$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/02f4ba5f-4dce-3a3a-a4e2-e09129a0114f.roa File: 02f4ba5f-4dce-3a3a-a4e2-e09129a0114f.roa (raw, json) Hash identifier: 1XjNCoZ20OGdmrH7MKyAr+1CeQ+7Me8Z8iRtrIVPDME= Subject key identifier: 70:4C:89:46:1C:0F:B1:C5:1D:69:21:52:6E:0C:A7:C3:76:99:55:B6 Certificate issuer: /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9 Certificate serial: 010D0C9F43285849955F23C8CF64BAD9E46198E8 Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/02f4ba5f-4dce-3a3a-a4e2-e09129a0114f.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 1411 IP address blocks: 137.155.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:23:c8:cf:64:ba:d9:e4:61:98:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=e9f7d6d4-c20c-46f4-a6cf-d531ef210cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:fa:48:e2:19:be:8f:53:69:2b:c7:42:a8: 8a:15:9e:6a:f2:0a:7b:c8:a8:21:18:4e:b6:74:69: 9b:e6:db:ba:33:23:46:a9:fd:a1:62:db:cc:21:9c: 59:6c:65:6d:6e:fd:5c:e0:01:be:12:6f:4a:10:e1: 05:f4:30:ef:27:6b:77:48:dc:6b:34:13:f6:3a:26: 61:8b:5f:23:31:d8:4b:df:1d:72:15:17:0a:06:51: 2b:b3:88:1a:46:bb:68:97:dc:f9:67:ef:5d:91:cb: f4:df:68:ad:d4:6b:fb:44:0f:13:f8:83:4a:f6:50: 47:22:96:08:e4:f2:54:f1:7f:87:d7:b7:92:7e:b6: 6a:a3:ed:3c:c4:0d:80:5d:88:1d:78:25:33:76:d7: 14:3c:70:77:c7:f3:52:ee:68:1c:f3:27:0f:48:41: e8:16:9e:36:c5:01:e8:de:76:9d:4f:7c:9c:56:bb: f4:40:66:b1:34:b7:53:f8:2b:64:0a:8f:86:72:3b: 98:3f:e5:34:21:f6:fe:23:9b:18:23:a4:3b:27:71: 33:44:30:24:9b:f7:9d:9c:07:9e:37:67:a3:71:c9: 24:aa:ff:6e:92:a3:08:ca:e4:ad:26:fb:c4:13:f2: 48:d2:d2:f1:6d:f4:9e:5e:dd:8c:ff:95:cd:d4:0a: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4C:89:46:1C:0F:B1:C5:1D:69:21:52:6E:0C:A7:C3:76:99:55:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/02f4ba5f-4dce-3a3a-a4e2-e09129a0114f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl X509v3 Authority Key Identifier: keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer sbgp-ipAddrBlock: critical IPv4: 137.155.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a2:6a:49:40:12:55:ba:0f:bb:a0:aa:fa:f3:3c:93:56:6c: 3c:d9:32:b6:3a:7e:05:e8:4f:77:ee:e4:43:a2:31:55:07:04: 99:f9:07:f4:ef:9a:67:9f:44:17:9f:32:63:5b:f7:76:81:02: 2a:38:c4:e3:3e:0b:74:ee:84:98:34:41:88:f5:be:b3:d2:bb: 62:e1:74:52:55:ad:ef:4b:56:cb:60:a2:67:c0:de:5a:41:d5: 7e:b0:4b:c7:19:2c:f0:b3:3a:99:03:bb:a3:8d:6b:30:21:b0: a3:f1:2a:f2:d0:13:77:22:69:b2:83:0b:5f:22:6e:70:19:64: 09:0b:dd:e3:1b:e7:5e:47:c9:00:3b:6a:a9:15:85:a3:60:c8: e3:f9:56:da:72:11:2e:18:13:b0:bc:da:0d:7e:bc:d3:3e:6e: e5:2a:49:92:02:ad:e8:fc:a6:65:ba:bf:d9:33:d2:a7:ce:c1: 96:e4:38:79:03:5c:59:c9:93:2c:22:3a:83:b3:8b:63:d4:c1: cc:fb:da:03:49:0b:1b:95:52:89:98:25:1c:37:be:d2:7f:ef: 16:a3:f5:d8:dc:1a:dc:9a:d2:57:ef:fe:f4:00:50:07:d7:2d: c4:5f:14:2c:4a:9e:89:c0:d0:3b:2e:8f:67:f8:dc:6c:e3:b5: eb:53:08:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyPIz2S62eRhmOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg3NTA1OGYtNTM2My00YmJjLTlkZTctYmZkNjY5Yzg4 YmQ5MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTlmN2Q2ZDQtYzIwYy00NmY0LWE2Y2YtZDUzMWVmMjEwY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uX6SOIZvo9TaSvHQqiKFZ5q8gp7yKghGE62 dGmb5tu6MyNGqf2hYtvMIZxZbGVtbv1c4AG+Em9KEOEF9DDvJ2t3SNxrNBP2OiZh i18jMdhL3x1yFRcKBlErs4gaRrtol9z5Z+9dkcv032it1Gv7RA8T+INK9lBHIpYI 5PJU8X+H17eSfrZqo+08xA2AXYgdeCUzdtcUPHB3x/NS7mgc8ycPSEHoFp42xQHo 3nadT3ycVrv0QGaxNLdT+CtkCo+GcjuYP+U0Ifb+I5sYI6Q7J3EzRDAkm/ednAee N2ejcckkqv9ukqMIyuStJvvEE/JI0tLxbfSeXt2M/5XN1ArKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBMiUYcD7HFHWkhUm4Mp8N2mVW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1 MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2NjljODhiZDkvMDJmNGJhNWYtNGRjZS0z YTNhLWE0ZTItZTA5MTI5YTAxMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzg3NTA1OGYtNTM2My00YmJjLTlk ZTctYmZkNjY5Yzg4YmQ5Lzc4NzUwNThmLTUzNjMtNGJiYy05ZGU3LWJmZDY2OWM4 OGJkOS5jcmwwHwYDVR0jBBgwFoAUYPhZmnlWN01F4ALtWMCNGRhbrAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2 NjljODhiZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiZuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqiaklAElW6D7ugqvrzPJNWbDzZMrY6fgXoT3fu5EOiMVUHBJn5B/Tv mmefRBefMmNb93aBAio4xOM+C3TuhJg0QYj1vrPSu2LhdFJVre9LVstgomfA3lpB 1X6wS8cZLPCzOpkDu6ONazAhsKPxKvLQE3ciabKDC18ibnAZZAkL3eMb515HyQA7 aqkVhaNgyOP5VtpyES4YE7C82g1+vNM+buUqSZICrej8pmW6v9kz0qfOwZbkOHkD XFnJkywiOoOzi2PUwcz72gNJCxuVUomYJRw3vtJ/7xaj9djcGtya0lfv/vQAUAfX LcRfFCxKnonA0Dsuj2f43GzjtetTCCY= -----END CERTIFICATE-----Generated at Sun Apr 27 19:28:20 2025 by rpki-client