$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa File: 87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa (raw, json) Hash identifier: YbmvRuwEVCI9LRpPgKjBdNq5lmOILT1xYJIrOtSj0i4= Subject key identifier: 2F:38:26:9C:5E:00:13:47:58:B6:72:66:BA:ED:67:7B:7B:C8:B0:94 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584902EC298AF628E1E1BA0E32E0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16509 IP address blocks: 134.224.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:29:8a:f6:28:e1:e1:ba:0e:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=f7ce13a7-9a10-4cb6-8cde-10b63ea45544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:58:66:d6:45:c7:4a:8f:cc:e7:4d:34:8a: 16:58:28:19:65:ed:94:6b:48:fc:02:b3:3e:39:26: a4:4f:ac:64:4c:5b:03:bc:1f:31:e8:a8:6e:dd:bc: 90:3e:ec:90:66:b7:2b:8e:e8:07:17:f5:58:d4:12: ca:90:f5:8e:a7:3f:c6:42:25:30:b1:06:1b:1e:2f: ad:68:da:ab:f8:0f:8b:f8:d9:54:6c:ea:ca:6b:0a: 1f:6e:dc:ea:7a:c9:e4:bc:09:5a:d1:29:eb:ad:71: 22:65:b5:f7:6b:89:f5:8c:8b:75:c3:5d:03:4c:58: 02:22:a8:f9:93:c5:2a:06:63:0f:71:3c:c1:53:9e: 05:37:82:6d:fe:b4:f8:ad:ec:36:f0:2d:20:04:19: e3:53:d7:dc:df:95:9d:fa:14:47:41:94:9d:92:52: 04:3f:37:a5:e4:52:a7:6b:ff:b1:ef:fc:8c:f0:3a: 52:25:13:8c:48:93:2b:4d:98:fa:7e:2a:1b:85:ce: dc:4f:9e:18:79:a3:f1:66:08:02:b9:84:96:19:1c: 86:91:13:f6:b0:a8:3a:81:19:de:72:0c:30:04:1e: e7:7d:f1:f3:e5:8b:a4:74:93:fb:a3:1a:50:17:81: 97:fa:4e:66:d7:24:65:76:c3:86:e4:c3:f1:4f:3c: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:38:26:9C:5E:00:13:47:58:B6:72:66:BA:ED:67:7B:7B:C8:B0:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c0:f3:a7:ff:94:3d:80:c1:d9:7b:61:52:e2:c1:36:0c:8b: 9e:ec:73:d0:2c:7b:21:a9:a6:64:29:f3:be:0c:62:8c:71:7c: fd:fc:87:63:e4:97:dd:f4:73:ce:40:76:e0:cc:57:cf:42:1a: bc:58:97:ca:dc:49:bb:7e:0b:18:75:d0:62:46:22:42:ca:46: 43:f4:b0:eb:15:70:84:60:47:96:40:f1:b5:0b:4a:63:e7:f4: 1a:ad:ef:fb:42:f6:43:0f:07:30:98:2b:a3:10:fd:11:04:63: 91:4c:e1:32:fe:18:7f:07:78:20:a5:79:71:de:42:2f:88:ad: c8:8d:0c:b8:f7:5e:bd:cc:40:e5:1e:97:89:45:e4:5d:d2:e7: dc:f5:b6:9c:c6:d1:6f:d9:a5:ef:52:31:51:80:60:8b:f5:1a: f6:59:4f:10:2f:eb:84:fb:5d:b7:ae:3f:18:ea:84:ea:da:86: 8b:4a:fc:c9:a9:e1:e4:87:43:e0:47:9a:34:e9:f1:b1:b1:60: 83:60:b4:00:c2:30:cc:ae:ca:ac:01:ce:c8:55:78:f2:01:59: 52:62:96:01:24:18:1d:c8:8c:00:38:40:75:21:31:92:64:36: b4:63:17:20:f7:d4:a4:ff:73:1c:64:8d:c8:e7:1d:31:29:84: 38:49:5d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CmK9ijh4boOMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZjdjZTEzYTctOWExMC00Y2I2LThjZGUtMTBiNjNlYTQ1NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo5YZtZFx0qPzOdNNIoWWCgZZe2Ua0j8ArM+ OSakT6xkTFsDvB8x6Khu3byQPuyQZrcrjugHF/VY1BLKkPWOpz/GQiUwsQYbHi+t aNqr+A+L+NlUbOrKawofbtzqesnkvAla0SnrrXEiZbX3a4n1jIt1w10DTFgCIqj5 k8UqBmMPcTzBU54FN4Jt/rT4rew28C0gBBnjU9fc35Wd+hRHQZSdklIEPzel5FKn a/+x7/yM8DpSJROMSJMrTZj6fiobhc7cT54YeaPxZggCuYSWGRyGkRP2sKg6gRne cgwwBB7nffHz5YukdJP7oxpQF4GX+k5m1yRldsOG5MPxTzyBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC84JpxeABNHWLZyZrrtZ3t7yLCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvODdhYTllZmQtOGIwYy0z MWMxLThlNTItZDhiZDIyZDBhNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhuCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDA86f/lD2Awdl7YVLiwTYMi57sc9AseyGppmQp874MYoxxfP38h2Pk l930c85AduDMV89CGrxYl8rcSbt+Cxh10GJGIkLKRkP0sOsVcIRgR5ZA8bULSmPn 9Bqt7/tC9kMPBzCYK6MQ/REEY5FM4TL+GH8HeCCleXHeQi+IrciNDLj3Xr3MQOUe l4lF5F3S59z1tpzG0W/Zpe9SMVGAYIv1GvZZTxAv64T7XbeuPxjqhOrahotK/Mmp 4eSHQ+BHmjTp8bGxYINgtADCMMyuyqwBzshVePIBWVJilgEkGB3IjAA4QHUhMZJk NrRjFyD31KT/cxxkjcjnHTEphDhJXeE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:08:47 2025 by rpki-client