$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f34e6014-618b-3fd4-a619-df5015a41c90.roa File: f34e6014-618b-3fd4-a619-df5015a41c90.roa (raw, json) Hash identifier: g/Fn8TtYSW6JnbNFk/2vOIRUtnlS97Arv1fnKQFb/aw= Subject key identifier: 83:80:9C:4D:F8:0C:68:A7:EA:81:25:A0:50:5E:9B:D5:D4:91:31:E6 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F432858493243E41E8B1EFCDB402D0580 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f34e6014-618b-3fd4-a619-df5015a41c90.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 150.252.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e4:1e:8b:1e:fc:db:40:2d:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=28ee05de-1be8-4df0-84b5-29be3692a842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:3c:47:f6:ae:14:3c:5b:64:cb:36:1a:dd: 3e:d6:fc:88:e9:ce:d2:f0:ed:74:23:6d:9a:c0:0f: 82:fa:04:0e:98:71:b5:87:b2:f9:73:bd:23:82:87: 29:41:47:b5:f6:a0:b8:e0:98:b7:4a:f0:39:6a:3f: 7b:32:19:24:bc:6d:64:4d:bd:24:e7:e9:ee:37:55: 07:70:9d:6f:3a:83:8d:b6:33:2f:cc:fe:1e:ba:d4: 5c:28:ea:23:99:2b:a4:e3:33:15:3d:df:01:2d:70: b1:4c:64:f1:c9:98:b7:53:6c:20:11:82:d3:01:65: 55:a1:7d:2a:46:c4:aa:70:00:4d:db:f6:23:66:4b: b0:34:06:a9:51:35:f9:82:fb:b9:76:a2:f3:bc:6e: 8d:80:57:52:43:c8:b6:2f:82:1c:8e:16:32:23:7e: 5d:f8:0a:25:5f:45:f3:77:b4:ff:8a:57:fa:ac:65: 8d:25:a5:a0:b1:6e:61:64:21:a3:ac:14:e2:eb:45: db:00:b6:f8:ad:30:56:9f:19:7d:51:ae:0a:30:85: d0:77:91:3f:45:c9:da:94:cf:31:a3:2c:a7:55:c2: fc:e0:d9:14:3c:23:a6:f5:98:39:b6:c4:20:f2:c9: 22:6b:84:ae:9e:9a:67:6f:5e:20:5e:3b:53:b0:4f: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:80:9C:4D:F8:0C:68:A7:EA:81:25:A0:50:5E:9B:D5:D4:91:31:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f34e6014-618b-3fd4-a619-df5015a41c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:42:67:e7:57:9f:e7:0a:ea:51:81:fd:41:cd:e0:38:3b:c1: 06:60:b3:57:52:68:76:7f:87:24:97:d1:70:34:14:a1:90:a4: e8:dc:ee:6f:c1:3b:41:5b:ed:a1:1e:e9:a3:be:76:d5:46:e5: d8:6b:c9:a5:6d:b6:93:c2:9e:5f:57:ba:df:b8:ce:f3:b8:3d: bf:1e:03:45:9c:3a:97:b8:26:a1:4c:99:de:f7:4c:09:2a:05: 72:41:9e:47:72:c5:37:27:07:c0:7d:c9:7c:3c:7a:e9:8c:0c: 70:da:9c:4e:48:ec:55:24:b9:f9:a4:57:5f:87:ac:89:aa:3c: 16:2d:2d:13:b5:25:6f:a3:c5:c7:c0:27:4a:28:31:ae:75:3e: 49:9c:3b:be:51:fa:14:44:46:63:06:fd:45:4d:d4:16:e6:3a: 67:11:20:43:d4:ac:35:00:10:b5:61:20:83:f2:e3:e6:2d:4d: 57:dd:4c:82:e0:a5:af:1b:70:91:db:82:b1:55:94:8e:5c:e7: 7e:4b:47:62:bb:f3:13:8d:7d:d2:ee:c1:73:10:42:de:e9:d9: 62:46:b2:be:9f:03:47:ba:93:67:53:99:ca:21:0a:85:60:6d: 91:52:1d:e3:83:a2:16:49:cb:a0:84:f3:19:c6:49:92:0b:e3: f6:5c:6a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+Qeix7820AtBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MjhlZTA1ZGUtMWJlOC00ZGYwLTg0YjUtMjliZTM2OTJhODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfQ8R/auFDxbZMs2Gt0+1vyI6c7S8O10I22a wA+C+gQOmHG1h7L5c70jgocpQUe19qC44Ji3SvA5aj97MhkkvG1kTb0k5+nuN1UH cJ1vOoONtjMvzP4eutRcKOojmSuk4zMVPd8BLXCxTGTxyZi3U2wgEYLTAWVVoX0q RsSqcABN2/YjZkuwNAapUTX5gvu5dqLzvG6NgFdSQ8i2L4IcjhYyI35d+AolX0Xz d7T/ilf6rGWNJaWgsW5hZCGjrBTi60XbALb4rTBWnxl9Ua4KMIXQd5E/RcnalM8x oyynVcL84NkUPCOm9Zg5tsQg8skia4Sunppnb14gXjtTsE8GMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOAnE34DGin6oEloFBem9XUkTHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZjM0ZTYwMTQtNjE4Yi0z ZmQ0LWE2MTktZGY1MDE1YTQxYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBCZ+dXn+cK6lGB/UHN4Dg7wQZgs1dSaHZ/hySX0XA0FKGQpOjc7m/B O0Fb7aEe6aO+dtVG5dhryaVttpPCnl9Xut+4zvO4Pb8eA0WcOpe4JqFMmd73TAkq BXJBnkdyxTcnB8B9yXw8eumMDHDanE5I7FUkufmkV1+HrImqPBYtLRO1JW+jxcfA J0ooMa51PkmcO75R+hRERmMG/UVN1BbmOmcRIEPUrDUAELVhIIPy4+YtTVfdTILg pa8bcJHbgrFVlI5c535LR2K78xONfdLuwXMQQt7p2WJGsr6fA0e6k2dTmcohCoVg bZFSHeODohZJy6CE8xnGSZIL4/ZcatA= -----END CERTIFICATE-----Generated at Wed Apr 30 00:07:50 2025 by rpki-client