$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa File: fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa (raw, json) Hash identifier: FNafVi8EePUSuOfDHcFqcuCNpWizjuGmshBYLOm5f+4= Subject key identifier: EE:88:CA:B4:F7:9A:ED:6F:71:6B:AB:67:8F:71:2C:3D:C3:43:6D:35 Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F432858491AA6AFEAA9870281216F2080 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 53407 IP address blocks: 158.120.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:af:ea:a9:87:02:81:21:6f:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=c8f93d8f-d8e0-408c-bb9b-752fe3632c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:be:fb:31:44:85:86:38:3a:20:f7:19:4e: d3:2b:e0:1b:95:15:87:ba:80:95:42:71:75:4f:53: b5:90:9d:89:0e:8e:7f:9e:53:36:63:7c:e3:76:97: 8b:cd:ca:32:ae:62:ba:bf:6e:74:c4:77:47:1f:bd: 6e:6d:fb:4f:c9:3c:0d:bc:3c:a9:4f:6c:4d:02:57: 1e:29:0c:f5:e1:cd:1a:3d:cf:f6:45:5d:0b:e8:7a: c8:73:c0:7b:1c:6a:c4:76:b6:d8:3b:66:10:86:bd: 5d:15:27:74:0b:73:78:3e:ae:3f:5a:41:ea:3a:88: 58:e5:ac:7f:03:0d:3f:c3:e6:fc:5a:bc:8e:f8:57: 71:3a:b0:fc:35:1a:27:ca:2f:ca:a8:7d:ca:df:20: 93:09:40:dc:1f:9c:3b:ed:b4:45:99:e7:82:0f:6d: 23:d6:0b:75:86:38:8d:c5:e8:8b:80:89:dc:55:22: 27:95:af:b0:f1:f5:6c:52:a8:d0:99:b5:a4:42:91: 7a:88:79:2c:ca:c7:06:cc:00:d2:4c:30:34:15:f5: a5:69:ad:61:04:aa:e9:f0:6b:d1:c2:e0:a2:a2:a7: a1:59:56:fc:f6:d3:95:84:35:43:31:9c:a0:e5:dd: c8:68:70:c7:0f:dc:d9:35:bf:5b:dd:1c:05:dc:1f: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:88:CA:B4:F7:9A:ED:6F:71:6B:AB:67:8F:71:2C:3D:C3:43:6D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 158.120.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:60:c8:20:21:10:b4:f3:36:98:07:a1:3c:14:0e:8d:fb:0a: 9a:87:e7:db:1b:71:d1:fd:de:63:b0:2a:c8:b2:db:45:30:b4: a4:d6:93:a7:b9:45:0f:09:94:40:56:10:2d:77:3d:3d:77:29: 80:85:c8:b5:67:95:63:06:59:cd:9a:a8:bb:88:e0:c2:44:a8: 50:11:c2:16:76:27:6a:84:30:5a:b6:9d:d9:be:63:a8:ef:a7: bc:5e:b3:cb:7c:64:f9:2e:ac:38:1c:f7:6b:9d:c9:b2:7a:a6: 67:42:73:a5:40:62:74:24:7b:06:e5:4f:7f:04:03:ff:62:6e: 84:85:91:12:92:71:7c:5a:b2:69:d9:31:c5:a7:d0:34:24:d1: 50:bb:58:4c:4f:78:8a:6b:d2:35:5f:96:2c:80:93:47:47:32: ec:a7:48:44:02:b1:50:91:96:42:cb:2a:78:f5:57:ad:bf:ea: ee:a8:33:2c:1c:10:df:21:37:13:af:16:00:55:f4:28:40:c1: eb:37:33:24:64:e7:d9:7e:59:77:f3:d2:d6:48:de:e7:c3:d4: 35:7f:b5:16:42:17:45:7e:23:e6:c9:16:a1:27:29:3e:6e:51: 69:5c:b7:01:8b:ee:ea:ad:48:52:98:e1:7d:d5:d6:d4:60:35: e2:b4:46:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapq/qqYcCgSFvIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YzhmOTNkOGYtZDhlMC00MDhjLWJiOWItNzUyZmUzNjMyYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSK++zFEhYY4OiD3GU7TK+AblRWHuoCVQnF1 T1O1kJ2JDo5/nlM2Y3zjdpeLzcoyrmK6v250xHdHH71ubftPyTwNvDypT2xNAlce KQz14c0aPc/2RV0L6HrIc8B7HGrEdrbYO2YQhr1dFSd0C3N4Pq4/WkHqOohY5ax/ Aw0/w+b8WryO+FdxOrD8NRonyi/KqH3K3yCTCUDcH5w77bRFmeeCD20j1gt1hjiN xeiLgIncVSInla+w8fVsUqjQmbWkQpF6iHksyscGzADSTDA0FfWlaa1hBKrp8GvR wuCioqehWVb89tOVhDVDMZyg5d3IaHDHD9zZNb9b3RwF3B8ZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6IyrT3mu1vcWurZ49xLD3DQ201MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvZmQ0NmYyZmItYjBlNS0z MWU5LWJjMjYtMDQ0NzYxYzA4MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnngsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFgyCAhELTzNpgHoTwUDo37CpqH59sbcdH93mOwKsiy20UwtKTWk6e5 RQ8JlEBWEC13PT13KYCFyLVnlWMGWc2aqLuI4MJEqFARwhZ2J2qEMFq2ndm+Y6jv p7xes8t8ZPkurDgc92udybJ6pmdCc6VAYnQkewblT38EA/9iboSFkRKScXxasmnZ McWn0DQk0VC7WExPeIpr0jVfliyAk0dHMuynSEQCsVCRlkLLKnj1V62/6u6oMywc EN8hNxOvFgBV9ChAwes3MyRk59l+WXfz0tZI3ufD1DV/tRZCF0V+I+bJFqEnKT5u UWlctwGL7uqtSFKY4X3V1tRgNeK0RoE= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:33 2025 by rpki-client