$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa File: 8a8acdda-9292-36a3-b876-4a2667d678bc.roa (raw, json) Hash identifier: AXJi8EjRbN2pSqeJuOW4BqLN5DOPh7WFG3dxsFQMyiE= Subject key identifier: 07:38:CB:D1:5D:9C:1C:AD:3D:15:9E:58:E3:FF:7F:E4:AD:34:51:F9 Certificate issuer: /CN=0db67e40-561b-4114-ad6b-0716593573be Certificate serial: 010D0C9F432858489E6B648A9839517ECEA3A380 Authority key identifier: 35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 54702 IP address blocks: 128.254.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:64:8a:98:39:51:7e:ce:a3:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67e40-561b-4114-ad6b-0716593573be Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=cdb0a351-5a7f-42f5-ba8a-b5bdea300d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:c7:43:19:f5:89:53:47:af:9a:17:57:b4: 1e:a8:69:45:35:46:72:97:0a:c6:59:09:21:43:79: 35:bf:6c:04:9c:1b:aa:41:e9:cd:ea:cf:ad:16:54: 91:61:28:bc:a9:72:9d:97:37:26:73:d7:ee:ec:50: d4:ad:09:09:2d:2f:7a:58:36:2c:41:54:1e:2d:fe: 6f:ce:fb:76:55:f0:42:a9:e8:6f:ad:65:6e:7c:df: 97:19:6f:ce:59:11:22:69:9f:a4:d6:65:1c:4c:21: 18:6e:c2:7b:d5:fc:31:51:d7:28:65:7e:5b:da:17: c4:0e:3f:5c:ce:a6:97:90:e1:6f:45:5b:7a:98:ac: 55:ff:af:ef:ea:17:53:0a:7b:81:43:58:45:fa:a1: 4a:07:38:4f:fc:95:0e:26:2c:12:58:d2:82:42:c6: 97:fd:e3:fb:c3:b9:c4:be:ab:8f:47:0e:ac:3f:2a: 33:20:66:6f:c8:50:6c:55:39:09:99:2c:52:a0:92: 3b:1f:90:53:d8:c2:c6:58:10:ad:ad:f7:5c:36:c4: 4e:29:00:0b:54:94:e2:70:12:03:9b:84:36:d0:99: 6e:90:b3:4a:cf:f0:40:61:50:6f:d9:71:2d:d7:a1: 3d:ba:25:98:a7:1b:4b:e8:a1:be:be:9c:9d:64:48: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:CB:D1:5D:9C:1C:AD:3D:15:9E:58:E3:FF:7F:E4:AD:34:51:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.crl X509v3 Authority Key Identifier: keyid:35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer sbgp-ipAddrBlock: critical IPv4: 128.254.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:b6:14:e6:ae:53:40:09:bb:44:34:51:28:e6:21:c4:12:91: 2b:a7:e2:bf:2d:b8:1d:22:41:6c:71:b7:28:58:86:55:3a:d5: 3e:8a:c4:02:66:ba:db:c1:23:f7:3f:a6:3f:d3:a1:7e:24:dd: 68:40:bd:e4:6a:e4:3b:e3:29:fb:30:a8:d1:03:18:d0:39:63: 9f:c0:49:07:3b:1b:00:23:71:06:de:37:1f:45:73:d3:de:7a: 51:c8:f2:85:91:c2:fe:bd:47:f9:97:89:56:5a:61:a9:9a:ef: 09:a5:fc:95:d6:70:66:5f:d6:01:64:64:c7:ab:87:1a:7c:f0: a3:f9:49:2a:0e:34:2d:1e:f9:c9:fe:c4:b6:b8:75:20:af:b5: f6:57:7a:e3:f3:2c:a0:82:4a:41:6f:a1:91:71:a2:37:ff:ae: aa:98:f5:03:1a:37:bf:3f:0f:af:24:ab:41:5f:e5:98:7d:72: 65:e4:14:ee:e3:06:ec:76:1f:6d:8f:54:36:7a:96:b6:65:59: fe:13:0f:71:94:fc:b9:1d:d5:1a:e4:02:48:aa:b3:9c:89:c4: de:c5:e3:20:35:f0:75:0e:95:78:46:36:24:80:86:77:01:c6: dd:6d:e2:51:6a:f2:2c:0d:e3:70:39:98:ee:ac:38:80:c0:44: db:11:51:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2SKmDlRfs6jo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiNjdlNDAtNTYxYi00MTE0LWFkNmItMDcxNjU5MzU3 M2JlMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Y2RiMGEzNTEtNWE3Zi00MmY1LWJhOGEtYjViZGVhMzAwZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP7HQxn1iVNHr5oXV7QeqGlFNUZylwrGWQkh Q3k1v2wEnBuqQenN6s+tFlSRYSi8qXKdlzcmc9fu7FDUrQkJLS96WDYsQVQeLf5v zvt2VfBCqehvrWVufN+XGW/OWREiaZ+k1mUcTCEYbsJ71fwxUdcoZX5b2hfEDj9c zqaXkOFvRVt6mKxV/6/v6hdTCnuBQ1hF+qFKBzhP/JUOJiwSWNKCQsaX/eP7w7nE vquPRw6sPyozIGZvyFBsVTkJmSxSoJI7H5BT2MLGWBCtrfdcNsROKQALVJTicBID m4Q20JlukLNKz/BAYVBv2XEt16E9uiWYpxtL6KG+vpydZEhqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc4y9FdnBytPRWeWOP/f+StNFH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZGI2 N2U0MC01NjFiLTQxMTQtYWQ2Yi0wNzE2NTkzNTczYmUvOGE4YWNkZGEtOTI5Mi0z NmEzLWI4NzYtNGEyNjY3ZDY3OGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGRiNjdlNDAtNTYxYi00MTE0LWFk NmItMDcxNjU5MzU3M2JlLzBkYjY3ZTQwLTU2MWItNDExNC1hZDZiLTA3MTY1OTM1 NzNiZS5jcmwwHwYDVR0jBBgwFoAUNWXKcOKldVx5Po7/8RyeLWOoR9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZGI2N2U0MC01NjFiLTQxMTQtYWQ2Yi0wNzE2 NTkzNTczYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK2FOauU0AJu0Q0USjmIcQSkSun4r8tuB0iQWxxtyhYhlU61T6KxAJm utvBI/c/pj/ToX4k3WhAveRq5DvjKfswqNEDGNA5Y5/ASQc7GwAjcQbeNx9Fc9Pe elHI8oWRwv69R/mXiVZaYama7wml/JXWcGZf1gFkZMerhxp88KP5SSoONC0e+cn+ xLa4dSCvtfZXeuPzLKCCSkFvoZFxojf/rqqY9QMaN78/D68kq0Ff5Zh9cmXkFO7j Bux2H22PVDZ6lrZlWf4TD3GU/Lkd1RrkAkiqs5yJxN7F4yA18HUOlXhGNiSAhncB xt1t4lFq8iwN43A5mO6sOIDARNsRUf8= -----END CERTIFICATE-----Generated at Sun Apr 6 14:46:46 2025 by rpki-client