$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/31268c35-577a-38bf-b835-abde8100c6c6.roa File: 31268c35-577a-38bf-b835-abde8100c6c6.roa (raw, json) Hash identifier: ig/2iVxRDVrllZsDV14i0eFiGoGmr5yahT64T4hTjeQ= Subject key identifier: 86:89:4F:4F:40:3F:79:B4:87:17:3D:E7:7E:37:D0:80:30:AE:97:B8 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F43285848530AF383BB236755F1C85A00 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/31268c35-577a-38bf-b835-abde8100c6c6.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 15313 IP address blocks: 150.252.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:f3:83:bb:23:67:55:f1:c8:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=72004a6a-7adc-4855-93c6-7b9407afcdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:f6:93:86:df:85:2c:1b:3d:ab:b3:82:89: 70:08:38:94:11:32:f1:27:f1:f5:c4:de:4e:cb:90: 92:8c:2c:f6:10:74:f1:e0:21:51:c0:c7:db:27:31: 86:86:8c:6b:2b:cf:3c:8a:66:fd:04:4c:e6:4f:6f: 3b:ac:64:d8:17:fd:ea:65:9c:d6:b6:3d:47:d9:db: 15:00:ef:d1:b8:a4:d4:e0:bc:a0:c6:98:dd:04:57: 1f:e6:f1:51:ae:75:a7:80:3b:61:64:d2:99:42:1e: 94:50:59:47:07:62:97:21:50:a5:d3:4c:7e:c9:3c: 68:8e:7a:20:5e:32:78:73:ec:c1:68:3e:e0:76:75: 12:32:31:41:59:5d:8d:ee:4c:b1:ea:c2:52:2c:eb: 06:19:77:a3:fe:43:5a:76:28:9b:77:9f:8f:34:e8: 6d:ce:fd:65:05:32:29:e0:89:2d:b5:23:76:58:56: 15:9c:ec:ca:22:77:b3:ae:76:2c:ee:19:e0:1f:2e: 95:77:ac:53:d9:fb:06:2a:e2:76:48:2b:a8:e3:25: 91:5c:ab:f6:14:d0:5d:15:8c:77:18:be:c1:a8:ec: 78:f1:ee:79:52:7f:04:92:91:77:ad:53:c6:d4:6d: e5:f0:69:ec:cb:38:6c:7f:74:25:b6:b4:41:b4:56: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:4F:4F:40:3F:79:B4:87:17:3D:E7:7E:37:D0:80:30:AE:97:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/31268c35-577a-38bf-b835-abde8100c6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ce:3a:30:89:bc:99:6f:68:4c:9b:1c:6d:65:37:d5:aa:51: 92:54:ff:d0:ca:a7:1f:56:f0:e2:26:43:90:2a:82:5b:85:bd: a7:53:89:a0:5b:1b:e2:2f:63:a8:9c:ca:47:f2:c9:cb:ac:54: 60:89:94:14:69:a0:4d:e7:c2:89:77:aa:ce:c0:55:12:5e:1c: b2:47:e5:66:7e:1a:7b:2b:02:be:c4:7c:24:b1:58:4f:8c:c4: c3:c5:f2:3c:f6:af:58:13:a0:ad:f2:dc:a2:1b:55:ad:19:5b: 54:21:6b:c2:a1:21:1a:f1:ca:53:71:88:d3:30:53:5a:2a:1d: 80:29:b9:8e:68:76:fc:3f:e7:62:b0:4f:80:df:ee:6d:02:c9: 10:43:bd:2e:bb:1e:83:44:f3:2b:31:fe:80:67:4b:b8:cc:7b: d9:d9:c4:a4:42:43:dc:4a:58:36:5c:7c:c9:b7:cf:77:2e:20: a9:d8:87:af:6a:0f:b2:54:37:68:68:bc:27:d3:98:8d:88:a2: 8c:64:f8:e3:d7:81:4a:04:6d:df:2f:74:92:7f:33:be:0d:45: 0e:94:83:f5:58:a5:9c:75:0a:3f:7a:d4:58:d4:c5:95:5c:0e: b0:31:48:f1:cb:47:93:c2:39:62:2b:0c:ad:b6:bf:0e:64:d3: 8d:c4:b8:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCvODuyNnVfHIWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzIwMDRhNmEtN2FkYy00ODU1LTkzYzYtN2I5NDA3YWZjZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOr2k4bfhSwbPauzgolwCDiUETLxJ/H1xN5O y5CSjCz2EHTx4CFRwMfbJzGGhoxrK888imb9BEzmT287rGTYF/3qZZzWtj1H2dsV AO/RuKTU4LygxpjdBFcf5vFRrnWngDthZNKZQh6UUFlHB2KXIVCl00x+yTxojnog XjJ4c+zBaD7gdnUSMjFBWV2N7kyx6sJSLOsGGXej/kNadiibd5+PNOhtzv1lBTIp 4IkttSN2WFYVnOzKInezrnYs7hngHy6Vd6xT2fsGKuJ2SCuo4yWRXKv2FNBdFYx3 GL7BqOx48e55Un8EkpF3rVPG1G3l8Gnsyzhsf3QltrRBtFYBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaJT09AP3m0hxc953430IAwrpe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvMzEyNjhjMzUtNTc3YS0z OGJmLWI4MzUtYWJkZTgxMDBjNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfOOjCJvJlvaEybHG1lN9WqUZJU/9DKpx9W8OImQ5AqgluFvadTiaBb G+IvY6icykfyycusVGCJlBRpoE3nwol3qs7AVRJeHLJH5WZ+GnsrAr7EfCSxWE+M xMPF8jz2r1gToK3y3KIbVa0ZW1Qha8KhIRrxylNxiNMwU1oqHYApuY5odvw/52Kw T4Df7m0CyRBDvS67HoNE8ysx/oBnS7jMe9nZxKRCQ9xKWDZcfMm3z3cuIKnYh69q D7JUN2hovCfTmI2Iooxk+OPXgUoEbd8vdJJ/M74NRQ6Ug/VYpZx1Cj961FjUxZVc DrAxSPHLR5PCOWIrDK22vw5k043EuJk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:02 2025 by rpki-client