$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa File: 2a5c7778-1786-3e6f-8890-b24491b369bb.roa (raw, json) Hash identifier: jwiD+ldPldwR1ItSx/ol0iHjFezB9tSaWwjGx0yTuEw= Subject key identifier: 2F:8B:21:6D:07:81:F6:1A:AC:5B:A4:71:97:6B:40:6B:AA:2C:AD:CD Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F43285848F22BE1BFD2AB94C4F5EACB00 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22504 IP address blocks: 162.118.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e1:bf:d2:ab:94:c4:f5:ea:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=79bd8ea2-9b14-4eab-b018-ef6695bce073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:99:90:56:7a:b3:ad:a1:02:9c:67:a2:dc: 8b:0e:44:5a:4b:a8:01:01:06:2f:af:ee:6b:97:40: cd:5a:eb:94:61:54:e3:53:d1:f0:48:01:83:67:14: a5:cd:fc:a8:50:68:6c:65:87:ff:54:02:f9:81:ff: 30:67:f4:9f:e0:84:92:68:8f:a9:15:56:f6:06:02: f2:c3:6d:86:34:db:7d:c4:4a:6f:56:a2:c1:31:15: 08:fd:79:99:91:4f:ce:81:f6:a7:38:77:d2:6b:09: 56:a4:85:8e:a6:1b:5e:00:ae:11:e9:d4:28:3c:69: c3:b9:77:fa:93:3c:11:a3:f6:0b:c8:80:98:bc:0b: 39:4c:40:08:52:27:e7:de:83:cd:f5:40:ed:49:ec: ff:1b:11:81:2b:cf:4b:cd:80:bf:97:a1:09:14:e1: 06:a6:6e:4b:29:7b:f1:7c:b2:dc:f4:d4:e4:7f:29: 0c:4f:67:0a:41:23:6a:9b:ff:b9:96:07:48:0b:c3: d6:63:f6:b4:e9:f9:fa:67:b8:31:31:e6:50:29:95: 72:e7:1f:c4:df:02:71:37:6e:e0:47:68:62:82:09: 35:4c:9b:14:67:c5:b5:5d:e8:fc:a6:61:5c:6e:a0: f8:77:9c:f9:f1:ef:7e:7a:e5:fc:dc:ef:aa:00:65: 36:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8B:21:6D:07:81:F6:1A:AC:5B:A4:71:97:6B:40:6B:AA:2C:AD:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:be:98:a4:d6:be:fd:3f:1b:39:91:d3:f3:dd:6d:f2:27:9c: 22:7e:73:ba:8e:58:cf:66:56:02:d1:a2:00:8c:9d:20:44:fa: a5:bc:cb:5a:b9:d8:39:8a:6e:c1:ac:09:82:3f:17:f6:f3:44: 25:3d:74:37:1b:42:17:4c:d8:69:9d:85:1d:35:6e:e8:c6:93: b6:a3:5a:25:2c:a9:89:e5:90:90:b3:e1:07:bf:07:b4:1c:49: 8d:78:e1:c2:19:84:26:f6:72:46:7a:36:3c:fa:9a:11:21:16: 52:60:90:45:fc:47:a5:d4:f2:20:d2:8b:db:51:7e:a7:63:28: c5:43:23:10:67:ee:0e:61:9b:65:0e:85:c7:0e:03:cd:24:f9: db:d7:0a:1e:58:21:d1:22:0d:d0:bc:6f:9a:8c:08:3d:e3:70: aa:53:e2:ef:26:de:15:31:c8:8c:fb:c7:cb:76:a6:56:4a:b7: 74:31:c4:20:45:24:c9:0a:5a:9c:67:c5:da:c5:b4:95:40:7a: d4:58:72:99:83:d8:5b:0c:53:70:17:62:21:d6:b6:96:5f:e9: d8:07:65:0c:24:29:e9:6f:04:6f:86:f0:9c:ca:b8:96:7f:93: 78:23:4e:a7:38:a5:63:72:36:7a:43:4f:e3:24:21:bc:50:ac: 89:5a:4d:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+G/0quUxPXqywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NzliZDhlYTItOWIxNC00ZWFiLWIwMTgtZWY2Njk1YmNlMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPGZkFZ6s62hApxnotyLDkRaS6gBAQYvr+5r l0DNWuuUYVTjU9HwSAGDZxSlzfyoUGhsZYf/VAL5gf8wZ/Sf4ISSaI+pFVb2BgLy w22GNNt9xEpvVqLBMRUI/XmZkU/OgfanOHfSawlWpIWOphteAK4R6dQoPGnDuXf6 kzwRo/YLyICYvAs5TEAIUifn3oPN9UDtSez/GxGBK89LzYC/l6EJFOEGpm5LKXvx fLLc9NTkfykMT2cKQSNqm/+5lgdIC8PWY/a06fn6Z7gxMeZQKZVy5x/E3wJxN27g R2higgk1TJsUZ8W1Xej8pmFcbqD4d5z58e9+euX83O+qAGU2/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+LIW0HgfYarFukcZdrQGuqLK3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvMmE1Yzc3NzgtMTc4Ni0z ZTZmLTg4OTAtYjI0NDkxYjM2OWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFonYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe+mKTWvv0/GzmR0/PdbfInnCJ+c7qOWM9mVgLRogCMnSBE+qW8y1q5 2DmKbsGsCYI/F/bzRCU9dDcbQhdM2GmdhR01bujGk7ajWiUsqYnlkJCz4Qe/B7Qc SY144cIZhCb2ckZ6Njz6mhEhFlJgkEX8R6XU8iDSi9tRfqdjKMVDIxBn7g5hm2UO hccOA80k+dvXCh5YIdEiDdC8b5qMCD3jcKpT4u8m3hUxyIz7x8t2plZKt3QxxCBF JMkKWpxnxdrFtJVAetRYcpmD2FsMU3AXYiHWtpZf6dgHZQwkKelvBG+G8JzKuJZ/ k3gjTqc4pWNyNnpDT+MkIbxQrIlaTaE= -----END CERTIFICATE-----Generated at Tue Apr 29 19:57:55 2025 by rpki-client