$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa File: 25ac78b4-e1ca-3663-9d67-95abb9982390.roa (raw, json) Hash identifier: lG1cbIURmWz4XBPx2FIphJP2fLbuk5of84l30Zig6JE= Subject key identifier: 35:B4:49:0B:82:B5:80:F6:A0:BE:30:F4:EE:F9:78:42:F1:CD:AC:DA Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F43285848F9269F614C5785D9DBE9D580 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 32329 IP address blocks: 158.247.68.0/22 maxlen: 24 176.108.136.0/21 maxlen: 24 207.53.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9f:61:4c:57:85:d9:db:e9:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a7554cd9-5cfc-40de-84ea-de62f9aac012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:2f:2a:5c:b5:31:77:7e:bb:3f:05:2d:f1: 9c:bf:c3:dd:29:d1:d8:bc:1e:fb:13:e8:6b:83:8e: 1d:1f:b7:fd:05:88:e0:31:11:c8:74:78:13:90:3b: b2:4b:fc:ae:3f:d6:fa:f6:e6:4f:77:4e:79:98:ee: 44:54:28:ab:9e:74:30:eb:b0:73:74:46:e5:f6:0f: 94:16:52:fe:cb:d1:72:fa:8b:d4:60:5a:60:c3:2d: 2f:d4:4e:fb:79:38:88:f8:8c:8b:f7:50:73:3c:ec: 7e:e9:7a:a2:21:0a:6f:e5:fa:f3:33:6c:39:f8:6e: 97:73:0f:76:a5:7f:e1:87:b0:e2:4b:aa:88:f1:4b: 9b:e9:21:3d:23:aa:54:76:57:73:e0:be:e1:cb:0e: 31:dd:48:c7:2b:38:78:65:93:71:93:b6:56:fa:14: 5d:67:b1:ef:e0:e0:e4:35:23:e0:ab:77:bd:93:1d: 52:6f:55:69:84:af:47:42:7c:a4:b0:da:fb:08:85: a9:d4:4b:1a:2a:a4:5d:70:57:2f:87:6d:31:40:4e: d7:63:2c:ae:75:00:98:f3:79:c2:51:27:ef:15:3c: c7:07:94:29:fc:b8:d0:8d:d0:36:c1:5a:f9:e4:52: 18:5d:1e:41:c7:9f:2c:03:5a:da:d4:80:4b:1e:fb: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B4:49:0B:82:B5:80:F6:A0:BE:30:F4:EE:F9:78:42:F1:CD:AC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 158.247.68.0/22 176.108.136.0/21 207.53.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:37:89:7a:3f:9b:d1:bb:b5:7f:d3:65:54:39:a8:9b:d7:c4: 10:c2:ce:ea:07:7b:a2:1a:fd:0f:57:f3:f0:8b:70:a9:f7:ab: b0:00:30:9a:c0:e4:5e:4a:a2:c2:82:da:d9:f6:16:b0:bb:6a: 99:08:6c:18:19:c4:42:10:e3:cd:18:c2:c2:23:51:02:f2:53: 54:32:f5:0d:f8:fc:c7:46:32:0f:77:da:61:bf:c7:90:a0:07: 3b:6a:02:44:f9:55:43:85:d8:25:63:dd:23:db:75:d7:a8:86: 16:e3:4f:b5:b0:36:67:c4:74:6a:f3:46:73:d8:43:31:37:2e: de:66:b5:ec:f4:83:f5:32:b5:7b:9f:23:22:ed:ef:04:b4:1e: 01:4d:9e:89:41:4d:88:a6:ff:64:69:dd:56:79:57:dd:1c:95: 17:2a:d5:ba:e4:16:d3:e0:8c:b7:ed:1c:4d:19:b9:5b:e3:bf: c6:01:8d:03:8f:ac:9e:05:be:1d:a0:b2:b1:e8:b6:19:60:68: e0:24:10:24:58:de:5b:6c:23:32:fe:f1:50:3c:f2:e3:68:d5: 78:be:e3:a5:0f:71:92:08:7e:82:ff:94:c4:f9:79:ef:3e:80: a0:3e:20:87:3c:eb:bd:21:f5:9c:3a:1c:24:ab:c7:33:4f:96: 72:4d:a0:4b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEj5Jp9hTFeF2dvp1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTc1NTRjZDktNWNmYy00MGRlLTg0ZWEtZGU2MmY5YWFjMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiAvKly1MXd+uz8FLfGcv8PdKdHYvB77E+hr g44dH7f9BYjgMRHIdHgTkDuyS/yuP9b69uZPd055mO5EVCirnnQw67BzdEbl9g+U FlL+y9Fy+ovUYFpgwy0v1E77eTiI+IyL91BzPOx+6XqiIQpv5frzM2w5+G6Xcw92 pX/hh7DiS6qI8Uub6SE9I6pUdldz4L7hyw4x3UjHKzh4ZZNxk7ZW+hRdZ7Hv4ODk NSPgq3e9kx1Sb1VphK9HQnyksNr7CIWp1EsaKqRdcFcvh20xQE7XYyyudQCY83nC USfvFTzHB5Qp/LjQjdA2wVr55FIYXR5Bx58sA1ra1IBLHvvPTQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDW0SQuCtYD2oL4w9O75eELxzazaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvMjVhYzc4YjQtZTFjYS0z NjYzLTlkNjctOTVhYmI5OTgyMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnvdEAwQD sGyIAwQCzzX8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJ03iXo/m9G7tX/TZVQ5qJvXxBDCzuoHe6Ia/Q9X 8/CLcKn3q7AAMJrA5F5KosKC2tn2FrC7apkIbBgZxEIQ480YwsIjUQLyU1Qy9Q34 /MdGMg932mG/x5CgBztqAkT5VUOF2CVj3SPbddeohhbjT7WwNmfEdGrzRnPYQzE3 Lt5mtez0g/UytXufIyLt7wS0HgFNnolBTYim/2Rp3VZ5V90clRcq1brkFtPgjLft HE0ZuVvjv8YBjQOPrJ4Fvh2gsrHothlgaOAkECRY3ltsIzL+8VA88uNo1Xi+46UP cZIIfoL/lMT5ee8+gKA+IIc8670h9Zw6HCSrxzNPlnJNoEs= -----END CERTIFICATE-----Generated at Sat Apr 12 13:14:24 2025 by rpki-client