$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa File: b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa (raw, json) Hash identifier: OU5qAZhQAScWfw4GIlEJJ3g2mTKz4bWQJdIWC0dfvJw= Subject key identifier: 13:2C:43:85:85:BC:23:A0:1B:2B:0F:37:FD:FD:52:17:08:BE:E0:21 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F43285848FD56C37A92E5B4F415680AA0 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 19257 IP address blocks: 162.222.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c3:7a:92:e5:b4:f4:15:68:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=21f67f05-d6e8-4994-b42f-14d986c9063c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:2c:6f:1c:0f:e1:70:6d:99:87:70:70:60: e1:a0:56:ba:f0:2e:20:1f:1b:84:6a:ff:51:80:13: fe:3c:1c:84:fa:51:8d:c0:3a:25:8c:fb:bc:a8:89: 34:cf:e0:4e:07:51:44:e2:bc:83:96:48:57:96:77: 69:ed:ba:55:c0:2f:7e:ee:21:43:28:dc:e4:9b:ca: fb:19:dd:88:29:98:84:ba:b5:39:bb:67:67:9e:03: 98:97:d8:94:55:87:d3:4f:25:f1:83:43:8f:1d:bf: df:3e:49:57:23:1d:74:58:86:98:85:c4:2f:96:a1: 6f:32:d8:06:03:5d:0e:71:c5:1b:8f:8b:38:8c:6f: b8:51:b8:ee:1b:74:18:fc:bf:9f:72:4d:2c:4f:ec: 16:bc:b8:e8:18:67:a0:7e:ff:20:6c:3a:99:2d:d9: 0c:9c:f1:1f:35:fb:f9:36:a1:67:10:93:92:4b:4c: 90:94:ce:e4:6a:23:a1:f3:d0:ea:9d:1d:48:db:78: da:08:2a:21:90:7e:59:52:59:42:c9:b2:1f:17:e5: 21:af:38:59:61:6f:09:ff:30:5d:56:01:28:6f:ac: 97:f4:55:dd:01:52:a1:a6:e3:56:50:16:02:87:81: 8e:ea:a1:32:35:4f:31:56:a0:95:a5:b7:58:07:c8: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2C:43:85:85:BC:23:A0:1B:2B:0F:37:FD:FD:52:17:08:BE:E0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 162.222.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:30:b3:e4:c5:c6:73:7f:6e:82:3d:8e:a5:a2:d2:6a:ca:9b: 52:13:34:50:0a:e3:7e:50:da:60:8a:c1:19:62:ae:e9:55:44: 88:51:ab:e8:0a:4d:53:07:82:7e:bc:20:d0:38:b5:9e:bf:72: b2:68:4c:a3:7d:b8:28:c4:9b:d6:38:45:94:be:96:ea:96:38: 1a:93:36:7c:03:39:7a:bc:53:0d:44:d8:93:d3:a6:72:36:77: 69:05:12:c0:2b:95:d6:7b:8d:dd:17:8a:89:c6:c2:8a:21:76: 44:80:77:11:39:6e:c9:53:db:97:1e:74:91:88:85:e0:53:c0: a7:1f:ea:34:6f:06:0e:57:09:8e:43:6c:55:b0:ce:0d:92:51: fa:a0:0f:61:d0:ef:90:ea:6b:cc:49:c3:91:5a:0d:1e:48:b7: df:ed:fb:55:6d:a8:0d:4d:ef:e9:ba:72:5b:05:e9:f3:2a:b4: 29:d5:5a:3a:7f:de:43:c3:e8:85:5a:b5:8b:f7:64:1b:b3:da: 62:c5:51:db:66:fd:f8:b9:33:18:3e:e5:17:41:56:fc:8d:3f: 9f:11:d5:0a:a9:b2:6b:31:fc:6b:65:9d:c3:42:ea:4d:c0:a5: 6d:01:96:68:56:83:c8:d5:4e:f0:98:1f:14:54:6d:00:fe:44: b1:d2:52:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsN6kuW09BVoCqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjFmNjdmMDUtZDZlOC00OTk0LWI0MmYtMTRkOTg2YzkwNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbwsbxwP4XBtmYdwcGDhoFa68C4gHxuEav9R gBP+PByE+lGNwDoljPu8qIk0z+BOB1FE4ryDlkhXlndp7bpVwC9+7iFDKNzkm8r7 Gd2IKZiEurU5u2dnngOYl9iUVYfTTyXxg0OPHb/fPklXIx10WIaYhcQvlqFvMtgG A10OccUbj4s4jG+4UbjuG3QY/L+fck0sT+wWvLjoGGegfv8gbDqZLdkMnPEfNfv5 NqFnEJOSS0yQlM7kaiOh89DqnR1I23jaCCohkH5ZUllCybIfF+UhrzhZYW8J/zBd VgEob6yX9FXdAVKhpuNWUBYCh4GO6qEyNU8xVqCVpbdYB8g7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMsQ4WFvCOgGysPN/39UhcIvuAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvYjUyMDY5NWQtOTdjYy0z ZWFmLTkxNWQtZjg0YmIyZTE2ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot5bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEws+TFxnN/boI9jqWi0mrKm1ITNFAK435Q2mCKwRlirulVRIhRq+gK TVMHgn68INA4tZ6/crJoTKN9uCjEm9Y4RZS+luqWOBqTNnwDOXq8Uw1E2JPTpnI2 d2kFEsArldZ7jd0XionGwoohdkSAdxE5bslT25cedJGIheBTwKcf6jRvBg5XCY5D bFWwzg2SUfqgD2HQ75Dqa8xJw5FaDR5It9/t+1VtqA1N7+m6clsF6fMqtCnVWjp/ 3kPD6IVatYv3ZBuz2mLFUdtm/fi5Mxg+5RdBVvyNP58R1Qqpsmsx/GtlncNC6k3A pW0BlmhWg8jVTvCYHxRUbQD+RLHSUsE= -----END CERTIFICATE-----Generated at Sat Apr 12 15:25:33 2025 by rpki-client