$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa File: 8b83c5d7-df69-3e4e-8d87-019ffe414958.roa (raw, json) Hash identifier: 7CFgngbXpFhjiafie5M4i4NTZQmnJHvWaExkMZpx+os= Subject key identifier: 30:1B:29:B2:14:42:FE:5F:D4:78:20:F0:DB:DD:CF:F9:53:DC:52:1B Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F43285849A61F4722F1E58AF1E7324C00 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 64123 IP address blocks: 128.254.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:47:22:f1:e5:8a:f1:e7:32:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=4ff4a036-55c6-4a29-b8ac-96341f001c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:f6:e1:82:ce:2c:d7:0c:f5:19:01:5b:f7: 54:ee:6e:f8:58:6b:57:c2:21:d4:fe:5d:e7:18:20: d3:66:45:04:4b:a7:d9:6a:04:b6:14:4d:31:72:a6: 6d:4b:63:fe:d2:6f:c0:97:55:90:e2:ff:89:3c:d2: 0d:23:23:1a:68:6b:03:c5:4f:56:c9:88:1d:5b:c3: 56:f3:1f:0e:a0:f5:47:e3:70:b6:02:8e:5d:20:b3: 97:c3:f4:45:55:c4:74:29:ac:3a:d6:4b:87:6f:fa: 66:36:42:6f:00:15:cf:24:a2:f7:bb:58:74:8a:63: d4:90:60:1c:9a:63:e6:b4:c8:83:90:9e:bb:0e:e1: f4:ff:34:9d:0e:52:df:a7:89:ba:f5:45:e0:ce:a5: 03:5a:2b:a8:7b:52:e7:8c:75:52:45:3d:b5:c9:4d: 27:37:5c:96:be:85:a2:7b:56:35:9e:55:e6:0a:a2: 2a:43:82:4c:dc:81:db:a6:cc:ce:87:f9:06:ca:00: 03:cc:6e:e0:46:95:fd:27:55:07:cb:e9:f2:05:bd: ff:a5:6e:f4:67:ae:30:6f:f2:35:df:39:29:79:4f: 4a:20:e0:ed:ac:6b:22:1d:82:db:f6:70:48:35:b0: c3:e5:4f:f0:d7:50:39:b2:6a:b4:01:02:d1:4a:64: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1B:29:B2:14:42:FE:5F:D4:78:20:F0:DB:DD:CF:F9:53:DC:52:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d9:3e:c4:c5:67:89:72:84:34:92:93:c8:52:b0:41:c9:e4: 46:1d:3f:77:87:b4:05:5a:20:0a:96:ff:10:23:a1:f3:7b:83: ee:c1:0e:07:50:55:66:5c:11:56:53:a3:79:c6:91:79:8b:ca: 69:ba:0f:ff:4c:0f:8b:5a:da:2a:38:0e:d2:fc:75:04:c7:88: 28:78:7e:c1:15:48:48:ca:9b:5f:f0:4d:09:0b:20:e8:0a:70: 41:4b:6c:e9:d8:fb:1d:10:d9:b0:4e:34:7f:1c:3f:6f:7a:ee: fa:70:50:a7:27:c4:58:0b:fc:ed:d8:0e:a8:76:1a:4f:35:66: 11:63:08:a7:a6:ac:11:f5:54:87:58:f6:33:f0:32:44:22:2a: 5e:59:ed:97:e7:2d:e4:73:2f:80:df:18:6c:c1:c3:d7:61:33: eb:36:d0:ad:cb:80:5e:fe:66:a0:ea:77:c2:89:01:f7:34:a4: a2:2e:39:3e:57:40:24:5d:fa:0f:38:73:0c:0f:75:a3:50:06: ff:b6:a7:c6:43:23:0a:35:2b:f2:be:83:8b:d4:c2:75:55:66: 2b:95:37:0d:9f:91:c7:9b:ba:0c:77:5f:27:93:e6:2a:4e:d3: 7d:35:de:c5:9c:28:36:89:ec:b4:b8:ee:2a:0e:3e:4c:5f:86: d4:56:42:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0ci8eWK8ecyTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NGZmNGEwMzYtNTVjNi00YTI5LWI4YWMtOTYzNDFmMDAxYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTv24YLOLNcM9RkBW/dU7m74WGtXwiHU/l3n GCDTZkUES6fZagS2FE0xcqZtS2P+0m/Al1WQ4v+JPNINIyMaaGsDxU9WyYgdW8NW 8x8OoPVH43C2Ao5dILOXw/RFVcR0Kaw61kuHb/pmNkJvABXPJKL3u1h0imPUkGAc mmPmtMiDkJ67DuH0/zSdDlLfp4m69UXgzqUDWiuoe1LnjHVSRT21yU0nN1yWvoWi e1Y1nlXmCqIqQ4JM3IHbpszOh/kGygADzG7gRpX9J1UHy+nyBb3/pW70Z64wb/I1 3zkpeU9KIODtrGsiHYLb9nBINbDD5U/w11A5smq0AQLRSmQ6NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAbKbIUQv5f1Hgg8Nvdz/lT3FIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvOGI4M2M1ZDctZGY2OS0z ZTRlLThkODctMDE5ZmZlNDE0OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrZPsTFZ4lyhDSSk8hSsEHJ5EYdP3eHtAVaIAqW/xAjofN7g+7BDgdQ VWZcEVZTo3nGkXmLymm6D/9MD4ta2io4DtL8dQTHiCh4fsEVSEjKm1/wTQkLIOgK cEFLbOnY+x0Q2bBONH8cP2967vpwUKcnxFgL/O3YDqh2Gk81ZhFjCKemrBH1VIdY 9jPwMkQiKl5Z7ZfnLeRzL4DfGGzBw9dhM+s20K3LgF7+ZqDqd8KJAfc0pKIuOT5X QCRd+g84cwwPdaNQBv+2p8ZDIwo1K/K+g4vUwnVVZiuVNw2fkcebugx3XyeT5ipO 03013sWcKDaJ7LS47ioOPkxfhtRWQlY= -----END CERTIFICATE-----Generated at Mon Apr 28 10:37:50 2025 by rpki-client