$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa File: 528af9b3-2bf6-317c-94a5-c8fe507fd519.roa (raw, json) Hash identifier: jFsR0bQKxUME4nEV+IO3hP7etHoP+iQrBTrXa3tOwkk= Subject key identifier: EC:14:27:14:A5:E3:75:91:BB:8A:47:50:86:E3:17:F6:35:28:CA:F2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B8F0C61120303535EEBB5F80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 207.102.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c6:11:20:30:35:35:ee:bb:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=4ceffcfe-cb84-4147-a778-221319620dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:62:a8:52:0f:c3:d7:d0:40:5e:c0:da:1c:88: 45:82:db:98:c5:fa:c1:cc:ab:ce:e4:bb:3f:2d:1d: 1e:65:ac:f2:58:89:f3:eb:ad:37:db:25:a1:ff:d4: 58:1c:86:97:ad:77:07:53:f9:1a:03:ec:1d:d4:a4: 89:74:bf:fa:3e:f4:ea:16:8c:3e:cd:24:66:2c:ae: 82:59:c2:80:52:7a:a9:f4:ae:2f:b7:14:2a:83:39: 2d:ef:7a:2a:1a:ab:14:d7:59:6f:c7:09:40:d4:02: bf:23:97:79:23:c4:3a:38:b1:54:7f:94:91:ee:1a: bc:e9:cc:9e:a0:71:31:76:7e:7a:6b:79:f0:b9:6d: 82:70:f3:02:46:05:ce:15:34:9a:de:58:95:76:6b: 16:d6:22:6d:68:60:40:7e:3b:53:bf:33:89:66:1a: c6:7a:06:8e:d0:ed:87:a7:4f:53:11:c7:15:1a:47: 96:b3:5e:e6:38:e1:7d:58:d6:69:7e:f5:2d:e7:33: 79:bc:78:4d:a0:bc:6f:9f:d1:c1:fa:5b:d8:77:37: d8:28:bd:34:0f:99:ec:57:bf:b6:08:1b:56:85:5d: da:eb:f0:84:30:9d:b2:06:84:be:23:e6:4d:b2:a3: 72:80:6f:dc:67:fe:b4:24:04:fe:eb:18:8f:f5:be: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:14:27:14:A5:E3:75:91:BB:8A:47:50:86:E3:17:F6:35:28:CA:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.102.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cd:09:7b:6b:8d:45:e8:6f:3f:91:a6:4b:5d:c9:1e:bc:2c: aa:56:58:01:f4:aa:51:21:8e:45:d7:bc:28:75:19:b2:20:b8: da:45:ee:51:12:b2:bc:d5:64:5a:cb:18:30:2a:b5:96:00:71: 15:50:20:2e:6d:78:31:cd:54:fb:1b:bb:bb:d1:4d:9c:fc:67: c1:d3:b3:e6:a7:f8:6e:a7:4a:cd:ad:3a:7d:3d:fa:58:fb:f4: c3:fd:94:5a:d7:46:13:3a:8b:73:6d:e3:7b:40:73:23:8e:39: c5:f6:b7:86:a5:f6:9b:f4:a9:ea:33:32:69:c8:29:b1:d5:12: c9:39:78:b1:6c:64:67:63:07:f0:cb:b3:c7:3f:47:eb:05:77: cd:d1:13:58:7f:9b:b6:a3:51:3e:42:0e:38:94:06:5a:23:d3: 1f:50:0d:ff:0a:83:25:65:f8:ef:b3:d2:96:db:e0:75:46:21: ea:84:8d:bb:00:0e:69:11:2d:0f:aa:ba:15:6f:df:27:f1:24: 94:4b:99:2f:5b:71:5c:6e:d1:83:ce:10:64:39:ee:89:dc:af: 10:c2:dd:d4:84:d5:56:c4:fb:32:ec:29:88:aa:ff:a3:60:a3: 6b:1f:48:33:d4:ea:d6:89:8d:0d:92:e4:df:34:31:40:c8:88: 66:f2:96:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MYRIDA1Ne67X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk NGNlZmZjZmUtY2I4NC00MTQ3LWE3NzgtMjIxMzE5NjIwZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62KoUg/D19BAXsDaHIhFgtuYxfrBzKvO5Ls/ LR0eZazyWInz66032yWh/9RYHIaXrXcHU/kaA+wd1KSJdL/6PvTqFow+zSRmLK6C WcKAUnqp9K4vtxQqgzkt73oqGqsU11lvxwlA1AK/I5d5I8Q6OLFUf5SR7hq86cye oHExdn56a3nwuW2CcPMCRgXOFTSa3liVdmsW1iJtaGBAfjtTvzOJZhrGegaO0O2H p09TEccVGkeWs17mOOF9WNZpfvUt5zN5vHhNoLxvn9HB+lvYdzfYKL00D5nsV7+2 CBtWhV3a6/CEMJ2yBoS+I+ZNsqNygG/cZ/60JAT+6xiP9b62cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwUJxSl43WRu4pHUIbjF/Y1KMryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTI4YWY5YjMtMmJmNi0z MTdjLTk0YTUtYzhmZTUwN2ZkNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz2aEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrNCXtrjUXobz+RpktdyR68LKpWWAH0qlEhjkXXvCh1GbIguNpF7lES srzVZFrLGDAqtZYAcRVQIC5teDHNVPsbu7vRTZz8Z8HTs+an+G6nSs2tOn09+lj7 9MP9lFrXRhM6i3Nt43tAcyOOOcX2t4al9pv0qeozMmnIKbHVEsk5eLFsZGdjB/DL s8c/R+sFd83RE1h/m7ajUT5CDjiUBloj0x9QDf8KgyVl+O+z0pbb4HVGIeqEjbsA DmkRLQ+quhVv3yfxJJRLmS9bcVxu0YPOEGQ57oncrxDC3dSE1VbE+zLsKYiq/6Ng o2sfSDPU6taJjQ2S5N80MUDIiGbylhQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:57:51 2025 by rpki-client