$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa File: 651c7010-2779-3e43-956b-dcc22baffc29.roa (raw, json) Hash identifier: CsfqqgEmt0MkEtBS1A9yHwn65nHzsbDU9Yu6P6RvA9w= Subject key identifier: 6F:2F:64:7F:D8:FA:61:1A:2F:13:0A:B8:21:19:C0:9E:57:42:55:FA Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285849403950C83CA86546B7A62D5E Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 159.172.202.0/24 maxlen: 24 159.172.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:50:c8:3c:a8:65:46:b7:a6:2d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=8e7639e4-213b-4223-afcc-a2058a07ef6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:29:93:8d:e1:76:4b:5e:b9:a8:84:ab:4e: 9e:ed:a0:a8:af:83:c4:95:5e:c3:ec:3c:6c:c5:17: ee:42:9d:be:65:9a:bc:c2:70:c3:3f:f2:d3:cd:f3: 99:f3:73:c1:ef:76:1e:94:b5:57:b9:e2:9b:92:c5: 35:7c:24:e9:d6:85:e5:c8:aa:11:d1:d5:ca:5b:66: 0c:27:bc:0c:d2:42:f9:44:0b:d4:bb:cc:60:3c:b4: 13:43:6a:06:bd:c8:ad:75:4d:ec:57:06:2c:55:e1: 8f:76:8e:e9:c3:f7:34:62:db:33:32:24:43:46:5d: 0b:53:82:af:ed:cd:43:a8:3f:92:58:98:2a:fd:10: 54:8c:65:83:3a:86:f1:bf:d7:38:b7:96:2b:f6:03: 7b:ca:40:d8:ab:ec:3d:bc:2e:19:27:f1:be:ab:48: 47:49:ff:b1:de:8b:e7:01:88:6c:77:41:87:a5:5c: 50:b9:b1:6e:31:97:08:a5:e6:27:aa:cb:83:1c:11: 7c:2d:3b:65:68:5a:e6:6a:36:e4:0d:89:a2:a1:f5: 0d:25:81:9c:99:e1:1f:f6:1b:42:3a:6a:cc:08:ff: 6d:7e:8c:f3:06:73:48:9a:9e:37:02:35:e9:99:3f: 21:92:50:13:5d:38:70:5a:00:1e:c6:b7:a4:7d:61: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2F:64:7F:D8:FA:61:1A:2F:13:0A:B8:21:19:C0:9E:57:42:55:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:90:1d:3e:19:03:c4:9c:80:d6:fb:41:6f:00:15:3e:1e:7f: 67:4c:06:b3:83:37:b8:93:0f:66:c8:6a:9e:25:cc:86:57:dc: 45:16:66:9b:f3:6f:e1:8f:8c:1e:37:f9:19:d2:9a:4f:d5:bb: 4b:a8:81:93:24:db:37:f9:92:74:a5:be:96:af:5e:a3:cd:10: 53:d1:ea:0e:a1:db:ea:8a:0d:bc:8c:a6:48:3a:27:cf:de:f6: a8:6a:2a:b5:b0:e6:b7:f4:60:b1:10:d3:6a:cc:ce:aa:8f:b2: 17:be:2e:25:f1:98:df:01:41:46:01:7b:ce:01:f2:37:18:a4: 47:01:dc:82:6d:e5:25:cc:70:34:5b:59:4f:e2:f2:7a:89:ab: 27:3a:2c:e3:c5:eb:64:ff:0b:3e:83:84:ca:cf:50:83:a0:94: d5:70:c4:fa:8d:b5:25:d0:50:09:74:dd:1c:ee:88:4c:72:d9: 55:0b:ac:11:49:0e:ce:27:26:f2:0f:b5:56:87:98:39:0e:03: 43:dc:e1:7a:27:9e:1b:4d:28:22:59:3e:03:a2:73:67:f8:a2: 8a:29:01:7a:1a:ed:2d:c7:6d:e4:59:4e:1f:b8:dd:34:7b:72: 49:b8:22:e4:46:b3:cc:79:3c:94:2d:75:6c:ac:45:bd:e7:98: d4:1c:f0:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOVDIPKhlRremLV4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk OGU3NjM5ZTQtMjEzYi00MjIzLWFmY2MtYTIwNThhMDdlZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NUpk43hdkteuaiEq06e7aCor4PElV7D7Dxs xRfuQp2+ZZq8wnDDP/LTzfOZ83PB73YelLVXueKbksU1fCTp1oXlyKoR0dXKW2YM J7wM0kL5RAvUu8xgPLQTQ2oGvcitdU3sVwYsVeGPdo7pw/c0YtszMiRDRl0LU4Kv 7c1DqD+SWJgq/RBUjGWDOobxv9c4t5Yr9gN7ykDYq+w9vC4ZJ/G+q0hHSf+x3ovn AYhsd0GHpVxQubFuMZcIpeYnqsuDHBF8LTtlaFrmajbkDYmiofUNJYGcmeEf9htC OmrMCP9tfozzBnNImp43AjXpmT8hklATXThwWgAexrekfWFQvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8vZH/Y+mEaLxMKuCEZwJ5XQlX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvNjUxYzcwMTAtMjc3OS0z ZTQzLTk1NmItZGNjMjJiYWZmYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn6zKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGQHT4ZA8ScgNb7QW8AFT4ef2dMBrODN7iTD2bIap4lzIZX3EUWZpvz b+GPjB43+RnSmk/Vu0uogZMk2zf5knSlvpavXqPNEFPR6g6h2+qKDbyMpkg6J8/e 9qhqKrWw5rf0YLEQ02rMzqqPshe+LiXxmN8BQUYBe84B8jcYpEcB3IJt5SXMcDRb WU/i8nqJqyc6LOPF62T/Cz6DhMrPUIOglNVwxPqNtSXQUAl03RzuiExy2VULrBFJ Ds4nJvIPtVaHmDkOA0Pc4XonnhtNKCJZPgOic2f4ooopAXoa7S3HbeRZTh+43TR7 ckm4IuRGs8x5PJQtdWysRb3nmNQc8No= -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:01 2025 by rpki-client