$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/d56d7f78-eee7-3f34-9558-454715d71504.roa File: d56d7f78-eee7-3f34-9558-454715d71504.roa (raw, json) Hash identifier: 2+v9ItVZNfDOd46J94BgoOK+DxB4Gd844UR2CQKNius= Subject key identifier: 0A:13:B1:D6:8D:64:41:DF:8E:10:1D:CE:B5:77:AA:72:9B:E9:AC:E2 Certificate issuer: /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Certificate serial: 010D0C9F43285849244E68F1C7786B16994DA640 Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/d56d7f78-eee7-3f34-9558-454715d71504.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396982 IP address blocks: 165.130.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:68:f1:c7:78:6b:16:99:4d:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=3e8090cf-4e27-466e-8ee2-0832a1dac3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:2e:b6:b5:42:bf:71:6e:9a:53:db:f0:a3: 55:2d:a4:50:e5:85:16:a7:cf:5d:6a:72:5d:af:07: e4:ae:39:43:ab:9d:50:75:2c:dc:c0:aa:bc:06:07: cd:bb:9b:10:2f:d0:7f:f7:a5:29:4f:bd:d6:8b:b6: 7e:5b:c7:00:fe:32:be:87:0a:a4:16:51:8c:28:75: eb:5a:0d:98:d8:32:6c:89:14:eb:ab:10:9f:e0:07: 24:99:6c:7c:ad:5d:c0:74:ac:c3:25:7a:f1:ff:9a: 8a:97:af:6d:d9:b3:6b:1b:67:e1:3a:76:8e:68:4b: 67:8b:e4:6f:80:11:21:23:3f:67:52:81:bb:3f:bf: 5c:d7:d5:a5:b1:c1:4c:f6:53:76:1e:22:f6:af:86: 70:01:fc:2e:4a:5f:f1:59:84:73:b3:2b:71:98:2e: ff:cc:25:55:b2:86:d5:19:a1:09:fa:7b:b7:95:fa: 80:0e:8f:0f:ef:38:7b:f3:c7:1a:33:d4:da:f7:c2: 8f:4e:41:9d:21:c7:59:0a:91:02:4a:07:dc:11:db: 78:5c:14:69:55:41:01:2e:6d:aa:4f:9c:26:3d:9d: 70:90:7f:81:6e:97:be:05:78:d9:2a:a4:9e:c8:69: e5:4c:7b:d5:58:70:90:1f:f7:d5:ca:1a:05:49:fc: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:13:B1:D6:8D:64:41:DF:8E:10:1D:CE:B5:77:AA:72:9B:E9:AC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/d56d7f78-eee7-3f34-9558-454715d71504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl X509v3 Authority Key Identifier: keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer sbgp-ipAddrBlock: critical IPv4: 165.130.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:32:43:2b:57:3a:28:53:99:b0:a4:7b:bc:cf:c2:49:58:74: 37:6d:54:d7:ce:9a:64:01:8a:f0:2f:0d:8e:07:5c:93:c4:41: af:7f:9e:45:ac:f2:c2:d8:5c:8c:a1:35:a4:6c:fa:da:16:14: 64:29:bc:94:ae:14:33:dc:09:bc:17:a7:49:d5:a6:88:0e:17: 12:8f:40:04:f1:65:18:de:28:e3:4a:6c:12:67:39:c3:40:8e: d2:e4:da:a5:24:4c:0a:62:a1:a2:c9:63:b7:bc:8a:c7:be:1e: 46:94:4c:90:61:c0:c8:0f:7c:58:c2:b1:40:00:a8:88:93:90: 75:5a:68:fc:de:2c:16:4e:18:a9:6a:df:bb:8e:5b:54:f4:49: 9a:4e:2c:75:34:2f:07:5e:05:80:44:c7:0e:70:69:c8:de:71: cc:71:35:f0:e3:c3:72:70:94:94:f9:ff:68:34:eb:92:a7:ea: 7f:bc:d7:a9:4b:0c:78:a1:a2:79:d5:4e:a5:65:c3:3b:d7:d2: a4:ff:50:4a:e2:1f:ca:0d:44:b2:71:69:23:b4:2c:b6:06:5f: 50:9b:f7:55:94:07:f9:38:d2:2f:22:1e:98:e5:cb:e3:92:d3: 78:39:61:5d:a6:2a:d7:af:bf:52:a5:33:82:f1:76:35:e3:45: a1:4f:14:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTmjxx3hrFplNpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk5ODFjMWYtNWI5MC00YWM0LWJkM2EtMTdjNTQ1MjE0 NmMzMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk M2U4MDkwY2YtNGUyNy00NjZlLThlZTItMDgzMmExZGFjM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhgutrVCv3FumlPb8KNVLaRQ5YUWp89danJd rwfkrjlDq51QdSzcwKq8BgfNu5sQL9B/96UpT73Wi7Z+W8cA/jK+hwqkFlGMKHXr Wg2Y2DJsiRTrqxCf4AckmWx8rV3AdKzDJXrx/5qKl69t2bNrG2fhOnaOaEtni+Rv gBEhIz9nUoG7P79c19WlscFM9lN2HiL2r4ZwAfwuSl/xWYRzsytxmC7/zCVVsobV GaEJ+nu3lfqADo8P7zh788caM9Ta98KPTkGdIcdZCpECSgfcEdt4XBRpVUEBLm2q T5wmPZ1wkH+Bbpe+BXjZKqSeyGnlTHvVWHCQH/fVyhoFSfymwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoTsdaNZEHfjhAdzrV3qnKb6aziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4 MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUyMTQ2YzMvZDU2ZDdmNzgtZWVlNy0z ZjM0LTk1NTgtNDU0NzE1ZDcxNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk5ODFjMWYtNWI5MC00YWM0LWJk M2EtMTdjNTQ1MjE0NmMzL2M5OTgxYzFmLTViOTAtNGFjNC1iZDNhLTE3YzU0NTIx NDZjMy5jcmwwHwYDVR0jBBgwFoAUud4nFso2NAm9Cwz2faUhvHaAqNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1 NDUyMTQ2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpYJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoyQytXOihTmbCke7zPwklYdDdtVNfOmmQBivAvDY4HXJPEQa9/nkWs 8sLYXIyhNaRs+toWFGQpvJSuFDPcCbwXp0nVpogOFxKPQATxZRjeKONKbBJnOcNA jtLk2qUkTApioaLJY7e8ise+HkaUTJBhwMgPfFjCsUAAqIiTkHVaaPzeLBZOGKlq 37uOW1T0SZpOLHU0LwdeBYBExw5wacjeccxxNfDjw3JwlJT5/2g065Kn6n+816lL DHihonnVTqVlwzvX0qT/UEriH8oNRLJxaSO0LLYGX1Cb91WUB/k40i8iHpjly+OS 03g5YV2mKtevv1KlM4LxdjXjRaFPFAE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:31:36 2025 by rpki-client