$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/7255b39c-be12-308e-91af-41d4d47f1c2c.roa File: 7255b39c-be12-308e-91af-41d4d47f1c2c.roa (raw, json) Hash identifier: wPgGLRNYPGbJcZqeVG9fyTOHyiWQ7gRSplR/IFz9i5c= Subject key identifier: DD:CB:7F:9E:B5:D5:FC:C9:E5:48:BE:03:64:2A:1D:87:AA:BB:25:FE Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F43285848C6E63B556AF921FB4C6B4200 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/7255b39c-be12-308e-91af-41d4d47f1c2c.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 834 IP address blocks: 134.202.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:3b:55:6a:f9:21:fb:4c:6b:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=c7d76af2-0441-49a8-91ea-48064654b445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:62:c5:ea:21:ad:95:be:b0:ac:26:c0:d9: aa:35:41:f6:02:a1:44:24:63:9e:ed:bc:1c:6c:64: d5:2c:58:c5:ad:97:7f:08:65:43:ee:54:12:58:37: 2b:41:0e:dd:fa:3a:1c:85:ba:88:bc:a6:18:42:78: 18:9e:28:98:46:04:86:99:d3:c6:fc:01:ca:18:f1: 1f:20:2c:d7:69:40:d2:89:a9:4e:f4:a3:30:01:25: b5:e1:06:6a:0f:6a:dc:3d:7c:dc:ab:20:7b:f6:2e: 23:8f:4f:d3:fe:28:94:30:30:c0:aa:6a:be:d7:01: 56:b8:80:66:8c:38:c4:ca:9f:f2:49:0e:8b:3d:e3: 23:c0:cb:be:08:21:4d:67:7c:a2:b9:f1:ad:65:dc: c6:05:14:66:93:70:21:4f:93:df:09:33:e0:57:b3: 2d:4d:1a:d8:bb:dd:29:7a:10:b2:48:e0:bd:db:4b: f7:0b:9b:d2:07:7c:c4:6f:ce:31:1c:29:93:86:f2: be:a2:03:9f:e6:83:90:2e:d0:fc:f5:3c:b8:d2:86: 77:a1:89:f8:1c:ad:58:d8:57:33:ea:b9:61:cc:de: 63:44:51:80:f5:56:52:04:6a:20:5b:ee:7d:99:e6: bc:cc:ea:f3:3b:98:2c:ba:96:60:e6:69:73:ef:97: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CB:7F:9E:B5:D5:FC:C9:E5:48:BE:03:64:2A:1D:87:AA:BB:25:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/7255b39c-be12-308e-91af-41d4d47f1c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:04:a8:93:f9:54:db:20:fd:61:5b:a1:31:9a:a2:e2:29:d7: 20:71:11:38:cc:4e:39:a4:64:02:ac:f7:2f:ba:b4:55:9d:89: af:2e:88:d5:a8:94:c8:16:9c:72:fc:0f:1a:0d:52:07:95:a1: 02:c8:14:5f:16:36:65:1c:d1:b0:c4:13:bf:3b:d6:5d:b7:ec: 40:21:82:39:13:07:57:03:a6:e2:55:88:de:e2:dc:01:0e:24: 1c:ec:c3:e8:8a:a6:7b:2b:71:75:81:e8:50:93:c7:e8:06:39: 64:83:a0:f2:6e:7a:d0:30:ea:04:53:fc:a9:c8:db:53:5a:b0: 24:c2:06:cb:a3:19:1f:35:f2:13:30:9d:6f:ed:9f:20:01:76: ca:c4:f9:8d:10:3b:71:b2:08:98:9b:5f:aa:c0:03:21:fc:0c: 32:84:33:56:57:3b:e9:18:a3:a0:1d:1f:51:40:9d:be:7a:95: 38:7b:66:55:eb:ab:3a:e2:64:45:6d:12:08:2b:74:e1:e1:10: d7:34:65:af:33:70:fa:e2:95:47:32:d6:99:21:7d:1c:38:9e: bc:39:0d:a3:fb:1e:86:a3:a0:e8:4a:75:8b:8b:8f:8a:27:d0: e3:cb:03:9d:08:47:52:d1:95:99:f1:9c:6c:cd:3a:ad:00:01: 6e:21:4f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jtVavkh+0xrQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk YzdkNzZhZjItMDQ0MS00OWE4LTkxZWEtNDgwNjQ2NTRiNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1htixeohrZW+sKwmwNmqNUH2AqFEJGOe7bwc bGTVLFjFrZd/CGVD7lQSWDcrQQ7d+jochbqIvKYYQngYniiYRgSGmdPG/AHKGPEf ICzXaUDSialO9KMwASW14QZqD2rcPXzcqyB79i4jj0/T/iiUMDDAqmq+1wFWuIBm jDjEyp/ySQ6LPeMjwMu+CCFNZ3yiufGtZdzGBRRmk3AhT5PfCTPgV7MtTRrYu90p ehCySOC920v3C5vSB3zEb84xHCmThvK+ogOf5oOQLtD89Ty40oZ3oYn4HK1Y2Fcz 6rlhzN5jRFGA9VZSBGogW+59mea8zOrzO5gsupZg5mlz75du8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3Lf5611fzJ5Ui+A2QqHYequyX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvNzI1NWIzOWMtYmUxMi0z MDhlLTkxYWYtNDFkNGQ0N2YxYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcEqJP5VNsg/WFboTGaouIp1yBxETjMTjmkZAKs9y+6tFWdia8uiNWo lMgWnHL8DxoNUgeVoQLIFF8WNmUc0bDEE7871l237EAhgjkTB1cDpuJViN7i3AEO JBzsw+iKpnsrcXWB6FCTx+gGOWSDoPJuetAw6gRT/KnI21NasCTCBsujGR818hMw nW/tnyABdsrE+Y0QO3GyCJibX6rAAyH8DDKEM1ZXO+kYo6AdH1FAnb56lTh7ZlXr qzriZEVtEggrdOHhENc0Za8zcPrilUcy1pkhfRw4nrw5DaP7HoajoOhKdYuLj4on 0OPLA50IR1LRlZnxnGzNOq0AAW4hT/k= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:28 2025 by rpki-client