$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa File: a6b12d9f-9271-305e-847c-6c6fdf434670.roa (raw, json) Hash identifier: TOI3zfWE543SPn1FPkyTyzlhpB+OjqeK8OUspX+yTY0= Subject key identifier: FB:E2:AC:98:6C:61:C5:EF:80:18:DC:10:AF:6F:DF:D7:AF:1E:16:CD Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F432858490B4C19B88713E651BE8BDE20 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 160 IP address blocks: 128.135.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:19:b8:87:13:e6:51:be:8b:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=e3ba41f3-ed64-489e-a2af-18064a76bd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:e4:b3:eb:88:39:d3:74:80:27:84:3f:d2: 54:d1:7f:b6:36:28:ea:20:99:6c:f9:6f:41:8c:aa: a8:71:d7:d4:eb:0e:3d:28:ea:91:94:dc:8c:86:a6: 05:cf:ca:83:9b:0c:9b:84:dd:c3:66:a2:f6:4e:9c: 15:c7:57:15:9d:14:de:dc:a3:c5:96:0b:8b:e0:08: 7e:f9:89:74:ce:cd:8a:d3:42:14:60:28:59:dc:07: 96:47:13:91:48:de:40:8a:9e:88:03:0a:39:17:66: 8d:99:fb:02:f4:3c:79:bf:15:0c:2c:10:cd:c8:a3: b5:41:62:f2:99:6b:6a:69:9d:a7:30:35:ca:b8:b3: 60:12:2d:54:8f:7f:b0:a0:d0:c5:c2:ca:a5:0d:e5: 6b:19:98:0f:6b:90:1b:b1:92:96:94:81:ca:ca:5d: 2f:1d:e1:79:a7:a5:fe:4b:10:8c:78:3f:9d:3e:38: 85:8d:45:ed:75:22:70:3b:08:6a:91:90:f8:6c:3f: c0:a8:f6:72:5f:3b:f1:87:59:54:3d:e8:a4:45:1a: e8:03:06:60:4d:40:a8:ae:35:91:a3:a5:3a:90:fa: 9d:32:c8:8b:46:03:e1:9b:a2:32:3c:0f:98:13:34: 8e:df:91:c4:3f:9e:b8:1b:b3:5e:7c:b2:63:8d:7b: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:AC:98:6C:61:C5:EF:80:18:DC:10:AF:6F:DF:D7:AF:1E:16:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 128.135.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2f:81:7d:97:89:34:6b:4a:8f:07:72:02:5f:98:aa:61:d3: c4:37:41:b5:03:52:c3:af:d2:73:14:3f:ad:1d:db:d8:bf:8f: e9:93:d2:b1:9c:fe:e5:10:66:10:2c:21:f6:30:34:a8:91:c4: 73:c3:6a:7d:0c:02:d8:7f:6f:3c:f6:95:cf:cf:fc:99:87:c5: 7f:a8:e7:fc:d9:0d:2c:11:9f:87:fc:b4:32:b6:bc:31:d6:5d: af:67:a1:b4:34:c9:35:28:0a:d5:83:42:c0:72:b0:fa:6c:5d: 90:9c:6e:79:e4:be:52:57:74:93:e0:09:28:d5:11:9c:79:11: bb:47:09:44:2e:28:47:68:27:d5:54:ba:9d:dc:15:ca:d6:dd: cb:f8:90:5d:01:fa:e6:f6:fe:a3:b3:41:b3:9e:a8:b6:bb:a6: 55:11:8f:0c:36:cf:64:fe:7d:d8:27:ac:91:22:1b:40:3a:08: 10:81:90:25:81:a1:11:2c:ea:c6:03:0c:bb:cf:45:17:bd:66: 9f:bb:c7:99:41:b7:6f:31:25:0c:bc:74:42:a3:a6:8a:3d:d2: 1e:9c:03:bd:6a:55:de:82:6f:cc:dd:68:90:d8:84:55:59:8d: 65:03:90:a3:d4:9d:9c:cf:12:30:cd:f0:ac:df:77:af:12:d8: 56:42:62:03 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkLTBm4hxPmUb6L3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTNiYTQxZjMtZWQ2NC00ODllLWEyYWYtMTgwNjRhNzZiZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulbks+uIOdN0gCeEP9JU0X+2NijqIJls+W9B jKqocdfU6w49KOqRlNyMhqYFz8qDmwybhN3DZqL2TpwVx1cVnRTe3KPFlguL4Ah+ +Yl0zs2K00IUYChZ3AeWRxORSN5Aip6IAwo5F2aNmfsC9Dx5vxUMLBDNyKO1QWLy mWtqaZ2nMDXKuLNgEi1Uj3+woNDFwsqlDeVrGZgPa5AbsZKWlIHKyl0vHeF5p6X+ SxCMeD+dPjiFjUXtdSJwOwhqkZD4bD/AqPZyXzvxh1lUPeikRRroAwZgTUCorjWR o6U6kPqdMsiLRgPhm6IyPA+YEzSO35HEP564G7NefLJjjXt6MwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPvirJhsYcXvgBjcEK9v39evHhbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvYTZiMTJkOWYtOTI3MS0z MDVlLTg0N2MtNmM2ZmRmNDM0NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhS+BfZeJNGtKjwdyAl+YqmHTxDdBtQNSw6/ScxQ/rR3b2L+P6ZPSsZz+ 5RBmECwh9jA0qJHEc8NqfQwC2H9vPPaVz8/8mYfFf6jn/NkNLBGfh/y0Mra8MdZd r2ehtDTJNSgK1YNCwHKw+mxdkJxueeS+Uld0k+AJKNURnHkRu0cJRC4oR2gn1VS6 ndwVytbdy/iQXQH65vb+o7NBs56otrumVRGPDDbPZP592CeskSIbQDoIEIGQJYGh ESzqxgMMu89FF71mn7vHmUG3bzElDLx0QqOmij3SHpwDvWpV3oJvzN1okNiEVVmN ZQOQo9SdnM8SMM3wrN93rxLYVkJiAw== -----END CERTIFICATE-----Generated at Sat Apr 12 02:06:42 2025 by rpki-client