$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: 9H5UrjQB4QF8lrgNhyP1MjPlg6l9ER+mw0JpQgF3Oc8= Subject key identifier: 4E:95:F4:96:52:E9:CD:2C:06:5B:9C:C0:88:42:86:6D:69:CD:A1:E7 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285848DA70F8EC435BD0BCE54C7D00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f8:ec:43:5b:d0:bc:e5:4c:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=b9fcf1b5-971e-4d11-9fc3-4284c3df2616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:c0:a1:df:8c:e0:09:93:9d:fc:f3:02:02: 65:e5:a0:d3:56:fc:5c:52:f1:72:7d:f6:42:94:00: 7c:40:02:2c:53:37:70:9b:88:49:88:39:cc:0f:44: 0b:9d:d1:19:4c:90:17:1e:f4:5c:49:25:00:40:5b: 08:54:fb:7a:43:53:d5:60:f8:42:30:be:11:16:8e: 9f:a2:56:88:c2:84:66:8d:c3:95:6f:9a:64:85:f1: d5:6b:b9:8b:dc:b8:fc:4a:f6:83:6e:bb:58:f8:e0: 6b:71:2f:00:51:3d:cd:9d:43:f6:0a:c9:fe:57:1b: f4:50:70:f6:03:3d:81:2a:07:a3:76:15:00:4c:e0: c0:60:05:25:f6:69:e1:07:1d:65:5b:48:99:c0:ec: 40:54:9a:63:62:e1:1a:72:00:53:25:eb:cd:01:ce: d6:1c:e7:38:c8:5e:c4:4e:dd:df:34:d2:9b:68:62: 84:bb:19:59:33:df:60:a0:f5:6c:23:31:07:e7:a2: 43:52:0f:26:92:78:81:28:3c:b0:e2:d5:79:93:b5: ed:38:80:fa:3a:00:e5:45:5d:7d:75:9a:1a:8c:61: 0b:2b:06:42:fd:06:27:fb:5f:c8:4f:72:c1:53:2b: ab:62:8a:a4:50:b8:1b:98:65:17:ef:97:8b:00:a0: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:95:F4:96:52:E9:CD:2C:06:5B:9C:C0:88:42:86:6D:69:CD:A1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:43:11:d3:24:ed:53:62:9f:a6:13:16:db:f5:10:b6:23:d3: 4b:6b:09:31:8c:95:d1:7a:e1:72:3a:60:4c:ab:07:2e:65:aa: 99:a7:54:51:5a:ec:bf:7d:ec:8a:73:b0:cb:d4:84:b9:2f:33: af:03:30:ee:18:48:91:38:70:1d:dd:10:f8:28:37:55:79:7d: 40:24:46:28:d5:0c:f3:e3:83:31:c7:73:c7:ed:f9:7c:24:bb: 43:ae:cb:96:7f:ff:32:52:1a:c5:d4:dc:f4:d9:fd:34:e6:c4: 9f:47:d2:cd:75:26:f2:7f:79:58:00:6f:ea:f2:b4:c0:17:8e: b0:b5:bc:f2:5a:3a:d5:bd:ca:6f:e0:cd:6b:3d:98:d1:1e:11: 19:23:c1:ae:0c:71:3e:b4:83:93:8e:e4:7d:78:05:4f:49:7f: f1:c4:da:ca:86:2a:f4:ae:5e:19:59:ca:d0:19:2c:63:de:62: bc:ee:11:d0:3b:f1:71:4e:ce:c5:96:93:6c:a3:8c:73:da:53: d9:1f:59:ae:5a:e3:1f:3e:a2:65:5a:68:7c:a7:b7:6b:a8:d5: fa:12:7c:14:c4:09:4d:db:11:1b:9d:38:09:e7:b3:e3:04:af: 40:db:d1:a7:8a:6d:66:3f:51:59:59:43:cb:cd:19:91:e9:00: 04:80:19:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPjsQ1vQvOVMfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk YjlmY2YxYjUtOTcxZS00ZDExLTlmYzMtNDI4NGMzZGYyNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV3Aod+M4AmTnfzzAgJl5aDTVvxcUvFyffZC lAB8QAIsUzdwm4hJiDnMD0QLndEZTJAXHvRcSSUAQFsIVPt6Q1PVYPhCML4RFo6f olaIwoRmjcOVb5pkhfHVa7mL3Lj8SvaDbrtY+OBrcS8AUT3NnUP2Csn+Vxv0UHD2 Az2BKgejdhUATODAYAUl9mnhBx1lW0iZwOxAVJpjYuEacgBTJevNAc7WHOc4yF7E Tt3fNNKbaGKEuxlZM99goPVsIzEH56JDUg8mkniBKDyw4tV5k7XtOID6OgDlRV19 dZoajGELKwZC/QYn+1/IT3LBUyurYoqkULgbmGUX75eLAKAnMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6V9JZS6c0sBlucwIhChm1pzaHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJDEdMk7VNin6YTFtv1ELYj00trCTGMldF64XI6YEyrBy5lqpmnVFFa 7L997IpzsMvUhLkvM68DMO4YSJE4cB3dEPgoN1V5fUAkRijVDPPjgzHHc8ft+Xwk u0Ouy5Z//zJSGsXU3PTZ/TTmxJ9H0s11JvJ/eVgAb+rytMAXjrC1vPJaOtW9ym/g zWs9mNEeERkjwa4McT60g5OO5H14BU9Jf/HE2sqGKvSuXhlZytAZLGPeYrzuEdA7 8XFOzsWWk2yjjHPaU9kfWa5a4x8+omVaaHynt2uo1foSfBTECU3bERudOAnns+ME r0Db0aeKbWY/UVlZQ8vNGZHpAASAGQ0= -----END CERTIFICATE-----Generated at Sat Apr 26 23:57:27 2025 by rpki-client