$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/158a5a57-183e-3403-b6e4-6aee4da39bb3.roa File: 158a5a57-183e-3403-b6e4-6aee4da39bb3.roa (raw, json) Hash identifier: YDAjQLh7avbvwDmBQvE8JjVzHpNL5uapvELcwZlhgv4= Subject key identifier: F9:38:B5:4C:75:85:4D:BD:EB:BB:46:08:F2:69:FF:0C:95:5A:A4:86 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6C165AB3EAC23DD4DC7C0 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/158a5a57-183e-3403-b6e4-6aee4da39bb3.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 15290 IP address blocks: 209.146.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c1:65:ab:3e:ac:23:dd:4d:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=952f2c72-333e-4398-bc7d-717d99d8e90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:43:ac:d2:11:74:39:92:86:7b:a3:3f:e3: b3:89:1f:49:9e:f5:c6:51:88:d2:21:42:35:f9:5c: 30:4b:36:fa:48:c9:7d:42:0c:b8:62:72:56:3c:03: 1d:54:95:6d:14:4f:1c:4b:3d:5b:13:b9:ed:20:73: e2:11:e8:ac:20:3e:bd:8e:85:f2:c6:c3:35:72:dd: dc:dc:d7:d0:eb:39:64:a2:a7:5f:9e:35:36:04:16: e1:6c:c8:c3:ff:63:0d:8b:5d:18:5d:08:a8:46:3a: d3:55:d0:0a:a1:05:80:9e:5d:10:53:75:d5:5c:5e: 4f:e3:f9:e4:8a:06:a3:fb:dd:e7:75:f8:9e:c5:e7: 9f:87:d6:d5:a6:51:0e:22:9e:cb:bc:ac:c5:45:eb: bb:8f:c8:3c:c2:a4:f1:49:0b:7e:d3:b7:db:4c:99: 3e:fe:06:c2:90:87:d1:db:72:1d:e8:ae:12:39:24: b1:c9:e6:e5:eb:9f:38:9e:1f:56:d7:5f:c0:61:9c: ab:48:25:74:8f:f2:ce:fc:db:02:d7:23:d4:58:21: d8:61:ec:5a:cb:4a:99:4e:b0:21:00:e7:8a:71:93: 54:e6:01:7e:06:7e:0d:16:e6:01:69:7e:65:b6:6a: 00:61:92:4d:b6:69:94:c3:eb:a7:1f:a4:a8:4a:75: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:38:B5:4C:75:85:4D:BD:EB:BB:46:08:F2:69:FF:0C:95:5A:A4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/158a5a57-183e-3403-b6e4-6aee4da39bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 209.146.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d3:c2:9f:bf:d3:d8:fb:07:0e:e5:8c:d4:7c:77:83:e5:72: 8b:90:ff:00:b4:4f:6b:bc:07:56:d4:ef:60:10:84:06:b5:68: c0:87:da:5c:9c:f2:9b:76:e9:c0:69:2c:24:e3:2e:2b:ef:dd: d9:33:d0:86:29:5d:83:b2:37:65:c4:99:8b:c8:b3:1a:93:d9: a8:4d:e5:0d:48:62:ed:cc:76:d5:3e:45:45:18:c5:82:b1:3b: 7e:e9:c9:e1:96:9d:cd:ab:86:09:63:76:71:61:c5:17:c5:2a: 02:c4:48:29:55:a9:e8:a9:fc:59:7d:69:94:3f:3c:35:92:5b: 90:87:ab:fa:7c:a1:be:b3:9b:57:cf:1c:b9:d2:42:fd:06:42: 34:7d:97:10:05:a7:78:c5:52:8e:a8:85:c9:11:f6:27:1f:74: bb:80:b1:c2:0b:e8:33:f6:66:93:33:94:bf:71:17:07:b7:b5: 32:07:c0:33:02:61:be:39:ad:fa:9a:8c:b1:20:08:d1:4e:29: d9:ab:d6:a9:94:55:0d:85:51:9d:cf:21:1c:fa:0a:2a:7c:20: 29:d9:e0:ae:b1:b7:c4:5f:06:07:3d:cc:d7:d7:c5:1c:f0:64: b1:f7:67:5f:7b:78:b0:cf:47:99:b6:2d:9f:f3:09:e7:37:f5: 35:f8:b6:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsFlqz6sI91Nx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk OTUyZjJjNzItMzMzZS00Mzk4LWJjN2QtNzE3ZDk5ZDhlOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR1DrNIRdDmShnujP+OziR9JnvXGUYjSIUI1 +VwwSzb6SMl9Qgy4YnJWPAMdVJVtFE8cSz1bE7ntIHPiEeisID69joXyxsM1ct3c 3NfQ6zlkoqdfnjU2BBbhbMjD/2MNi10YXQioRjrTVdAKoQWAnl0QU3XVXF5P4/nk igaj+93ndfiexeefh9bVplEOIp7LvKzFReu7j8g8wqTxSQt+07fbTJk+/gbCkIfR 23Id6K4SOSSxyebl6584nh9W11/AYZyrSCV0j/LO/NsC1yPUWCHYYexay0qZTrAh AOeKcZNU5gF+Bn4NFuYBaX5ltmoAYZJNtmmUw+unH6SoSnUTywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk4tUx1hU2967tGCPJp/wyVWqSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMTU4YTVhNTctMTgzZS0z NDAzLWI2ZTQtNmFlZTRkYTM5YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITTwp+/09j7Bw7ljNR8d4PlcouQ/wC0T2u8B1bU72AQhAa1aMCH2lyc 8pt26cBpLCTjLivv3dkz0IYpXYOyN2XEmYvIsxqT2ahN5Q1IYu3MdtU+RUUYxYKx O37pyeGWnc2rhgljdnFhxRfFKgLESClVqeip/Fl9aZQ/PDWSW5CHq/p8ob6zm1fP HLnSQv0GQjR9lxAFp3jFUo6ohckR9icfdLuAscIL6DP2ZpMzlL9xFwe3tTIHwDMC Yb45rfqajLEgCNFOKdmr1qmUVQ2FUZ3PIRz6Cip8ICnZ4K6xt8RfBgc9zNfXxRzw ZLH3Z197eLDPR5m2LZ/zCec39TX4tk0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:00 2025 by rpki-client