$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa File: d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa (raw, json) Hash identifier: xcRH8eDSX3tDC3O5NhoLIK3ZnS0Yhcn7STqXMIQ3ozM= Subject key identifier: 91:90:0A:72:32:42:C0:16:8F:D7:D7:38:91:1D:E1:EF:6C:77:5C:F3 Certificate issuer: /CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Certificate serial: 010D0C9F43285848F926B0CB074E3622ADFC2280 Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 8075 IP address blocks: 199.65.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b0:cb:07:4e:36:22:ad:fc:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=cec06dca-a8a9-470a-9744-38939eec8ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d5:e0:c3:34:2e:3d:1f:0e:9d:ae:4e:4e:ec: 37:b9:de:2d:e7:6d:f9:57:0b:b8:f7:93:37:89:e6: c7:88:54:f8:cc:a5:83:f9:cf:e6:71:74:e9:12:87: b0:48:e1:ac:ab:a5:fd:8a:6a:ad:43:32:37:2f:f7: ab:c8:f9:e7:9e:f8:4e:49:bd:ad:0c:05:89:1f:05: fd:22:5c:2e:2c:ec:5a:6b:94:44:7c:1a:a3:62:c8: 2a:fb:95:bd:28:72:f5:b1:e0:ed:39:30:e1:55:13: 05:ee:56:8c:57:44:12:78:fa:25:78:18:e6:a7:ca: 2c:a7:e8:f2:3a:01:54:05:fe:89:ed:6b:4d:01:a1: 76:9f:de:67:3d:ee:12:56:9a:cf:ee:90:e9:c3:1b: 7d:17:69:3c:fd:71:77:83:df:69:e5:22:64:bd:88: 7b:b0:ce:e9:97:8f:d6:d9:e1:1d:76:a9:66:ec:8e: 92:ce:10:70:dc:db:04:24:08:70:13:36:63:fe:6f: 4a:52:b8:a3:f9:54:23:23:39:ad:d2:86:8c:72:9d: 1b:dc:05:a6:3c:00:e8:b3:be:68:1f:af:75:25:38: da:44:7c:49:c5:e1:b4:ea:20:ca:55:f0:9e:0a:81: cb:72:da:5e:02:b6:25:d5:bc:e6:86:4b:c7:23:db: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:90:0A:72:32:42:C0:16:8F:D7:D7:38:91:1D:E1:EF:6C:77:5C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl X509v3 Authority Key Identifier: keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer sbgp-ipAddrBlock: critical IPv4: 199.65.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b4:e1:15:b5:b8:ae:cd:ea:f7:1a:3f:e3:39:cf:4e:c1:40: 91:ef:69:39:f6:67:c6:44:32:19:f3:e1:1d:f4:5b:33:31:24: d5:7f:9f:aa:1f:93:47:75:f3:db:53:85:bd:f7:de:df:a4:a1: c8:15:e0:89:d9:00:a7:80:bf:7a:7f:7c:36:4b:2f:76:c2:71: e7:d1:eb:62:d0:0d:44:05:51:eb:d6:5f:a4:2f:97:bb:53:ba: dc:9a:43:74:98:91:21:48:40:c8:5a:ed:f9:a9:eb:1e:a4:c9: 8e:df:e2:e8:b2:82:43:6f:9e:69:24:22:ca:36:78:ed:f3:4b: dd:9e:81:b8:6c:fa:01:02:42:f2:62:88:56:83:3b:dd:0b:46: 8b:5b:83:3c:58:b5:ba:97:26:bc:02:25:de:8d:26:74:f8:a7: 8d:8e:2f:d7:04:54:19:a1:1e:1c:f0:f3:7c:05:f8:38:18:3c: 3c:db:f1:0e:6c:8d:06:31:01:3a:08:25:95:6a:a7:83:03:61: 36:91:d0:ed:84:c8:8e:b4:66:dd:4e:7a:f4:96:05:01:f8:5a: ce:37:e5:a5:f0:c8:a4:35:09:6c:78:c4:a9:75:e3:4c:d9:49: 08:45:82:74:d3:a7:5e:a7:15:18:4e:fe:c2:ef:27:61:1b:5d: 2e:8c:2e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrDLB042Iq38IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmZjEyOWItODQ1Zi00NDlkLThlMzItMmIyNGVjYmVm ZWE0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Y2VjMDZkY2EtYThhOS00NzBhLTk3NDQtMzg5MzllZWM4ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdXgwzQuPR8Ona5OTuw3ud4t5235Vwu495M3 iebHiFT4zKWD+c/mcXTpEoewSOGsq6X9imqtQzI3L/eryPnnnvhOSb2tDAWJHwX9 IlwuLOxaa5REfBqjYsgq+5W9KHL1seDtOTDhVRMF7laMV0QSePoleBjmp8osp+jy OgFUBf6J7WtNAaF2n95nPe4SVprP7pDpwxt9F2k8/XF3g99p5SJkvYh7sM7pl4/W 2eEddqlm7I6SzhBw3NsEJAhwEzZj/m9KUrij+VQjIzmt0oaMcp0b3AWmPADos75o H691JTjaRHxJxeG06iDKVfCeCoHLctpeArYl1bzmhkvHI9sz/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGQCnIyQsAWj9fXOJEd4e9sd1zzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81M2Zm MTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0ZWNiZWZlYTQvZDI5ZWViMGEtNDZlOS0z MDRmLWJlYjItZTljMGE1ODI3NzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTNmZjEyOWItODQ1Zi00NDlkLThl MzItMmIyNGVjYmVmZWE0LzUzZmYxMjliLTg0NWYtNDQ5ZC04ZTMyLTJiMjRlY2Jl ZmVhNC5jcmwwHwYDVR0jBBgwFoAUDB3tJaEV8jXJR8VrnQipvgjoNUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81M2ZmMTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0 ZWNiZWZlYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy04RW1uK7N6vcaP+M5z07BQJHvaTn2Z8ZEMhnz4R30WzMxJNV/n6of k0d189tThb333t+kocgV4InZAKeAv3p/fDZLL3bCcefR62LQDUQFUevWX6Qvl7tT utyaQ3SYkSFIQMha7fmp6x6kyY7f4uiygkNvnmkkIso2eO3zS92egbhs+gECQvJi iFaDO90LRotbgzxYtbqXJrwCJd6NJnT4p42OL9cEVBmhHhzw83wF+DgYPDzb8Q5s jQYxAToIJZVqp4MDYTaR0O2EyI60Zt1OevSWBQH4Ws435aXwyKQ1CWx4xKl140zZ SQhFgnTTp16nFRhO/sLvJ2EbXS6MLms= -----END CERTIFICATE-----Generated at Sat Apr 5 06:34:25 2025 by rpki-client