$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/18501d07-44f6-3812-b4e1-366618e968ff.roa File: 18501d07-44f6-3812-b4e1-366618e968ff.roa (raw, json) Hash identifier: OKFLeA5TW2dzWNCppMCb5bSz9Q2HE+wD/8NfWPctHfA= Subject key identifier: 79:E0:08:5A:21:CC:DB:31:9D:51:31:77:E1:5E:DA:72:FA:50:F7:EB Certificate issuer: /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Certificate serial: 010D0C9F4328584953C4158DED023FB2B20BD420 Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/18501d07-44f6-3812-b4e1-366618e968ff.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 10967 IP address blocks: 165.130.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:15:8d:ed:02:3f:b2:b2:0b:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=f1b6b1b8-6c25-478e-b9af-320c38ff46fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:41:f4:6f:df:e5:49:a2:2c:b9:19:16:b1: f6:00:28:83:a7:ed:72:71:10:e6:85:f7:f1:73:5b: 5a:e4:e0:00:97:03:fe:6a:ed:4f:24:8a:c8:80:84: a2:85:5d:be:bf:09:3e:df:7d:d8:ce:18:42:1b:ed: f6:62:5e:c4:2b:b6:48:2a:7a:5a:46:c5:c1:da:37: 83:b3:13:a0:83:3d:c2:2c:4c:89:69:19:86:20:17: e8:7a:03:1a:30:56:56:70:7a:dd:87:96:09:6e:1c: 38:15:81:85:fa:24:37:0b:9e:ae:a0:25:55:f8:3c: 49:c2:c6:72:9a:25:78:61:1f:15:77:e3:37:3e:09: af:4d:29:22:58:bb:63:99:d6:b1:7f:b6:5b:58:8d: 26:de:62:6d:59:46:46:6a:97:a7:09:0f:14:3e:cb: 33:97:66:dc:e1:5f:a5:d4:f7:43:4b:35:21:c6:89: 94:c9:fe:23:aa:6c:4f:19:d9:40:96:47:8a:cb:d5: e4:3d:d7:ee:dd:88:bd:ca:e1:c8:1a:e0:63:f1:c9: af:bf:5f:e7:95:93:c7:7f:78:87:d0:a8:d6:3b:d2: 82:9c:84:71:6d:cd:ad:a2:cf:0f:2e:1e:7f:28:34: 57:f3:4b:0e:24:31:62:95:ee:79:a6:26:39:34:34: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E0:08:5A:21:CC:DB:31:9D:51:31:77:E1:5E:DA:72:FA:50:F7:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/18501d07-44f6-3812-b4e1-366618e968ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl X509v3 Authority Key Identifier: keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer sbgp-ipAddrBlock: critical IPv4: 165.130.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:18:74:b4:bc:13:49:c9:44:86:30:9d:08:15:a7:71:66:a3: a3:69:df:f3:b4:db:5b:e1:a1:66:10:94:5c:21:62:77:84:a6: c1:2e:dd:61:77:8e:fe:ca:8d:86:cb:43:02:fb:ea:24:b4:cd: 9c:d5:6b:a0:56:e9:65:37:ec:5a:26:8e:9f:9e:5c:94:b1:86: 85:8f:c2:20:d8:1a:7d:88:aa:16:27:0f:b0:99:d2:ff:68:b2: 2c:70:c2:8f:d3:9e:fd:7b:61:71:fd:f1:6f:aa:62:8c:68:35: b1:f4:d0:6c:5a:e8:fc:e4:ef:e5:b1:93:6a:b4:f3:53:de:80: 3e:c4:91:9b:5c:07:2a:e5:b5:fa:22:a9:56:9f:2e:cc:ca:1e: 7e:63:c8:eb:76:90:cf:f2:5b:81:41:22:5d:cf:8c:bf:62:2b: 01:f7:c9:a2:bf:98:2d:2b:b8:7c:3f:b3:80:d8:24:7d:c0:f3: 39:d3:76:b0:02:a2:68:eb:d9:30:cf:69:8b:b1:62:53:f2:1d: a7:71:b6:46:0e:bf:b7:c7:b4:fe:10:c0:42:f1:14:94:34:3c: db:07:fe:f3:57:57:29:09:ee:ba:c6:28:aa:ab:70:be:65:66: 74:43:22:e6:7c:51:b8:67:2e:c9:29:f1:16:6c:cc:4e:3d:cc: f7:55:9b:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBWN7QI/srIL1CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk5ODFjMWYtNWI5MC00YWM0LWJkM2EtMTdjNTQ1MjE0 NmMzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjFiNmIxYjgtNmMyNS00NzhlLWI5YWYtMzIwYzM4ZmY0NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIdB9G/f5UmiLLkZFrH2ACiDp+1ycRDmhffx c1ta5OAAlwP+au1PJIrIgISihV2+vwk+333YzhhCG+32Yl7EK7ZIKnpaRsXB2jeD sxOggz3CLEyJaRmGIBfoegMaMFZWcHrdh5YJbhw4FYGF+iQ3C56uoCVV+DxJwsZy miV4YR8Vd+M3PgmvTSkiWLtjmdaxf7ZbWI0m3mJtWUZGapenCQ8UPsszl2bc4V+l 1PdDSzUhxomUyf4jqmxPGdlAlkeKy9XkPdfu3Yi9yuHIGuBj8cmvv1/nlZPHf3iH 0KjWO9KCnIRxbc2tos8PLh5/KDRX80sOJDFile55piY5NDRi8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHngCFohzNsxnVExd+Fe2nL6UPfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4 MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUyMTQ2YzMvMTg1MDFkMDctNDRmNi0z ODEyLWI0ZTEtMzY2NjE4ZTk2OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk5ODFjMWYtNWI5MC00YWM0LWJk M2EtMTdjNTQ1MjE0NmMzL2M5OTgxYzFmLTViOTAtNGFjNC1iZDNhLTE3YzU0NTIx NDZjMy5jcmwwHwYDVR0jBBgwFoAUud4nFso2NAm9Cwz2faUhvHaAqNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1 NDUyMTQ2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYI+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgYdLS8E0nJRIYwnQgVp3Fmo6Np3/O021vhoWYQlFwhYneEpsEu3WF3 jv7KjYbLQwL76iS0zZzVa6BW6WU37Fomjp+eXJSxhoWPwiDYGn2IqhYnD7CZ0v9o sixwwo/Tnv17YXH98W+qYoxoNbH00Gxa6Pzk7+Wxk2q081PegD7EkZtcByrltfoi qVafLszKHn5jyOt2kM/yW4FBIl3PjL9iKwH3yaK/mC0ruHw/s4DYJH3A8znTdrAC omjr2TDPaYuxYlPyHadxtkYOv7fHtP4QwELxFJQ0PNsH/vNXVykJ7rrGKKqrcL5l ZnRDIuZ8UbhnLskp8RZszE49zPdVm0M= -----END CERTIFICATE-----Generated at Sat Apr 12 13:06:59 2025 by rpki-client