$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa File: b758d768-536e-3bf2-96a6-ecc0554032dd.roa (raw, json) Hash identifier: HJwsb/OyU0sXWIHFkL17Crnie7XvI2Xwus43F5GL5z4= Subject key identifier: 70:30:E4:4B:88:98:3C:8A:51:25:86:2B:0D:99:F5:34:60:0C:57:4B Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F432858493ED3D857136AC50DCA469280 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 14041 IP address blocks: 129.19.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d8:57:13:6a:c5:0d:ca:46:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=bfdc144a-1097-4703-9604-3f932668b681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:b1:dd:03:ea:1b:0b:a2:f7:fb:08:60:23: 15:6f:09:d4:58:dc:e9:55:5e:ad:f9:db:73:52:e1: 98:db:0b:b0:9d:25:f0:99:45:a8:56:d4:41:13:bc: 5e:9f:00:b2:0b:9a:95:31:a8:2a:7a:1a:9c:d5:a8: 6d:3d:b3:e0:11:f6:12:8f:bd:e4:66:8e:6f:d0:3f: cc:30:fe:76:b7:c6:e1:fc:61:05:69:f7:1e:44:e4: 67:49:3a:42:96:00:e6:6c:49:23:7a:6d:d4:d7:8b: de:22:e4:c1:ee:3d:44:6a:f5:56:ad:af:33:57:c2: 58:76:05:38:4f:66:73:85:8f:10:1b:bd:29:3e:a7: 5a:90:41:95:6b:ce:5c:ea:d1:dd:6d:63:07:51:06: dd:f6:c7:7d:79:15:1a:be:4e:9e:73:a0:4f:96:6c: bd:19:08:a9:cb:4a:86:b9:85:05:92:45:85:0d:be: f1:ba:d1:11:c8:d9:bc:50:9e:93:24:af:99:76:eb: 4a:21:02:fc:da:71:b3:bb:a5:a9:54:de:4d:5e:33: 14:ec:a3:d0:de:54:db:ec:ce:79:17:45:c0:70:d1: 36:55:a8:37:b0:17:3c:f1:f5:e1:3a:10:24:3b:94: fd:0f:de:df:1b:67:cf:e0:25:32:9e:d8:22:ee:7f: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:30:E4:4B:88:98:3C:8A:51:25:86:2B:0D:99:F5:34:60:0C:57:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d7:70:01:cf:60:de:e4:c9:7e:17:95:c6:d7:b6:85:59:2e: d1:a6:0f:39:f7:28:85:70:b4:34:e4:ce:e3:58:af:50:d4:be: 67:92:88:cb:a6:bf:45:dc:90:72:94:ac:fd:c3:18:8e:d2:6d: dc:94:c4:41:bb:3d:13:3e:5f:06:a2:81:cc:3e:91:7e:ab:2b: 27:eb:91:35:56:0b:cb:19:9c:04:bc:b9:84:9d:a4:79:a5:c1: e7:9d:a7:31:1b:4e:11:69:90:ff:19:cf:11:eb:d2:cb:a3:a8: 32:1d:15:05:b2:61:bd:6f:19:df:59:59:13:ac:83:c8:7a:a6: 42:6d:f1:82:f2:45:74:1a:75:66:1c:df:2d:5d:27:6f:a4:70: 98:91:d5:aa:2e:d8:30:74:0f:35:81:43:33:71:cd:dc:45:47: fc:02:7f:f5:48:14:bc:a0:58:81:b3:61:36:ce:93:bb:ac:a3: ff:88:9c:c9:54:92:0a:9a:1b:3d:07:05:cd:8a:dc:08:ee:be: 8c:97:fd:0c:96:ee:4b:95:8f:d8:b1:7f:3b:18:56:59:5e:a4: 40:09:de:d8:c2:55:8a:d8:22:1e:62:da:af:0b:20:c8:96:b2: c2:7e:8b:c6:9f:10:c6:ca:49:d2:93:73:b1:d8:78:ed:2c:1e: a0:8a:e6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09hXE2rFDcpGkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk YmZkYzE0NGEtMTA5Ny00NzAzLTk2MDQtM2Y5MzI2NjhiNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkROx3QPqGwui9/sIYCMVbwnUWNzpVV6t+dtz UuGY2wuwnSXwmUWoVtRBE7xenwCyC5qVMagqehqc1ahtPbPgEfYSj73kZo5v0D/M MP52t8bh/GEFafceRORnSTpClgDmbEkjem3U14veIuTB7j1EavVWra8zV8JYdgU4 T2ZzhY8QG70pPqdakEGVa85c6tHdbWMHUQbd9sd9eRUavk6ec6BPlmy9GQipy0qG uYUFkkWFDb7xutERyNm8UJ6TJK+ZdutKIQL82nGzu6WpVN5NXjMU7KPQ3lTb7M55 F0XAcNE2Vag3sBc88fXhOhAkO5T9D97fG2fP4CUyntgi7n8qQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAw5EuImDyKUSWGKw2Z9TRgDFdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYjc1OGQ3NjgtNTM2ZS0z YmYyLTk2YTYtZWNjMDU1NDAzMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzXcAHPYN7kyX4XlcbXtoVZLtGmDzn3KIVwtDTkzuNYr1DUvmeSiMum v0XckHKUrP3DGI7SbdyUxEG7PRM+Xwaigcw+kX6rKyfrkTVWC8sZnAS8uYSdpHml weedpzEbThFpkP8ZzxHr0sujqDIdFQWyYb1vGd9ZWROsg8h6pkJt8YLyRXQadWYc 3y1dJ2+kcJiR1aou2DB0DzWBQzNxzdxFR/wCf/VIFLygWIGzYTbOk7uso/+InMlU kgqaGz0HBc2K3AjuvoyX/QyW7kuVj9ixfzsYVllepEAJ3tjCVYrYIh5i2q8LIMiW ssJ+i8afEMbKSdKTc7HYeO0sHqCK5lE= -----END CERTIFICATE-----Generated at Mon Apr 7 01:15:38 2025 by rpki-client