$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa File: 657752d5-7987-30fd-a6c9-761b35585226.roa (raw, json) Hash identifier: F+J+02Td54TBUeAjnidZBm6uA311ylef/Qg+EN9lfYY= Subject key identifier: 6A:0E:47:9F:E3:C9:73:A7:1A:7C:54:80:16:43:92:F2:76:48:CD:64 Certificate issuer: /CN=9cae117d-b11f-4787-b860-f4d311531af3 Certificate serial: 010D0C9F43285848EE90672CF34979ACB918B880 Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa Signing time: Wed 19 Feb 2025 07:00:14 +0000 ROA not before: Wed 19 Feb 2025 07:00:14 +0000 ROA not after: Tue 20 May 2025 06:00:14 +0000 asID: 36352 IP address blocks: 146.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ee:90:67:2c:f3:49:79:ac:b9:18:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3 Validity Not Before: Feb 19 07:00:14 2025 GMT Not After : May 20 06:00:14 2025 GMT Subject: CN=d075dd0c-01c4-45e4-bfc0-3653f5afa2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:72:ff:21:14:9a:99:90:1a:76:10:92:b4: 02:57:52:1c:4a:f7:e5:c1:1e:d9:8e:b8:4f:23:1b: 69:97:6e:f6:28:71:27:5c:ca:cc:52:92:71:9d:20: 7f:3d:ff:46:fa:a2:89:71:a6:ef:ce:11:d0:f6:8c: cf:b2:bc:87:49:a8:aa:79:e6:40:66:0d:f1:50:b7: 45:17:51:72:61:1b:8c:c9:85:a7:4e:eb:e0:7c:59: d7:c2:5e:e0:65:93:3e:88:f1:6f:47:36:27:38:4f: d1:4e:af:16:f7:df:8d:b2:73:05:ac:be:87:a8:fc: 0f:ce:5b:ff:8c:77:9e:3b:41:97:ac:6e:62:b0:45: 02:69:9d:45:28:45:40:a4:b9:86:4e:16:e0:ce:3b: 78:2d:6d:7f:a2:23:9a:21:87:34:5c:7a:1f:a5:63: 14:59:85:55:4e:a4:d5:ee:76:f0:3b:49:30:93:91: 7d:ce:fe:3f:59:23:f5:2e:02:e0:93:b5:6b:8b:fc: 0b:8c:c7:e5:a7:4a:ae:d8:24:e2:e1:e3:1f:c7:71: 9d:51:ac:c7:70:77:20:f1:8a:f4:7a:24:ff:fa:e1: 49:6e:88:80:3f:7c:15:59:49:8b:46:e4:45:f1:ee: 0f:4e:b1:8f:c6:87:2c:8e:9b:32:52:a5:4b:d2:65: 20:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0E:47:9F:E3:C9:73:A7:1A:7C:54:80:16:43:92:F2:76:48:CD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl X509v3 Authority Key Identifier: keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer sbgp-ipAddrBlock: critical IPv4: 146.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b9:0b:0a:ad:90:ec:f7:47:3f:a7:76:0e:41:05:10:f0:09: 3e:21:80:9b:21:60:ef:9a:1d:88:d7:d6:21:bd:8b:1e:9e:bf: 8d:6e:ce:07:d1:7d:04:c8:c3:7e:ec:07:aa:76:7c:4a:e6:89: cb:bd:e5:51:df:15:8e:be:3b:45:e1:2e:d1:39:cf:a2:d7:95: be:57:5c:94:44:9c:ff:9c:2e:19:c0:7e:ea:f2:87:ba:5d:77: bb:7b:af:4f:91:14:36:72:5f:d7:fa:05:d1:3d:87:31:34:ba: 47:1f:b7:a8:63:45:c1:dc:5a:9a:8a:dd:21:42:be:e9:bd:57: 1c:9d:d0:3c:06:93:4a:e9:ca:67:70:4b:c5:f6:a4:98:5b:6b: a2:51:16:fe:18:94:09:fe:b7:2a:30:37:79:29:c6:da:95:dc: 71:8e:08:75:cb:35:42:05:0d:e4:d9:83:e5:46:4d:41:ca:5d: b8:5e:34:47:bc:bd:a0:51:06:d8:04:64:9d:2c:a4:fd:1a:66: 13:9d:c6:63:f0:5e:ae:dd:90:82:1f:00:82:ce:4d:da:b1:b2: 64:c3:c6:46:ee:01:79:36:2e:fe:b3:ac:b7:34:c6:d0:67:31: 34:a0:a3:7c:15:a1:57:84:da:d2:b9:c0:a9:df:f7:ad:6d:9a: 78:09:7b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjukGcs80l5rLkYuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx YWYzMB4XDTI1MDIxOTA3MDAxNFoXDTI1MDUyMDA2MDAxNFowLzEtMCsGA1UEAxMk ZDA3NWRkMGMtMDFjNC00NWU0LWJmYzAtMzY1M2Y1YWZhMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWZy/yEUmpmQGnYQkrQCV1IcSvflwR7ZjrhP Ixtpl272KHEnXMrMUpJxnSB/Pf9G+qKJcabvzhHQ9ozPsryHSaiqeeZAZg3xULdF F1FyYRuMyYWnTuvgfFnXwl7gZZM+iPFvRzYnOE/RTq8W99+NsnMFrL6HqPwPzlv/ jHeeO0GXrG5isEUCaZ1FKEVApLmGThbgzjt4LW1/oiOaIYc0XHofpWMUWYVVTqTV 7nbwO0kwk5F9zv4/WSP1LgLgk7Vri/wLjMflp0qu2CTi4eMfx3GdUazHcHcg8Yr0 eiT/+uFJboiAP3wVWUmLRuRF8e4PTrGPxocsjpsyUqVL0mUg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoOR5/jyXOnGnxUgBZDkvJ2SM1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvNjU3NzUyZDUtNzk4Ny0z MGZkLWE2YzktNzYxYjM1NTg1MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4 NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz MTE1MzFhZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK5CwqtkOz3Rz+ndg5BBRDwCT4hgJshYO+aHYjX1iG9ix6ev41uzgfR fQTIw37sB6p2fErmicu95VHfFY6+O0XhLtE5z6LXlb5XXJREnP+cLhnAfuryh7pd d7t7r0+RFDZyX9f6BdE9hzE0ukcft6hjRcHcWpqK3SFCvum9Vxyd0DwGk0rpymdw S8X2pJhba6JRFv4YlAn+tyowN3kpxtqV3HGOCHXLNUIFDeTZg+VGTUHKXbheNEe8 vaBRBtgEZJ0spP0aZhOdxmPwXq7dkIIfAILOTdqxsmTDxkbuAXk2Lv6zrLc0xtBn MTSgo3wVoVeE2tK5wKnf961tmngJewI= -----END CERTIFICATE-----Generated at Thu Apr 10 15:01:13 2025 by rpki-client