$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fdc82993-e564-35b5-97a4-dac6930faf77.roa File: fdc82993-e564-35b5-97a4-dac6930faf77.roa (raw, json) Hash identifier: KmSWc9CRoN6u5QRoqjDV09u2y5P1NJsP0VF40J0qWWA= Subject key identifier: 1A:29:74:CF:54:89:37:80:ED:59:1F:47:39:64:E9:22:10:B9:AD:02 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F43285848BBBB71B5EDBA095F2AE61F00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fdc82993-e564-35b5-97a4-dac6930faf77.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 23473 IP address blocks: 153.33.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:71:b5:ed:ba:09:5f:2a:e6:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=2f39fbd8-7b6a-4eb7-b0e7-2c5a98627df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:35:cd:51:32:f7:da:3d:22:68:67:46:c5: 1a:47:7d:80:02:23:b9:ff:93:d0:59:07:63:bd:dc: 3d:c6:99:7f:fe:9b:89:17:74:40:da:3a:f0:37:ff: b1:bd:29:06:f7:df:ff:6c:cb:b0:38:ce:b6:39:33: 44:d1:c2:ed:c3:00:ed:1c:6d:dd:87:43:d0:79:82: 43:79:18:9a:a6:48:cc:4e:cc:b2:5e:f0:d2:10:f5: 59:4e:c9:e5:6b:4d:86:2e:61:d2:e5:9f:a8:46:b2: 70:c8:f7:c0:69:db:08:e5:a3:74:4b:0b:a1:84:70: e6:82:28:84:a2:f2:81:06:d2:56:28:c1:d2:62:34: 7c:04:a1:ce:bd:38:35:3a:ac:16:b5:e0:c5:17:30: f1:5e:c5:5b:10:b8:f6:6f:5b:69:48:de:ce:71:7f: 7b:c3:91:f0:5f:21:0b:ea:12:9d:63:04:0a:15:62: 8e:a2:17:f5:4c:ab:a8:0b:42:9e:3d:69:fc:dc:c0: df:42:54:c6:bd:a5:e8:17:c5:ba:22:a7:ab:59:08: 5b:c1:eb:de:4e:15:ef:43:54:fb:c4:a8:d9:5d:23: 23:c0:1c:78:78:28:ed:64:c3:0d:aa:1e:99:02:3b: 20:7c:0f:db:2d:86:3c:74:38:a3:0e:a6:05:03:02: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:74:CF:54:89:37:80:ED:59:1F:47:39:64:E9:22:10:B9:AD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fdc82993-e564-35b5-97a4-dac6930faf77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:15:ed:b5:e4:07:61:03:70:d4:4f:6c:94:7d:59:a1:44:11: 4c:bc:9b:be:dc:86:42:f0:2c:6e:4f:10:de:0e:60:b3:a2:2e: 69:e0:8b:c0:42:08:8c:50:9b:f1:fe:2e:b7:98:27:b9:27:e3: e9:cb:d2:fe:cf:9a:8a:b6:91:4e:54:08:9d:0d:11:09:0a:c6: bd:28:8d:11:1e:a4:3e:23:10:b8:fe:78:72:95:db:0d:15:b6: 68:38:d1:56:04:3d:2b:d3:0d:4f:d6:fe:d2:ed:f1:28:86:a0: e8:d4:7b:bc:80:f4:39:51:98:18:c3:ee:ac:0e:e5:f1:57:cc: 64:5b:21:0f:4f:47:ec:cb:a6:55:56:4f:19:02:e7:3b:0a:5e: 9e:eb:ce:6a:e6:71:5b:76:74:28:1d:2f:8d:87:eb:ab:59:c0: 33:49:01:20:8f:1e:16:f3:0d:58:13:8c:25:bb:22:65:d6:dc: 6a:96:6d:be:6a:f1:f2:35:b3:b4:89:dc:18:32:5a:2e:dc:66: 41:6d:a3:45:f7:fc:51:2c:bb:39:0f:b6:a3:07:5f:a8:6c:6c: 0f:2f:c1:08:b0:be:28:ee:3c:89:37:0e:11:9c:7a:cc:a9:84: 39:f4:f6:1a:c5:24:e8:f1:8d:7a:92:b3:11:53:a2:4f:cb:d6: a2:43:3d:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3G17boJXyrmHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MmYzOWZiZDgtN2I2YS00ZWI3LWIwZTctMmM1YTk4NjI3ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeY1zVEy99o9ImhnRsUaR32AAiO5/5PQWQdj vdw9xpl//puJF3RA2jrwN/+xvSkG99//bMuwOM62OTNE0cLtwwDtHG3dh0PQeYJD eRiapkjMTsyyXvDSEPVZTsnla02GLmHS5Z+oRrJwyPfAadsI5aN0SwuhhHDmgiiE ovKBBtJWKMHSYjR8BKHOvTg1OqwWteDFFzDxXsVbELj2b1tpSN7OcX97w5HwXyEL 6hKdYwQKFWKOohf1TKuoC0KePWn83MDfQlTGvaXoF8W6IqerWQhbweveThXvQ1T7 xKjZXSMjwBx4eCjtZMMNqh6ZAjsgfA/bLYY8dDijDqYFAwLUFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBopdM9UiTeA7VkfRzlk6SIQua0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZmRjODI5OTMtZTU2NC0z NWI1LTk3YTQtZGFjNjkzMGZhZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4V7bXkB2EDcNRPbJR9WaFEEUy8m77chkLwLG5PEN4OYLOiLmngi8BC CIxQm/H+LreYJ7kn4+nL0v7Pmoq2kU5UCJ0NEQkKxr0ojREepD4jELj+eHKV2w0V tmg40VYEPSvTDU/W/tLt8SiGoOjUe7yA9DlRmBjD7qwO5fFXzGRbIQ9PR+zLplVW TxkC5zsKXp7rzmrmcVt2dCgdL42H66tZwDNJASCPHhbzDVgTjCW7ImXW3GqWbb5q 8fI1s7SJ3BgyWi7cZkFto0X3/FEsuzkPtqMHX6hsbA8vwQiwvijuPIk3DhGcesyp hDn09hrFJOjxjXqSsxFTok/L1qJDPac= -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:10 2025 by rpki-client