$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa File: 1fda95ac-3843-3be1-be0c-4e0693659ba3.roa (raw, json) Hash identifier: qvPwf4TFT94TRq5RVN09r9seuzaaeOf1tNkDek8hY3I= Subject key identifier: EC:77:A9:BE:19:A3:81:2C:FF:97:29:D2:60:46:58:EC:D5:39:4B:00 Certificate issuer: /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb Certificate serial: 010D0C9F43285848F22C6E5A4166BA6EC2070380 Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 32338 IP address blocks: 162.251.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6e:5a:41:66:ba:6e:c2:07:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=bae0e95a-b28a-4711-98b3-549de5753ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:3f:15:d7:66:a6:46:12:a3:01:64:a9:0b: 03:c6:e0:a6:86:95:88:dd:ea:04:03:da:b7:3c:33: 03:f4:6e:a7:5f:17:81:2c:48:6f:a2:13:a1:0f:ad: 7b:09:c6:a7:0d:f2:0a:f2:3b:52:37:78:6b:01:1c: 7c:f4:9f:c5:9e:a6:57:0a:a7:a8:11:53:77:c0:44: 9f:8c:08:ce:0b:41:b2:f7:64:46:c7:f6:6b:ab:a3: 26:1c:a3:ee:58:5a:bd:a5:4c:f6:bd:b9:47:42:a1: 1e:dd:6e:c3:9e:de:c5:f9:e3:4a:36:dc:81:de:e0: 2c:dd:46:c8:5a:6c:74:15:ff:2d:7e:34:b2:80:a1: 34:e0:db:a2:8e:3d:75:8e:ce:2e:29:a7:fe:b8:83: 70:52:31:93:32:a4:f4:f0:17:2e:51:7e:75:51:0f: f2:6e:91:10:75:a5:4a:37:18:51:9a:ab:94:a4:c5: 0a:b7:c1:6b:85:21:88:05:81:81:64:7f:e7:90:29: 2e:38:05:d1:0b:bc:0b:8a:c2:37:38:c5:1e:84:db: f8:c8:25:3e:45:b7:40:f2:2b:42:8b:c7:3b:f0:87: b4:8c:aa:e0:c7:c7:15:47:ea:2c:d2:3e:fc:e9:d2: 80:22:8c:2f:b5:ee:f1:b3:49:b5:87:19:b4:3c:14: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:77:A9:BE:19:A3:81:2C:FF:97:29:D2:60:46:58:EC:D5:39:4B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl X509v3 Authority Key Identifier: keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer sbgp-ipAddrBlock: critical IPv4: 162.251.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0f:52:56:a9:a3:0e:17:ad:30:62:86:8c:42:98:0d:cf:34: 1a:6f:fc:2a:e2:2e:10:81:66:a2:ce:f1:51:e0:f9:cb:ad:f5: d6:bc:37:83:6b:26:79:99:5f:61:93:92:75:30:d4:e8:b0:8d: da:f6:f5:cc:dd:44:85:5a:4b:81:a5:35:98:1d:f6:f4:d6:e5: 40:4a:6d:0b:42:2e:30:b0:2a:02:5f:44:8d:3a:c4:c9:bd:b6: 6f:d7:91:6e:2b:18:ef:69:be:bf:9d:b1:a0:9f:e2:b9:c9:ec: 2e:8c:5c:62:6a:8b:e3:82:cd:11:f5:ef:8d:ce:8c:0b:f8:24: ed:0c:0e:36:6b:c8:ea:29:b0:72:da:7c:bc:27:78:8e:56:51: 13:63:71:a3:d6:84:5d:a2:ae:9c:ae:f8:ac:c9:3e:c7:23:29: 8c:6e:a7:d0:f2:54:fa:b4:40:3a:73:d8:31:61:dc:eb:30:25: 64:54:6d:74:40:4d:03:20:3f:18:3b:47:86:47:d9:e0:3d:5e: b3:34:31:49:13:e5:de:3e:07:40:73:0a:de:d5:eb:b9:62:71: ef:f8:be:c7:96:87:06:d0:92:a1:98:cb:1c:e1:bb:70:d0:89: 73:63:1e:63:c1:69:51:72:c7:95:af:0c:73:7a:9c:50:bb:89: 37:cf:ee:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG5aQWa6bsIHA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2OWE0NDEtNzZiNy00YjIwLWE0MTEtN2E2MThiZDYx YmNiMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YmFlMGU5NWEtYjI4YS00NzExLTk4YjMtNTQ5ZGU1NzUzY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSg/FddmpkYSowFkqQsDxuCmhpWI3eoEA9q3 PDMD9G6nXxeBLEhvohOhD617CcanDfIK8jtSN3hrARx89J/FnqZXCqeoEVN3wESf jAjOC0Gy92RGx/Zrq6MmHKPuWFq9pUz2vblHQqEe3W7Dnt7F+eNKNtyB3uAs3UbI Wmx0Ff8tfjSygKE04Nuijj11js4uKaf+uINwUjGTMqT08BcuUX51UQ/ybpEQdaVK NxhRmquUpMUKt8FrhSGIBYGBZH/nkCkuOAXRC7wLisI3OMUehNv4yCU+RbdA8itC i8c78Ie0jKrgx8cVR+os0j786dKAIowvte7xs0m1hxm0PBRazwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx3qb4Zo4Es/5cp0mBGWOzVOUsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYjY5 YTQ0MS03NmI3LTRiMjAtYTQxMS03YTYxOGJkNjFiY2IvMWZkYTk1YWMtMzg0My0z YmUxLWJlMGMtNGUwNjkzNjU5YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmI2OWE0NDEtNzZiNy00YjIwLWE0 MTEtN2E2MThiZDYxYmNiL2JiNjlhNDQxLTc2YjctNGIyMC1hNDExLTdhNjE4YmQ2 MWJjYi5jcmwwHwYDVR0jBBgwFoAUCUbQpzHIEhtfZmBTS5AMvV2dFSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYjY5YTQ0MS03NmI3LTRiMjAtYTQxMS03YTYx OGJkNjFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQPUlapow4XrTBihoxCmA3PNBpv/CriLhCBZqLO8VHg+cut9da8N4Nr JnmZX2GTknUw1Oiwjdr29czdRIVaS4GlNZgd9vTW5UBKbQtCLjCwKgJfRI06xMm9 tm/XkW4rGO9pvr+dsaCf4rnJ7C6MXGJqi+OCzRH1743OjAv4JO0MDjZryOopsHLa fLwneI5WURNjcaPWhF2irpyu+KzJPscjKYxup9DyVPq0QDpz2DFh3OswJWRUbXRA TQMgPxg7R4ZH2eA9XrM0MUkT5d4+B0BzCt7V67lice/4vseWhwbQkqGYyxzhu3DQ iXNjHmPBaVFyx5WvDHN6nFC7iTfP7lQ= -----END CERTIFICATE-----Generated at Sat Apr 12 00:32:11 2025 by rpki-client