$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa File: afbebce4-9985-368e-9ee2-c9d9882efa72.roa (raw, json) Hash identifier: 8ICp3jSDrsPjBv4/lW/vLjwhr/812oq6R5Gt7Lp61B0= Subject key identifier: 4E:5D:02:C2:A7:16:2C:AF:49:11:DE:2C:8D:D0:15:76:8A:FC:A3:49 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFB82CC2DDF14F9BA6686A00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa Signing time: Mon 27 Jan 2025 18:44:26 +0000 ROA not before: Mon 27 Jan 2025 18:44:26 +0000 ROA not after: Sun 27 Apr 2025 17:44:26 +0000 asID: 15164 IP address blocks: 173.244.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:b8:2c:c2:dd:f1:4f:9b:a6:68:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:44:26 2025 GMT Not After : Apr 27 17:44:26 2025 GMT Subject: CN=680e7242-5743-4c16-b842-fef4b6120fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:5a:c7:e5:9a:4e:95:c5:07:89:36:e3:32: 17:af:d8:ff:87:62:2e:db:bf:ad:cb:12:c4:ae:a8: 9b:39:db:74:ef:c4:84:6b:75:a1:b2:c6:cf:12:c5: 59:72:77:7a:2d:87:0d:c6:28:06:67:ba:12:35:a2: 89:5a:df:a8:1a:db:53:7e:0c:cd:52:11:a6:be:fa: 81:a0:46:52:8d:9d:65:ce:af:2f:5f:6a:de:b0:31: c0:5e:ac:c1:a7:9f:07:2b:b7:d7:38:14:9c:61:69: 2a:ee:e6:d6:db:f8:9c:8d:7d:98:b4:43:1f:6d:60: 24:70:c5:3b:10:1b:63:45:c5:5c:87:65:21:fa:7e: 62:3a:83:67:f0:c1:1c:d0:a6:86:37:bb:e9:55:12: 69:b5:2b:2b:ba:70:50:c8:4b:b5:78:d7:e2:eb:f8: 54:05:64:a5:db:97:34:34:cc:28:e8:22:32:d2:e9: 09:e7:42:7a:eb:66:1e:db:55:a2:19:d5:d5:0c:44: e7:7b:62:09:2b:56:99:ce:44:9d:7b:39:40:e3:21: 4a:f4:30:61:25:a1:63:c1:63:fa:0e:28:c8:28:aa: eb:90:2a:a3:b8:9f:14:8a:af:be:7b:48:0d:30:dd: 5f:e5:0a:93:08:2c:72:39:7b:5b:ba:f5:75:b6:c4: 58:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5D:02:C2:A7:16:2C:AF:49:11:DE:2C:8D:D0:15:76:8A:FC:A3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f2:19:99:ce:79:b6:f3:6a:50:fd:73:a6:bf:90:e3:ab:fa: 95:93:15:31:35:fa:7c:82:e8:5d:f9:57:f3:6b:8e:6f:77:c2: 82:6e:0e:38:79:3a:47:9c:77:08:e2:35:cd:38:d0:60:d4:83: a3:14:38:1a:a3:b5:83:f0:39:d2:5c:f0:09:07:7b:16:07:e0: ef:cd:32:8b:a5:1e:b8:1c:c1:c2:eb:b7:c7:dd:7a:f5:cb:35: b1:f5:93:98:3b:ac:38:15:20:c7:ae:68:16:37:1b:7c:a1:29: 04:8b:8e:b8:2d:cf:8e:6a:c2:35:fd:50:4c:37:2e:9d:7c:29: 00:5d:f8:73:81:4b:e3:79:3f:db:b2:03:d9:d6:06:10:b5:20: 41:b6:9e:da:bb:f9:fd:32:e7:b9:bd:32:16:df:da:c4:7c:f8: 52:44:da:6b:70:c1:fd:f4:3b:3b:08:47:b8:d8:74:a7:ed:c8: fc:c1:1b:fb:42:30:1e:33:ce:4b:83:bd:b8:08:d6:80:d1:f5: f9:99:29:3d:fd:5e:68:6a:3e:02:95:3e:3f:b2:a4:15:eb:db: 10:f2:71:43:9a:e6:8b:85:6c:8e:6f:19:e1:0e:78:f5:7d:e9: 11:97:38:3b:23:c9:35:8b:47:99:cf:74:cc:de:52:fe:32:97: c0:d1:f8:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivuCzC3fFPm6ZoagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4NDQyNloXDTI1MDQyNzE3NDQyNlowLzEtMCsGA1UEAxMk NjgwZTcyNDItNTc0My00YzE2LWI4NDItZmVmNGI2MTIwZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPlax+WaTpXFB4k24zIXr9j/h2Iu27+tyxLE rqibOdt078SEa3WhssbPEsVZcnd6LYcNxigGZ7oSNaKJWt+oGttTfgzNUhGmvvqB oEZSjZ1lzq8vX2resDHAXqzBp58HK7fXOBScYWkq7ubW2/icjX2YtEMfbWAkcMU7 EBtjRcVch2Uh+n5iOoNn8MEc0KaGN7vpVRJptSsrunBQyEu1eNfi6/hUBWSl25c0 NMwo6CIy0ukJ50J662Ye21WiGdXVDETne2IJK1aZzkSdezlA4yFK9DBhJaFjwWP6 DijIKKrrkCqjuJ8Uiq++e0gNMN1f5QqTCCxyOXtbuvV1tsRY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5dAsKnFiyvSRHeLI3QFXaK/KNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYWZiZWJjZTQtOTk4NS0z NjhlLTllZTItYzlkOTg4MmVmYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXyGZnOebbzalD9c6a/kOOr+pWTFTE1+nyC6F35V/Nrjm93woJuDjh5 OkecdwjiNc040GDUg6MUOBqjtYPwOdJc8AkHexYH4O/NMoulHrgcwcLrt8fdevXL NbH1k5g7rDgVIMeuaBY3G3yhKQSLjrgtz45qwjX9UEw3Lp18KQBd+HOBS+N5P9uy A9nWBhC1IEG2ntq7+f0y57m9Mhbf2sR8+FJE2mtwwf30OzsIR7jYdKftyPzBG/tC MB4zzkuDvbgI1oDR9fmZKT39XmhqPgKVPj+ypBXr2xDycUOa5ouFbI5vGeEOePV9 6RGXODsjyTWLR5nPdMzeUv4yl8DR+Dk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:15:36 2025 by rpki-client