$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa File: 21e16498-e39c-38cd-a8f8-470bb4f66f80.roa (raw, json) Hash identifier: sFxD5DIXJYIFfZU38WOrrAH0O0P/flrpHILTVVpRftI= Subject key identifier: 84:AE:CE:CD:29:3D:43:7E:81:D5:AB:47:06:67:CC:FA:C8:37:79:9C Certificate issuer: /CN=1c5adecb-4ac8-432f-817c-84bec47b7708 Certificate serial: 010D0C9F43285848F9267EFA1AD59371ABE92C80 Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 398416 IP address blocks: 149.234.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:7e:fa:1a:d5:93:71:ab:e9:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=f696ed08-f661-4608-aa08-a4d8df15d5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:26:d8:22:2d:1f:7b:47:a3:97:99:19:09: 80:0c:31:cf:01:ad:5e:cf:0b:b7:49:91:46:3f:ab: 4c:87:dd:98:e4:df:d7:df:fe:c5:5d:e2:aa:a0:0e: aa:5a:94:86:cc:6a:15:81:6e:14:f2:e0:6b:3e:5b: ec:c5:5d:f2:56:33:e7:d8:1c:ec:07:27:8f:6b:d4: aa:9d:b0:2f:6c:18:ea:a2:94:78:fc:87:72:f5:1a: d7:a4:49:5e:ef:66:61:b6:f5:b7:0c:45:76:86:ab: dd:82:7d:ec:65:d1:92:68:be:87:6b:9a:60:70:d3: 22:3e:68:1a:b6:93:70:06:fe:0f:c7:41:1f:f8:36: 0a:19:9c:43:dc:81:04:04:fe:c0:9d:44:fa:30:15: 29:7a:02:2f:63:bb:e1:2c:fd:e1:8a:e4:b2:d5:5f: ba:d1:c7:8d:a4:c3:a8:b0:e3:cc:76:c2:05:dc:f1: b5:48:b7:00:a6:fb:d3:4e:9c:39:13:2d:2d:05:4f: 2a:3e:75:f4:c3:4e:ed:b7:17:69:64:c9:a1:0a:79: e5:c3:f0:c9:1e:0c:98:b5:e2:07:96:a2:13:ea:0d: 1d:c6:4f:fd:2e:fd:f5:c2:83:d1:00:4e:c3:dd:b8: 91:73:57:24:93:f6:07:75:b6:9b:31:25:1d:f3:0d: 22:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:CE:CD:29:3D:43:7E:81:D5:AB:47:06:67:CC:FA:C8:37:79:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl X509v3 Authority Key Identifier: keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer sbgp-ipAddrBlock: critical IPv4: 149.234.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:a2:1c:e5:ba:1b:71:09:cb:d4:71:9f:b5:07:44:94:de:55: 09:86:b2:b8:9e:07:9e:e2:f1:1d:e7:a8:ed:3e:d6:11:5c:a1: a6:fb:35:40:9f:de:e4:8a:1e:e7:70:30:2f:2e:44:ce:4b:4e: 25:eb:03:ef:36:7a:8f:44:ba:66:74:0b:7c:10:17:28:0e:ea: c4:39:2e:22:0d:51:82:59:69:4a:16:80:30:61:1f:eb:b0:70: 8f:7f:09:87:b2:fd:e3:21:25:d1:08:c0:c7:f3:aa:98:b1:48: a3:08:a7:99:c4:f5:99:f9:0d:7a:5d:3a:f6:01:eb:33:68:be: b3:a6:86:bd:bb:a2:5c:1b:53:21:91:ef:e4:cb:18:e5:1d:f5: da:3f:b8:c1:0d:df:0c:3c:d9:ab:1b:1c:48:9b:9d:22:94:db: ca:aa:41:6e:7e:2a:93:49:93:3c:5f:7a:ce:de:79:ee:98:67: 9c:c2:d0:78:25:7e:61:79:32:b4:ab:bb:a4:bf:bf:df:89:f9: eb:73:a0:fc:18:2d:bd:3f:61:69:9c:c3:94:09:26:86:84:bb: bc:77:2d:aa:ec:a3:be:70:0a:55:59:de:ee:a7:e0:c8:ec:df: cb:59:12:22:6f:17:49:50:98:7e:3c:fb:24:3c:1b:2b:63:5c: a8:e0:4f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jn76GtWTcavpLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWRlY2ItNGFjOC00MzJmLTgxN2MtODRiZWM0N2I3 NzA4MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjY5NmVkMDgtZjY2MS00NjA4LWFhMDgtYTRkOGRmMTVkNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBgm2CItH3tHo5eZGQmADDHPAa1ezwu3SZFG P6tMh92Y5N/X3/7FXeKqoA6qWpSGzGoVgW4U8uBrPlvsxV3yVjPn2BzsByePa9Sq nbAvbBjqopR4/Idy9RrXpEle72ZhtvW3DEV2hqvdgn3sZdGSaL6Ha5pgcNMiPmga tpNwBv4Px0Ef+DYKGZxD3IEEBP7AnUT6MBUpegIvY7vhLP3hiuSy1V+60ceNpMOo sOPMdsIF3PG1SLcApvvTTpw5Ey0tBU8qPnX0w07ttxdpZMmhCnnlw/DJHgyYteIH lqIT6g0dxk/9Lv31woPRAE7D3biRc1ckk/YHdbabMSUd8w0imwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISuzs0pPUN+gdWrRwZnzPrIN3mcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZGVjYi00YWM4LTQzMmYtODE3Yy04NGJlYzQ3Yjc3MDgvMjFlMTY0OTgtZTM5Yy0z OGNkLWE4ZjgtNDcwYmI0ZjY2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWRlY2ItNGFjOC00MzJmLTgx N2MtODRiZWM0N2I3NzA4LzFjNWFkZWNiLTRhYzgtNDMyZi04MTdjLTg0YmVjNDdi NzcwOC5jcmwwHwYDVR0jBBgwFoAUVaoUdtgDOMPMCm7zFN4yMK4vgBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZGVjYi00YWM4LTQzMmYtODE3Yy04NGJl YzQ3Yjc3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlerwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaiHOW6G3EJy9Rxn7UHRJTeVQmGsrieB57i8R3nqO0+1hFcoab7NUCf 3uSKHudwMC8uRM5LTiXrA+82eo9EumZ0C3wQFygO6sQ5LiINUYJZaUoWgDBhH+uw cI9/CYey/eMhJdEIwMfzqpixSKMIp5nE9Zn5DXpdOvYB6zNovrOmhr27olwbUyGR 7+TLGOUd9do/uMEN3ww82asbHEibnSKU28qqQW5+KpNJkzxfes7eee6YZ5zC0Hgl fmF5MrSru6S/v9+J+etzoPwYLb0/YWmcw5QJJoaEu7x3Larso75wClVZ3u6n4Mjs 38tZEiJvF0lQmH48+yQ8GytjXKjgTwo= -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:00 2025 by rpki-client