$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa File: 8473396c-8a36-3619-80aa-c025ed526998.roa (raw, json) Hash identifier: rCkH7EPv9nmV5d8MmGQZuR2x7NuIXKSg0Ky1qeZAv7g= Subject key identifier: 86:32:61:87:DA:F4:A7:C9:B0:2D:F4:CF:0D:8D:3C:05:EE:8D:0B:DB Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285848E8665EEAE762FBAE8FC84FC0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 13984 IP address blocks: 164.153.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:5e:ea:e7:62:fb:ae:8f:c8:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=1a96f508-1051-4e36-94b1-454d659a9f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:d9:62:77:bc:25:c3:f1:52:e8:80:94:7a: 00:07:d7:57:9a:32:b0:16:f6:39:0a:6a:e7:2a:c8: 0c:a8:24:d8:76:27:7f:c6:6e:17:dc:43:b3:c1:a1: 49:2a:6a:0e:ad:be:7e:fb:5a:ac:a8:cd:65:4f:85: 79:2e:65:cd:05:39:3a:da:fb:e0:c4:0a:2b:47:4d: b9:dd:0d:f3:59:8f:98:f4:e1:e7:3b:60:05:85:27: c8:1b:c7:26:e8:ea:83:15:bf:de:26:c2:4c:92:65: 64:2d:ea:ca:6e:30:4d:45:e8:ce:6e:56:4a:39:06: 12:fd:3b:b8:80:f0:16:be:b8:74:f6:e7:ca:d7:0d: ef:7d:b1:40:ae:88:d0:3c:a2:6c:c7:4a:91:f9:f0: a2:9c:db:2c:80:61:a6:b7:b3:b2:5d:a0:36:36:74: d3:be:4b:42:64:99:ab:d5:b4:25:a3:56:d7:fe:c9: 18:50:fd:57:e7:74:1c:0a:03:7a:a0:6e:5c:fb:f2: ab:8b:61:5a:ff:24:fe:af:ec:8a:f4:5a:f6:4a:d1: a4:15:2e:f9:30:58:cf:d4:54:38:9f:e1:dd:3f:83: ab:d1:71:f6:b2:b5:95:2d:77:78:a1:d6:61:b5:38: a2:7a:00:23:9c:0e:84:83:5a:78:1b:99:1b:98:f5: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:32:61:87:DA:F4:A7:C9:B0:2D:F4:CF:0D:8D:3C:05:EE:8D:0B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 164.153.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:84:af:d0:61:1e:8f:f6:14:bf:8c:34:ca:2f:74:4f:32:f6: 96:9a:dc:d6:ed:d6:b7:27:36:2e:b7:f6:17:f3:01:c7:8d:2c: 63:de:fc:f3:e8:31:2f:9b:76:e5:3a:96:92:02:27:80:c8:7f: 60:cc:22:af:33:65:5f:26:51:9b:e6:a0:21:98:71:d8:64:48: 0a:37:2c:b8:b2:fc:04:79:5a:1f:b3:7e:a8:b9:48:aa:93:10: 6d:46:d8:63:38:20:e3:dd:05:d1:7c:d8:a3:8a:e9:b5:33:54: 20:37:25:3d:83:6d:c3:a9:a5:63:a9:9b:2c:1f:7d:21:4a:7e: ff:d4:e5:1d:f7:63:d8:3a:38:2a:cb:0f:c7:65:7c:59:d9:d7: 9e:72:ba:d7:7c:c1:ef:0a:2e:1e:f0:9a:db:ef:1c:8f:05:bc: ab:04:46:5a:90:72:ac:6c:3b:67:52:48:7b:b2:75:b1:15:b8: 26:c0:25:0d:06:35:ad:3e:ea:a0:25:6d:c2:53:82:10:8a:c6: 1e:72:ee:cb:e7:70:0a:72:40:02:b9:0d:60:db:7e:3e:fa:94: 68:7f:c8:2e:f7:6c:b0:fd:47:7d:a8:a6:ee:3c:37:17:3f:98: b6:5e:27:83:bf:19:8a:3e:75:ff:c0:3c:28:05:24:8b:fa:7c: 0b:03:80:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZl7q52L7ro/IT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk MWE5NmY1MDgtMTA1MS00ZTM2LTk0YjEtNDU0ZDY1OWE5ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBTZYne8JcPxUuiAlHoAB9dXmjKwFvY5Cmrn KsgMqCTYdid/xm4X3EOzwaFJKmoOrb5++1qsqM1lT4V5LmXNBTk62vvgxAorR025 3Q3zWY+Y9OHnO2AFhSfIG8cm6OqDFb/eJsJMkmVkLerKbjBNRejOblZKOQYS/Tu4 gPAWvrh09ufK1w3vfbFArojQPKJsx0qR+fCinNssgGGmt7OyXaA2NnTTvktCZJmr 1bQlo1bX/skYUP1X53QcCgN6oG5c+/Kri2Fa/yT+r+yK9Fr2StGkFS75MFjP1FQ4 n+HdP4Or0XH2srWVLXd4odZhtTiiegAjnA6Eg1p4G5kbmPVSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYyYYfa9KfJsC30zw2NPAXujQvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvODQ3MzM5NmMtOGEzNi0z NjE5LTgwYWEtYzAyNWVkNTI2OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Er9BhHo/2FL+MNMovdE8y9paa3Nbt1rcnNi639hfzAceNLGPe/PPo MS+bduU6lpICJ4DIf2DMIq8zZV8mUZvmoCGYcdhkSAo3LLiy/AR5Wh+zfqi5SKqT EG1G2GM4IOPdBdF82KOK6bUzVCA3JT2DbcOppWOpmywffSFKfv/U5R33Y9g6OCrL D8dlfFnZ155yutd8we8KLh7wmtvvHI8FvKsERlqQcqxsO2dSSHuydbEVuCbAJQ0G Na0+6qAlbcJTghCKxh5y7svncApyQAK5DWDbfj76lGh/yC73bLD9R32opu48Nxc/ mLZeJ4O/GYo+df/APCgFJIv6fAsDgGY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:13 2025 by rpki-client