$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa File: 4f833dec-49e6-3832-9493-21b1a1371d61.roa (raw, json) Hash identifier: eMHEueb/rR6DI+rlT+5YEikn0tnr5sUHLm7tA8A2AdI= Subject key identifier: DB:2F:0F:BD:96:BB:91:0B:F7:51:F4:53:75:01:93:A6:8F:43:85:34 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F432858493243E455D7A3122EAF979D80 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 150.252.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e4:55:d7:a3:12:2e:af:97:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=3438367e-eed5-4fa3-ab63-a35fe83e3dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:a2:d9:fc:0b:a2:6b:b9:4f:12:59:12:b0: 2a:ef:e7:83:23:58:07:f7:0c:ab:d6:d4:2e:3d:65: 0b:e4:32:29:4f:1d:72:c1:95:0a:30:d6:dc:bd:1e: fe:f6:13:83:f6:6f:b3:a4:a5:88:a2:a0:e2:d5:0a: 36:6f:5b:79:9f:17:9b:ec:2f:9c:bc:8f:26:72:98: b4:19:46:7e:27:15:85:72:ff:3b:f8:37:2c:08:81: e7:b9:a8:3a:2b:f0:d8:92:ef:46:a3:ba:63:8d:1d: 9f:9c:86:c9:67:d8:11:14:f1:e2:de:ae:0c:ad:23: 01:44:b8:66:83:51:15:0d:ba:06:c8:02:54:92:cb: a1:10:99:6e:b2:1a:37:3a:98:72:54:46:85:13:41: 1f:44:07:52:59:36:0e:34:cb:81:ed:f3:91:f8:df: 91:24:bf:b4:c1:11:a8:69:a5:01:e2:ea:d7:e0:77: ba:4e:c5:f6:c1:48:cb:e9:b2:6f:34:92:6b:6f:bd: 5e:d3:2f:87:69:24:b3:05:7d:dd:c1:6b:47:61:58: 0a:fa:f9:58:d8:2a:56:9e:8f:3d:09:37:e9:c0:b2: a5:43:8c:07:37:16:71:90:3a:fb:f7:bc:1e:96:a2: 89:2b:a9:1c:d9:c1:95:07:bd:89:67:77:a7:51:ce: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2F:0F:BD:96:BB:91:0B:F7:51:F4:53:75:01:93:A6:8F:43:85:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0d:95:76:39:a3:c1:8d:36:1e:c4:29:fa:cb:0f:95:63:27: 40:3a:03:77:75:18:20:eb:93:b7:0e:2e:fc:d2:15:d6:15:2d: 25:6d:4f:a8:3e:9b:35:02:d3:45:e1:7d:8c:38:7d:44:42:45: 12:57:3a:a9:1f:4c:9a:45:6f:e5:14:41:e6:4f:17:0b:0b:7b: cf:b4:02:2e:87:b8:b9:66:16:2a:0e:7c:2d:0a:20:2c:b5:a7: 98:64:ba:dc:7d:41:62:3d:a0:e2:40:75:57:d4:b5:c1:84:49: 2e:58:f5:75:57:e5:9e:10:91:cc:46:22:40:5e:12:01:53:44: c8:f7:18:c4:60:03:58:35:ff:0f:4c:2b:4f:d4:ed:cd:8c:48: 64:63:1b:d8:1e:c4:8d:87:19:a7:5a:23:4b:7b:ed:f6:08:bd: 08:d4:82:31:3a:4a:75:79:b3:03:dd:78:1a:2e:d2:7f:1d:26: 53:d0:82:93:a9:38:8a:ff:2d:6c:74:2d:27:81:a3:de:ad:6d: 1d:93:07:bd:29:0c:9d:b5:59:2f:e0:07:de:8e:a9:a4:fe:83: d9:ff:88:2d:54:a8:cc:42:9d:8c:cd:47:7a:89:89:12:dd:d3: a3:b4:c0:e8:df:8f:1f:61:7a:ab:59:cc:26:63:f3:20:2e:d5: cd:e7:5e:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+RV16MSLq+XnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MzQzODM2N2UtZWVkNS00ZmEzLWFiNjMtYTM1ZmU4M2UzZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu76i2fwLomu5TxJZErAq7+eDI1gH9wyr1tQu PWUL5DIpTx1ywZUKMNbcvR7+9hOD9m+zpKWIoqDi1Qo2b1t5nxeb7C+cvI8mcpi0 GUZ+JxWFcv87+DcsCIHnuag6K/DYku9Go7pjjR2fnIbJZ9gRFPHi3q4MrSMBRLhm g1EVDboGyAJUksuhEJlusho3OphyVEaFE0EfRAdSWTYONMuB7fOR+N+RJL+0wRGo aaUB4urX4He6TsX2wUjL6bJvNJJrb71e0y+HaSSzBX3dwWtHYVgK+vlY2CpWno89 CTfpwLKlQ4wHNxZxkDr797welqKJK6kc2cGVB72JZ3enUc5hVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsvD72Wu5EL91H0U3UBk6aPQ4U0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvNGY4MzNkZWMtNDllNi0z ODMyLTk0OTMtMjFiMWExMzcxZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMNlXY5o8GNNh7EKfrLD5VjJ0A6A3d1GCDrk7cOLvzSFdYVLSVtT6g+ mzUC00XhfYw4fURCRRJXOqkfTJpFb+UUQeZPFwsLe8+0Ai6HuLlmFioOfC0KICy1 p5hkutx9QWI9oOJAdVfUtcGESS5Y9XVX5Z4QkcxGIkBeEgFTRMj3GMRgA1g1/w9M K0/U7c2MSGRjG9gexI2HGadaI0t77fYIvQjUgjE6SnV5swPdeBou0n8dJlPQgpOp OIr/LWx0LSeBo96tbR2TB70pDJ21WS/gB96OqaT+g9n/iC1UqMxCnYzNR3qJiRLd 06O0wOjfjx9heqtZzCZj8yAu1c3nXho= -----END CERTIFICATE-----Generated at Sun Apr 13 01:29:44 2025 by rpki-client