y2 W+hw3sVmJun2GYIJI8+0sgm9QXkre0aJtJdaz3rsE5AuwDAfbyAa+AjNybK6s94O c/nTJctS2W65m8PbTCFSvaPRVOMT9ibBWFu1YTwu8vS/PgdlPqtVfsP/8e3yfz2f JE1ayW6h+1t3KQ2+Hm7QlM393xfBUpw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:51 2025 by rpki-client