$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa File: 2fef3d37-e795-39f5-b53a-c7e420227567.roa (raw, json) Hash identifier: 7VO/OP+em7oJwTzsaKedal8dViprgLS4sh/SKOLuBxc= Subject key identifier: 5F:D6:B0:E4:D2:93:50:B0:F3:39:C6:1C:15:DF:52:1B:09:D0:B6:36 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F432858492CAE9A83F531BA81DF341E70 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 7018 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:9a:83:f5:31:ba:81:df:34:1e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ea16415f-96cf-44cc-83b9-5e0cb37bdb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b1:f2:76:d3:c2:fd:62:3d:ac:b1:38:ee:01: cb:c1:b5:7a:78:fe:af:18:70:13:fb:c3:e5:86:07: a4:d8:7b:28:43:24:a1:1b:8d:bd:0a:6f:50:05:70: 9a:d6:42:ee:94:fa:9b:19:94:1f:63:ad:6a:ec:33: 3f:3b:c5:7c:a4:b0:b8:9e:2f:81:49:f1:20:6b:3b: 88:8e:26:ef:23:3a:e0:00:87:14:a9:d5:80:eb:5c: 2a:fc:60:8a:80:ca:78:31:bd:2b:bc:56:ef:f6:b1: 5a:65:4d:54:ea:66:4b:65:b9:6c:55:65:02:7d:ca: e6:48:14:67:28:19:02:d5:b0:bf:9e:74:ca:06:62: 3b:51:aa:a9:fc:d5:5c:ee:36:85:a7:bd:88:4e:bb: df:1d:8b:26:fb:7d:c1:6c:f3:20:ef:f2:0d:46:11: 29:b4:2d:4c:64:ab:d3:d4:96:3b:a7:31:21:48:47: 55:96:52:8c:ee:72:99:32:04:23:90:91:b3:d5:0e: 93:0d:f6:dc:cd:b3:c6:2d:ed:b4:71:b9:be:9e:3e: 32:5c:07:75:2d:71:2b:93:b8:67:f3:de:ed:05:91: 4c:e5:c6:a4:cd:9d:13:fd:45:b7:1d:33:bf:62:01: 16:d6:4d:61:2f:45:90:a3:a0:98:34:d5:e4:e2:0b: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D6:B0:E4:D2:93:50:B0:F3:39:C6:1C:15:DF:52:1B:09:D0:B6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e8:1f:af:4d:33:33:6b:50:45:df:5f:cb:a3:1d:22:f4:59: 9d:24:ba:cd:d3:ef:16:2d:d5:19:5e:90:e1:17:39:9b:ef:fa: b5:0e:c7:14:d7:5e:b4:8d:a8:18:69:02:66:b4:fb:16:eb:d2: b2:4c:91:7a:43:05:b0:8e:dc:86:08:f3:60:79:de:65:cb:54: 2d:11:cc:61:49:a2:0b:59:f9:f5:a4:4c:77:67:ba:61:44:8d: 2e:99:ff:19:79:66:69:d2:bd:8b:60:25:f3:e7:e3:ad:fb:1b: 24:79:70:8f:60:ae:9b:ea:72:ef:57:97:db:82:46:f3:76:4b: 1a:bc:47:ec:c8:5c:22:57:9f:24:74:d1:8f:d0:6a:20:74:13: 62:9a:85:b3:f5:95:e1:40:83:17:01:76:43:02:39:e6:3d:2b: 2b:21:56:0a:7f:3d:6d:55:85:71:64:9e:66:c0:26:b0:4d:6f: 3a:56:43:b6:8b:36:cc:93:93:34:54:04:fc:17:54:b0:38:8a: 19:bb:f5:ec:97:8b:1b:11:4d:f5:62:9b:88:c8:28:92:37:d4: d8:8c:d1:32:ca:44:f1:42:9a:82:0e:20:14:f4:fd:24:ce:38: 41:50:cb:09:4b:d4:f1:89:dc:2d:8b:1b:09:6f:39:c6:88:d6: 4a:f7:eb:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEksrpqD9TG6gd80HnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWExNjQxNWYtOTZjZi00NGNjLTgzYjktNWUwY2IzN2JkYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLHydtPC/WI9rLE47gHLwbV6eP6vGHAT+8Pl hgek2HsoQyShG429Cm9QBXCa1kLulPqbGZQfY61q7DM/O8V8pLC4ni+BSfEgazuI jibvIzrgAIcUqdWA61wq/GCKgMp4Mb0rvFbv9rFaZU1U6mZLZblsVWUCfcrmSBRn KBkC1bC/nnTKBmI7Uaqp/NVc7jaFp72ITrvfHYsm+33BbPMg7/INRhEptC1MZKvT 1JY7pzEhSEdVllKM7nKZMgQjkJGz1Q6TDfbczbPGLe20cbm+nj4yXAd1LXErk7hn 897tBZFM5cakzZ0T/UW3HTO/YgEW1k1hL0WQo6CYNNXk4gvekwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF/WsOTSk1Cw8znGHBXfUhsJ0LY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMmZlZjNkMzctZTc5NS0z OWY1LWI1M2EtYzdlNDIwMjI3NTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAx6B+vTTMza1BF31/Lox0i9FmdJLrN0+8WLdUZ XpDhFzmb7/q1DscU1160jagYaQJmtPsW69KyTJF6QwWwjtyGCPNged5ly1QtEcxh SaILWfn1pEx3Z7phRI0umf8ZeWZp0r2LYCXz5+Ot+xskeXCPYK6b6nLvV5fbgkbz dksavEfsyFwiV58kdNGP0GogdBNimoWz9ZXhQIMXAXZDAjnmPSsrIVYKfz1tVYVx ZJ5mwCawTW86VkO2izbMk5M0VAT8F1SwOIoZu/Xsl4sbEU31YpuIyCiSN9TYjNEy ykTxQpqCDiAU9P0kzjhBUMsJS9TxidwtixsJbznGiNZK9+sF -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:36 2025 by rpki-client