$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ec268e7-6c4a-3fd7-934d-9d0297456235.roa File: 3ec268e7-6c4a-3fd7-934d-9d0297456235.roa (raw, json) Hash identifier: jc8focIrC4o+0zNbxyuOfAFOz4CdLeC7LinvlrlPuII= Subject key identifier: 5A:B9:4B:B7:36:69:7E:43:1E:92:06:BE:0C:FD:C3:23:6B:C3:2D:69 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D6412652478D4DB8A140CC60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ec268e7-6c4a-3fd7-934d-9d0297456235.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 142.252.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:26:52:47:8d:4d:b8:a1:40:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=9af128ac-19c7-4b3a-b719-e5f96ab1345c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:8a:fc:69:84:6e:a3:51:51:0a:40:ab:25: 95:61:bf:03:3e:4d:fc:2f:dd:6a:32:da:6b:53:98: 26:a5:7b:ec:e8:73:83:57:52:8c:2e:13:35:67:50: a1:57:af:09:19:ed:c2:58:b8:33:bd:0d:ae:50:4e: 6b:fa:8a:78:bc:1a:c7:97:26:98:f7:80:d1:ba:8f: f8:08:7b:2b:b3:3c:43:33:7f:9f:b3:98:dc:50:7e: 2b:ff:08:36:eb:d5:f0:f7:cc:fc:d2:b9:c0:2d:b7: 3a:d5:e5:11:17:d4:6a:27:63:83:be:af:13:97:09: ee:2c:41:ab:b8:3c:4f:e6:b6:1c:74:af:aa:8f:33: fb:3f:7b:2b:ef:e2:5a:20:56:30:28:e8:ad:f0:56: 4b:77:dd:98:2c:11:09:c5:4d:09:9c:34:9b:b9:cb: 29:45:5e:77:d5:c1:b4:ed:26:18:f7:8f:ba:87:63: bb:56:08:49:07:27:22:06:b6:db:67:da:38:88:63: ec:89:94:87:05:54:8c:e9:10:13:bf:f6:ea:13:2d: c9:59:9f:5a:87:6e:15:b6:27:33:55:44:95:48:79: e7:00:0e:8b:b1:59:4f:34:6e:95:f5:a6:47:3d:c9: 51:7a:7b:12:70:65:da:33:5e:68:30:6e:d2:6f:b6: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B9:4B:B7:36:69:7E:43:1E:92:06:BE:0C:FD:C3:23:6B:C3:2D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ec268e7-6c4a-3fd7-934d-9d0297456235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e0:d2:27:aa:44:0e:16:54:e8:2d:60:b8:a8:9c:da:be:d7: 1a:83:e4:0a:dc:b3:3f:11:20:d4:54:38:80:b5:c0:56:a9:0d: b7:cd:14:9c:66:fc:c2:fd:6b:9d:a1:ad:cf:8f:42:6d:1b:04: b3:2a:0a:41:a3:64:74:70:5a:76:65:aa:b9:91:62:2b:4e:5a: 1d:47:e8:61:79:cf:c4:e5:59:c9:04:27:9c:35:f2:33:35:72: 2c:3e:ad:ea:62:ac:14:a1:ec:5e:b7:1b:50:e6:72:dc:86:fe: 11:46:cb:1e:f4:33:52:d2:60:28:67:d5:94:fa:d2:a6:5b:88: 9b:0e:e5:3d:10:92:74:81:45:57:93:87:5d:f3:ee:89:f2:97: 6d:10:0d:ee:48:d8:ca:f9:53:bf:1a:78:43:36:1e:fb:1c:eb: ef:ba:09:59:c4:f2:15:e5:f0:7d:a0:f7:cf:dc:e5:b6:50:75: 45:18:42:36:8f:9d:b7:16:53:54:55:e1:3c:7d:e0:93:f1:54: c7:d4:05:f6:7e:ff:e1:fa:c6:c0:4d:57:c7:b9:ce:90:b8:1e: a4:40:de:23:4d:4d:f7:da:46:97:b8:83:c6:fc:57:2c:07:e9: 73:9b:85:04:0f:dc:7a:ca:33:c3:a9:eb:b4:37:15:ce:1d:1c: db:d2:39:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSZSR41NuKFAzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk OWFmMTI4YWMtMTljNy00YjNhLWI3MTktZTVmOTZhYjEzNDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9+K/GmEbqNRUQpAqyWVYb8DPk38L91qMtpr U5gmpXvs6HODV1KMLhM1Z1ChV68JGe3CWLgzvQ2uUE5r+op4vBrHlyaY94DRuo/4 CHsrszxDM3+fs5jcUH4r/wg269Xw98z80rnALbc61eURF9RqJ2ODvq8TlwnuLEGr uDxP5rYcdK+qjzP7P3sr7+JaIFYwKOit8FZLd92YLBEJxU0JnDSbucspRV531cG0 7SYY94+6h2O7VghJByciBrbbZ9o4iGPsiZSHBVSM6RATv/bqEy3JWZ9ah24Vticz VUSVSHnnAA6LsVlPNG6V9aZHPclRensScGXaM15oMG7Sb7bbxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq5S7c2aX5DHpIGvgz9wyNrwy1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2VjMjY4ZTctNmM0YS0z ZmQ3LTkzNGQtOWQwMjk3NDU2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvg0ieqRA4WVOgtYLionNq+1xqD5Arcsz8RINRUOIC1wFapDbfNFJxm /ML9a52hrc+PQm0bBLMqCkGjZHRwWnZlqrmRYitOWh1H6GF5z8TlWckEJ5w18jM1 ciw+repirBSh7F63G1DmctyG/hFGyx70M1LSYChn1ZT60qZbiJsO5T0QknSBRVeT h13z7onyl20QDe5I2Mr5U78aeEM2Hvsc6++6CVnE8hXl8H2g98/c5bZQdUUYQjaP nbcWU1RV4Tx94JPxVMfUBfZ+/+H6xsBNV8e5zpC4HqRA3iNNTffaRpe4g8b8VywH 6XObhQQP3HrKM8Op67Q3Fc4dHNvSOWk= -----END CERTIFICATE-----Generated at Sat Apr 5 13:17:39 2025 by rpki-client