$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa File: 065f485a-2efe-31d5-8788-a9a1e337735d.roa (raw, json) Hash identifier: uFV9aSJ7ha0ZXXAjNj/gjIc5uTlrBfXK7UUn8XIw3Sw= Subject key identifier: 26:B2:B2:6B:E3:9B:FD:48:FF:7B:29:D8:79:6F:00:88:7E:76:ED:19 Certificate issuer: /CN=ff45396e-5aed-48af-b337-95d4dc567afb Certificate serial: 010D0C9F43285848A830AAEF69BA40E1184151C0 Authority key identifier: 6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 6377 IP address blocks: 158.165.0.0/16 maxlen: 16 192.135.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:aa:ef:69:ba:40:e1:18:41:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff45396e-5aed-48af-b337-95d4dc567afb Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=db44eb0b-79ba-4a76-a8a7-bcdd2e4513b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:a8:d9:2a:d8:1a:29:bb:35:94:09:03:54: d7:4a:4d:39:92:33:96:6e:95:14:a0:ff:e7:af:4e: f9:78:14:b1:bc:6e:72:60:4a:d8:47:d2:bf:42:38: 4c:81:07:e8:ff:81:4e:8b:22:e1:cf:f6:d5:27:58: 1a:73:c6:52:68:f2:ac:ee:17:7c:40:4a:a5:5d:26: c5:8d:f4:04:a2:1f:27:77:5c:aa:83:e3:94:df:b4: 9c:e4:bc:71:12:cb:77:12:6e:79:0a:c5:d3:60:9d: cb:12:20:e8:61:e6:1e:23:11:26:30:07:89:02:6d: a9:14:95:04:f8:b0:d1:ec:f5:7b:d5:08:8a:27:ea: c9:b8:22:83:17:70:3e:16:63:5b:38:9e:1b:b8:51: 71:f8:59:9e:59:26:0a:bb:3e:d9:6b:2c:84:af:48: a7:f1:9e:8f:1d:02:38:98:87:99:66:ab:3e:ec:9b: 6e:d6:af:5a:98:c0:94:b7:31:d3:fc:f8:fb:20:d2: f8:52:e0:f1:cd:d7:e3:ff:53:5f:31:47:6a:36:be: b1:23:b1:7a:06:23:df:7c:4d:e9:98:ac:17:82:df: cc:83:5b:b2:39:f9:69:37:5b:22:e5:c9:d4:e6:71: db:31:08:9e:c1:c8:69:13:5c:9c:b8:65:02:af:d9: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B2:B2:6B:E3:9B:FD:48:FF:7B:29:D8:79:6F:00:88:7E:76:ED:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl X509v3 Authority Key Identifier: keyid:6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer sbgp-ipAddrBlock: critical IPv4: 158.165.0.0/16 192.135.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b5:d6:8c:63:d9:d8:f4:bf:00:54:14:5f:d6:cd:d4:0d:54: 36:b4:6e:f0:95:05:52:6a:df:c1:43:e7:a8:b4:15:de:54:4b: a0:24:62:8b:9c:39:8f:9e:98:28:66:31:33:27:bd:d8:b4:e7: 88:fb:35:74:d5:98:6b:77:4b:1f:6e:ef:7e:9c:ca:11:e2:29: d7:c4:76:ea:c2:0a:2e:67:67:a1:1b:5d:ae:af:fe:b6:96:c8: 59:e4:a2:a9:81:56:be:86:8a:29:fe:34:0f:30:47:65:97:cc: 87:e6:6e:95:4f:7b:64:f5:46:7e:d4:3d:eb:20:ce:e1:ce:b7: 20:4c:5b:8b:8a:55:eb:b0:ce:f5:59:d1:28:e3:25:3b:98:fa: ec:34:5e:ad:be:6f:25:9f:41:9f:c2:d8:45:99:84:0a:2c:94: e7:2a:fb:be:d0:10:d9:06:d2:39:4f:f5:35:d6:49:61:dc:23: 0a:c3:78:8f:9a:c2:b2:c7:80:6a:2c:ac:48:2a:61:b4:3b:9a: 7b:75:f5:18:23:f6:05:cd:e8:e6:4a:8d:5f:1b:8c:00:6d:7f: c1:79:15:06:e6:d2:4d:7e:79:1a:3f:46:45:e7:5d:4e:cf:5c: 98:52:a3:32:c9:63:d5:f2:41:8f:79:36:03:9e:66:35:63:86: 24:6f:10:41 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEioMKrvabpA4RhBUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY0NTM5NmUtNWFlZC00OGFmLWIzMzctOTVkNGRjNTY3 YWZiMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZGI0NGViMGItNzliYS00YTc2LWE4YTctYmNkZDJlNDUxM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS6o2SrYGim7NZQJA1TXSk05kjOWbpUUoP/n r075eBSxvG5yYErYR9K/QjhMgQfo/4FOiyLhz/bVJ1gac8ZSaPKs7hd8QEqlXSbF jfQEoh8nd1yqg+OU37Sc5LxxEst3Em55CsXTYJ3LEiDoYeYeIxEmMAeJAm2pFJUE +LDR7PV71QiKJ+rJuCKDF3A+FmNbOJ4buFFx+FmeWSYKuz7ZayyEr0in8Z6PHQI4 mIeZZqs+7Jtu1q9amMCUtzHT/Pj7INL4UuDxzdfj/1NfMUdqNr6xI7F6BiPffE3p mKwXgt/Mg1uyOflpN1si5cnU5nHbMQiewchpE1ycuGUCr9n1lQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCaysmvjm/1I/3sp2HlvAIh+du0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1 Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0ZGM1NjdhZmIvMDY1ZjQ4NWEtMmVmZS0z MWQ1LTg3ODgtYTlhMWUzMzc3MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmY0NTM5NmUtNWFlZC00OGFmLWIz MzctOTVkNGRjNTY3YWZiL2ZmNDUzOTZlLTVhZWQtNDhhZi1iMzM3LTk1ZDRkYzU2 N2FmYi5jcmwwHwYDVR0jBBgwFoAUbdoY/gxSm/xACX4/13WI5aH9XLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0 ZGM1NjdhZmIuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAnqUDBADA h7cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAW7XWjGPZ2PS/AFQUX9bN1A1UNrRu8JUFUmrfwUPnqLQV3lRL oCRii5w5j56YKGYxMye92LTniPs1dNWYa3dLH27vfpzKEeIp18R26sIKLmdnoRtd rq/+tpbIWeSiqYFWvoaKKf40DzBHZZfMh+ZulU97ZPVGftQ96yDO4c63IExbi4pV 67DO9VnRKOMlO5j67DRerb5vJZ9Bn8LYRZmECiyU5yr7vtAQ2QbSOU/1NdZJYdwj CsN4j5rCsseAaiysSCphtDuae3X1GCP2Bc3o5kqNXxuMAG1/wXkVBubSTX55Gj9G ReddTs9cmFKjMslj1fJBj3k2A55mNWOGJG8QQQ== -----END CERTIFICATE-----Generated at Sat Apr 12 00:27:53 2025 by rpki-client