$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/b73117e3-06f9-3fe2-bae7-9f7a1fa3a8d6.roa File: b73117e3-06f9-3fe2-bae7-9f7a1fa3a8d6.roa (raw, json) Hash identifier: n/IVbDqkwmtR7Tl270fx2ZAh/LZdSnn0sX+25fqqMEU= Subject key identifier: 07:31:2F:CA:A1:AB:21:3C:65:E2:0F:AE:50:8E:BB:AC:FB:CB:4F:30 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F432858493243E2F232306AE4E77F25E0 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/b73117e3-06f9-3fe2-bae7-9f7a1fa3a8d6.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 15313 IP address blocks: 150.252.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e2:f2:32:30:6a:e4:e7:7f:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=f2ec486d-2717-4d73-9a85-acfd91c88b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:10:29:0a:08:1d:42:97:98:9f:6d:b0:17: 21:07:65:52:89:1d:ca:37:8c:e7:06:fc:96:c2:18: 5f:e5:73:1e:36:ae:8e:ae:b8:ab:70:d4:9c:2c:f4: 85:53:2d:51:f9:f3:db:9b:09:99:24:0d:2d:8c:84: 5c:65:ea:e4:cd:55:27:e0:77:1b:c7:7d:6f:63:42: c8:4d:b8:7d:cb:3f:24:ac:54:2b:5c:0c:a1:30:9c: 4f:e8:4e:b0:fc:da:fa:ce:ae:2f:3f:3f:b7:52:b2: 25:9c:18:03:da:47:02:9f:a9:5c:bc:f0:0b:91:10: 22:2a:57:b2:7c:9a:f6:4f:57:f4:64:77:cb:f3:f5: 68:ab:bf:75:e9:c1:74:5c:b2:2f:9b:64:04:95:62: dc:c6:d6:bf:48:dd:21:b9:8f:b9:63:62:00:60:ff: d1:55:1c:60:64:08:31:cf:33:cb:68:38:18:b8:d2: 6f:d1:d9:12:05:ea:86:dc:86:26:b4:af:d8:78:76: 45:df:17:c7:a5:dc:d0:a7:eb:0a:20:51:65:02:c8: a2:ac:be:ce:58:c3:75:ce:d9:6e:68:78:fe:2d:d1: 2b:cd:31:f4:09:18:eb:e7:a4:e6:f2:ff:c4:bd:04: b5:60:bc:61:86:53:da:f7:5f:81:db:ac:1e:22:d7: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:31:2F:CA:A1:AB:21:3C:65:E2:0F:AE:50:8E:BB:AC:FB:CB:4F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/b73117e3-06f9-3fe2-bae7-9f7a1fa3a8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3b:30:c6:35:08:8a:19:52:33:20:3d:c3:0f:e5:76:23:c8: c8:31:cf:d1:69:cf:20:d8:56:a8:11:30:35:7b:60:86:43:da: 3c:63:87:4a:2c:9b:b6:a7:7e:64:a5:cc:5e:92:02:08:15:7a: d8:36:b0:29:04:9a:d2:51:68:39:23:52:b3:cb:d4:44:97:76: 62:cf:cc:9f:10:5e:fb:3d:7f:5d:d3:03:32:92:07:86:03:c4: c8:53:63:2d:89:17:c4:5a:6a:e1:3e:2a:ae:41:a3:87:53:06: 39:b6:13:cf:61:81:84:29:20:1a:91:3e:a7:8f:ca:99:71:04: 87:2d:10:7a:97:5e:62:71:3f:f3:be:26:13:91:93:5e:5c:c9: 83:8d:dd:f5:cc:9c:09:c2:6e:98:68:03:43:be:b6:41:8c:2a: 96:a7:3d:fa:a3:ef:a2:92:08:de:28:2a:39:b4:f2:05:3e:6a: 6d:d8:36:c6:a0:7c:2a:03:d1:bf:83:be:1b:74:96:7b:71:49: ed:e5:1f:2b:b5:8f:6a:bf:67:2e:f2:17:39:33:05:1b:aa:9a: 8f:c6:19:1d:95:da:9c:cc:ed:46:5d:20:d2:7e:dc:16:cf:4a: cb:ea:c8:ad:d6:7e:d8:7f:60:30:bc:3b:5f:b3:fc:1c:9d:81: a7:c7:57:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+LyMjBq5Od/JeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk ZjJlYzQ4NmQtMjcxNy00ZDczLTlhODUtYWNmZDkxYzg4YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVEQKQoIHUKXmJ9tsBchB2VSiR3KN4znBvyW whhf5XMeNq6OrrircNScLPSFUy1R+fPbmwmZJA0tjIRcZerkzVUn4Hcbx31vY0LI Tbh9yz8krFQrXAyhMJxP6E6w/Nr6zq4vPz+3UrIlnBgD2kcCn6lcvPALkRAiKley fJr2T1f0ZHfL8/Voq7916cF0XLIvm2QElWLcxta/SN0huY+5Y2IAYP/RVRxgZAgx zzPLaDgYuNJv0dkSBeqG3IYmtK/YeHZF3xfHpdzQp+sKIFFlAsiirL7OWMN1ztlu aHj+LdErzTH0CRjr56Tm8v/EvQS1YLxhhlPa91+B26weItf+WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcxL8qhqyE8ZeIPrlCOu6z7y08wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvYjczMTE3ZTMtMDZmOS0z ZmUyLWJhZTctOWY3YTFmYTNhOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClvzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ7MMY1CIoZUjMgPcMP5XYjyMgxz9FpzyDYVqgRMDV7YIZD2jxjh0os m7anfmSlzF6SAggVetg2sCkEmtJRaDkjUrPL1ESXdmLPzJ8QXvs9f13TAzKSB4YD xMhTYy2JF8RaauE+Kq5Bo4dTBjm2E89hgYQpIBqRPqePyplxBIctEHqXXmJxP/O+ JhORk15cyYON3fXMnAnCbphoA0O+tkGMKpanPfqj76KSCN4oKjm08gU+am3YNsag fCoD0b+Dvht0lntxSe3lHyu1j2q/Zy7yFzkzBRuqmo/GGR2V2pzM7UZdINJ+3BbP SsvqyK3Wfth/YDC8O1+z/BydgafHV5A= -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:28 2025 by rpki-client