$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa File: 01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa (raw, json) Hash identifier: MS4FJaAF5FfHXbbMtVBOyeKsaEuU0QfLjhwGd5rhI88= Subject key identifier: 65:5E:28:BC:A3:E5:72:27:7F:1F:32:06:77:D8:A0:4C:1B:8C:90:CC Certificate issuer: /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Certificate serial: 010D0C9F432858499DBF320AEC43D52869FE0CF1 Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 14618 IP address blocks: 144.86.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:32:0a:ec:43:d5:28:69:fe:0c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=ccbffafd-fe50-4398-be43-cc8c3640a332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:21:4e:55:a2:5d:d7:b3:73:40:22:30:84: 14:a0:fe:79:28:4f:05:6f:36:df:2b:44:a7:a0:83: ea:f3:e3:54:e7:69:45:5d:05:06:a0:7d:4f:44:1f: f2:43:38:c3:f9:72:ce:7e:bc:85:10:e7:45:21:68: bf:ad:08:72:b7:eb:46:50:ef:85:79:b6:85:fa:03: 47:5e:43:9e:db:b4:5a:4b:f7:02:6c:40:6e:63:c1: 3d:e2:ba:ea:3e:54:fc:19:77:cf:c3:5c:1a:a5:d7: 1c:42:8d:a0:73:00:51:16:26:ee:57:78:74:9f:63: b2:b4:32:e9:55:39:a0:89:13:c5:75:23:af:ef:b7: 92:ef:9d:0a:74:06:2d:e6:89:9d:ba:d9:92:14:5a: 20:e8:b1:3d:e1:1b:6e:07:13:ca:7c:0f:37:69:71: 16:e3:81:99:d9:2e:e0:4a:41:b8:cd:8c:9e:87:dd: e4:d6:57:67:3d:3d:67:cd:3d:35:6c:31:13:7d:1e: bd:87:5a:d8:22:60:7c:54:88:11:50:39:a8:7d:c7: 7f:96:a6:a8:72:3d:76:9a:3a:a4:b6:ff:9c:a5:45: 3b:4f:1e:9c:f1:aa:de:b3:99:3a:49:7f:8a:6b:11: b1:ec:e6:0d:22:db:8e:e0:8a:4b:b5:40:44:54:ef: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5E:28:BC:A3:E5:72:27:7F:1F:32:06:77:D8:A0:4C:1B:8C:90:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl X509v3 Authority Key Identifier: keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer sbgp-ipAddrBlock: critical IPv4: 144.86.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ee:00:45:17:3d:4d:cb:3b:c2:99:ae:14:f4:60:a2:c3:d1: ba:72:d4:70:51:b8:93:26:79:90:9b:c2:71:30:f7:00:d3:26: 78:f1:9a:cd:42:f9:36:0c:22:4c:af:58:23:ec:12:b3:b1:53: cb:53:f1:95:8c:05:ae:e1:90:d3:f7:37:46:a2:7c:2b:bb:c1: 7c:73:cb:5c:e4:2f:2a:e6:aa:05:b1:79:e7:29:60:ab:af:69: b8:13:5b:9c:7e:fc:de:c9:8d:d4:7b:7e:16:0f:c9:a7:f6:18: 45:90:98:61:18:1c:ea:3d:9e:a1:e0:d7:22:a8:18:db:da:9b: 9e:8e:1f:4f:31:32:20:e7:13:3f:59:d9:cf:6a:11:c2:ae:80: 48:3a:b3:18:ea:36:ba:08:f3:2b:97:99:ef:d5:90:a3:e4:c6: c3:f6:e5:a2:6c:59:74:e8:55:c5:b9:5c:c0:50:47:71:8d:17: b9:47:bb:59:57:2c:05:9d:a3:19:7b:68:c0:85:72:89:25:e7: 22:ff:41:45:7b:da:b7:56:2c:72:ef:47:bc:da:aa:2b:45:81: b5:3b:49:2e:12:9c:79:21:47:df:6f:c2:9d:19:82:1e:e9:2f: 68:c8:57:d2:52:a4:62:b5:30:e7:f6:ae:d9:0d:9f:2b:db:e2: f2:af:3d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzIK7EPVKGn+DPEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwOWJlZjAtYjZlOS00OTJkLWFkZjktMGJkOGE1NjEw YzM1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk Y2NiZmZhZmQtZmU1MC00Mzk4LWJlNDMtY2M4YzM2NDBhMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmghTlWiXdezc0AiMIQUoP55KE8FbzbfK0Sn oIPq8+NU52lFXQUGoH1PRB/yQzjD+XLOfryFEOdFIWi/rQhyt+tGUO+FebaF+gNH XkOe27RaS/cCbEBuY8E94rrqPlT8GXfPw1wapdccQo2gcwBRFibuV3h0n2OytDLp VTmgiRPFdSOv77eS750KdAYt5omdutmSFFog6LE94RtuBxPKfA83aXEW44GZ2S7g SkG4zYyeh93k1ldnPT1nzT01bDETfR69h1rYImB8VIgRUDmofcd/lqaocj12mjqk tv+cpUU7Tx6c8ares5k6SX+KaxGx7OYNItuO4IpLtUBEVO8T4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVeKLyj5XInfx8yBnfYoEwbjJDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5 YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2MTBjMzUvMDFhNmVkNDMtMTNkZi0z Yzg1LTliMjEtZDliYjM2ZjViNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOWJlZjAtYjZlOS00OTJkLWFk ZjktMGJkOGE1NjEwYzM1L2Q0MDliZWYwLWI2ZTktNDkyZC1hZGY5LTBiZDhhNTYx MGMzNS5jcmwwHwYDVR0jBBgwFoAUO4mvNm3SAvf82vpNhm6edNIqi8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4 YTU2MTBjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInuAEUXPU3LO8KZrhT0YKLD0bpy1HBRuJMmeZCbwnEw9wDTJnjxms1C +TYMIkyvWCPsErOxU8tT8ZWMBa7hkNP3N0aifCu7wXxzy1zkLyrmqgWxeecpYKuv abgTW5x+/N7JjdR7fhYPyaf2GEWQmGEYHOo9nqHg1yKoGNvam56OH08xMiDnEz9Z 2c9qEcKugEg6sxjqNroI8yuXme/VkKPkxsP25aJsWXToVcW5XMBQR3GNF7lHu1lX LAWdoxl7aMCFcokl5yL/QUV72rdWLHLvR7zaqitFgbU7SS4SnHkhR99vwp0Zgh7p L2jIV9JSpGK1MOf2rtkNnyvb4vKvPbo= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:31 2025 by rpki-client