$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa File: 1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa (raw, json) Hash identifier: W/E//qRO76dIXYE220hbVOHL8gqaO05swlw/82dBkvY= Subject key identifier: 35:A8:04:06:21:7F:77:1B:00:3A:DA:4D:C7:F7:34:99:E9:D7:D4:48 Certificate issuer: /CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010 Certificate serial: 010D0C9F4328584940394789F8BC22A10FB83BC0 Authority key identifier: E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 1638 IP address blocks: 146.88.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:47:89:f8:bc:22:a1:0f:b8:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=5453d089-7e3e-43e7-b4c4-459a4427f401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:df:bd:c4:c3:7c:46:13:18:3a:d7:43:94:e1: ae:b5:c7:b8:d8:7a:3e:01:d8:34:66:49:f0:7f:1b: b6:45:cd:44:a8:72:4c:5f:0b:16:99:1d:25:e8:7a: 53:30:d8:c0:fb:15:b8:1c:3d:4b:d2:b9:fd:71:b2: 7c:c3:9d:2f:d7:1d:f7:c6:87:0d:38:c3:30:34:c8: 5a:0f:f7:84:88:d4:c3:c1:c5:2e:b7:72:8d:7a:cc: e5:bb:4b:25:30:82:cc:e8:db:c9:0a:10:83:c7:77: 2a:1b:0b:23:e2:e3:6d:94:9a:8e:c3:32:e4:a0:05: 64:84:3f:d9:8d:9b:cd:27:6c:91:7a:b7:c6:65:ec: 4d:84:88:ed:a6:47:e5:4f:6b:86:16:3e:ef:21:17: 02:63:34:53:cc:10:0a:d7:81:c8:97:1a:ec:26:47: 6c:34:0a:d6:0f:f3:37:67:33:90:49:28:ef:f9:5d: e2:cd:31:ac:da:00:cd:0b:dc:16:6b:44:d0:9e:2e: de:09:a0:0a:7e:45:8b:17:e1:9b:55:d8:7c:71:6f: 56:ec:4e:6c:39:d3:d5:8c:34:d5:8f:89:03:78:bb: 75:89:97:bc:e2:20:de:f3:22:70:89:d1:80:5f:96: e7:a5:79:49:9f:d2:81:fc:6f:02:c9:0c:31:45:4a: be:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:04:06:21:7F:77:1B:00:3A:DA:4D:C7:F7:34:99:E9:D7:D4:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl X509v3 Authority Key Identifier: keyid:E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer sbgp-ipAddrBlock: critical IPv4: 146.88.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d6:99:d3:53:33:cd:05:78:ed:d6:17:a4:ac:7c:25:b3:93: 51:c7:83:9b:4d:0d:c7:29:47:e6:f7:77:65:f8:fe:41:79:e8: 8d:d4:2a:0a:b6:48:2b:8a:d6:27:2d:c7:47:a1:b4:d2:cd:fe: 87:28:cb:66:fe:77:48:8d:84:25:fd:79:30:76:71:d9:71:2e: 25:32:da:19:94:c9:cf:00:7f:38:10:99:ff:f1:70:6e:96:41: ae:90:01:c1:07:cb:ee:6c:ee:1c:1e:31:a2:06:b8:a8:ef:2f: 89:22:8d:90:cf:2b:0d:58:b3:8f:8f:53:c5:b8:a9:a3:b4:cc: 45:97:02:41:b3:16:ae:f0:52:b9:d2:e8:b2:62:62:1b:66:74: bd:49:12:b4:a9:90:f8:6d:9d:73:64:c2:40:20:06:f9:d2:4b: 89:67:57:af:db:44:58:8c:23:56:46:ab:0d:2c:c5:49:bf:1a: 57:ef:4a:73:be:e6:20:f8:de:81:b8:da:99:7f:50:98:da:bc: 76:50:f6:b8:74:6e:ad:42:c9:84:ba:5a:fc:94:9d:69:41:c3: 87:c4:ef:5c:0a:18:42:76:96:1b:53:9a:d8:f5:73:76:70:24: b5:c9:0b:b0:fb:0c:48:42:fa:cb:aa:60:31:0d:8d:00:ab:83: f1:19:0d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUeJ+LwioQ+4O8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U2MWZhYmItOTVjNi00YWIzLWExZWMtYjA3N2U4NTBm MDEwMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NTQ1M2QwODktN2UzZS00M2U3LWI0YzQtNDU5YTQ0MjdmNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN+9xMN8RhMYOtdDlOGutce42Ho+Adg0Zknw fxu2Rc1EqHJMXwsWmR0l6HpTMNjA+xW4HD1L0rn9cbJ8w50v1x33xocNOMMwNMha D/eEiNTDwcUut3KNeszlu0slMILM6NvJChCDx3cqGwsj4uNtlJqOwzLkoAVkhD/Z jZvNJ2yRerfGZexNhIjtpkflT2uGFj7vIRcCYzRTzBAK14HIlxrsJkdsNArWD/M3 ZzOQSSjv+V3izTGs2gDNC9wWa0TQni7eCaAKfkWLF+GbVdh8cW9W7E5sOdPVjDTV j4kDeLt1iZe84iDe8yJwidGAX5bnpXlJn9KB/G8CyQwxRUq+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWoBAYhf3cbADraTcf3NJnp19RIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZTYx ZmFiYi05NWM2LTRhYjMtYTFlYy1iMDc3ZTg1MGYwMTAvMWI1NGUxZTgtNzVjMC0z YzA3LTljNTktODdkMWJkYjgzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2U2MWZhYmItOTVjNi00YWIzLWEx ZWMtYjA3N2U4NTBmMDEwLzdlNjFmYWJiLTk1YzYtNGFiMy1hMWVjLWIwNzdlODUw ZjAxMC5jcmwwHwYDVR0jBBgwFoAU6JedVeNTq+8A8hMAqS3S2vMUk54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZTYxZmFiYi05NWM2LTRhYjMtYTFlYy1iMDc3 ZTg1MGYwMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkljkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3WmdNTM80FeO3WF6SsfCWzk1HHg5tNDccpR+b3d2X4/kF56I3UKgq2 SCuK1ictx0ehtNLN/ocoy2b+d0iNhCX9eTB2cdlxLiUy2hmUyc8AfzgQmf/xcG6W Qa6QAcEHy+5s7hweMaIGuKjvL4kijZDPKw1Ys4+PU8W4qaO0zEWXAkGzFq7wUrnS 6LJiYhtmdL1JErSpkPhtnXNkwkAgBvnSS4lnV6/bRFiMI1ZGqw0sxUm/GlfvSnO+ 5iD43oG42pl/UJjavHZQ9rh0bq1CyYS6WvyUnWlBw4fE71wKGEJ2lhtTmtj1c3Zw JLXJC7D7DEhC+suqYDENjQCrg/EZDVI= -----END CERTIFICATE-----Generated at Sun Apr 6 03:17:13 2025 by rpki-client