$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa File: c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa (raw, json) Hash identifier: jaAEta6HJaMYUQEzcGoi2rmDIoBAicY1amyCCSnXgcQ= Subject key identifier: 65:99:0F:59:AE:1B:1E:0E:40:6D:BA:1B:57:6C:D8:17:91:FC:95:30 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F43285848EF61699D1A55E646BFBFE580 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 165.224.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:69:9d:1a:55:e6:46:bf:bf:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=9308b9f4-c638-4b3a-b89a-05ac08caf451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:14:19:81:83:6a:a5:e3:84:56:df:36:b9: 89:25:14:05:55:b6:a8:12:0a:f6:a6:25:c1:f5:96: 9e:dd:89:19:b0:ab:c5:3b:0a:01:7f:19:5a:80:00: d2:e9:d8:51:04:2e:7a:95:48:87:ef:cb:73:ff:63: bc:d9:c1:43:92:f6:be:04:3c:19:78:ca:0e:da:75: ec:9c:f7:0d:71:56:00:0c:c8:ed:ce:d7:4a:a3:ce: 54:c8:48:c2:44:4f:01:63:ff:17:29:73:fd:b0:b2: db:99:7f:ec:83:cb:7b:15:16:c9:5e:5b:19:73:f2: 7d:53:ed:8b:c6:a0:c2:5a:47:ad:60:91:dc:d9:5c: e8:34:a3:77:87:82:4b:18:87:89:73:0f:46:62:b7: 78:bd:45:fc:e2:25:e8:0a:98:2b:dd:8c:0f:85:9a: 9d:23:15:83:b3:76:59:75:5d:5f:e6:66:12:e1:35: 33:24:01:b3:4a:e6:dd:63:28:dd:e6:78:a9:ac:05: bd:e5:ac:3f:76:15:e6:80:d1:a4:1e:3c:61:ee:85: 08:8b:19:4e:3f:27:86:0a:b5:81:0e:f6:4b:aa:08: 23:de:02:70:d5:9b:0c:c8:ae:f9:3a:61:eb:d2:97: 50:70:49:5d:c0:51:c4:89:61:78:88:27:c8:23:96: 37:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:99:0F:59:AE:1B:1E:0E:40:6D:BA:1B:57:6C:D8:17:91:FC:95:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e4:e2:0f:91:5a:64:4d:bc:f9:32:6a:5a:36:01:60:a6:60: ee:5a:24:30:4a:2b:fe:37:06:0b:75:65:cd:6d:a8:48:ae:1e: c8:e2:2d:08:0d:cd:66:31:00:47:bf:59:79:fd:bb:e1:10:50: 39:8c:ea:33:de:a2:db:9c:d3:0f:36:a6:eb:c3:9e:d5:65:0d: 73:f2:29:ca:2c:89:c6:d1:60:8f:f3:c9:a5:db:29:8b:46:ab: 9f:9e:c4:e5:d0:e3:71:4b:74:f0:63:b1:78:72:90:2d:be:fa: cf:3b:e4:f7:78:7a:e9:f2:9d:dd:40:ee:fb:78:4b:bd:b7:e1: 12:ef:d9:95:9b:95:a7:67:1f:a7:78:80:8e:d1:2f:53:ce:56: 86:e7:84:67:e8:44:08:9e:dc:e9:e3:b1:6f:79:e4:e6:6a:15: ef:90:83:f1:10:58:07:5e:55:05:0a:d5:20:9c:7a:8a:87:99: e3:ed:78:31:b8:64:3f:70:c6:ca:7b:c2:20:aa:28:51:5d:9a: 4c:d9:9e:56:a6:83:fa:67:63:76:94:ee:7c:77:ff:92:01:0a: 6e:19:6a:ee:1b:6e:9f:10:c4:ab:2b:b2:bb:37:56:59:fb:b9: 33:b5:9b:3a:16:6d:ec:38:dc:18:a7:71:0e:5a:a3:27:3b:4e: 17:91:62:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWmdGlXmRr+/5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OTMwOGI5ZjQtYzYzOC00YjNhLWI4OWEtMDVhYzA4Y2FmNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzAUGYGDaqXjhFbfNrmJJRQFVbaoEgr2piXB 9Zae3YkZsKvFOwoBfxlagADS6dhRBC56lUiH78tz/2O82cFDkva+BDwZeMoO2nXs nPcNcVYADMjtztdKo85UyEjCRE8BY/8XKXP9sLLbmX/sg8t7FRbJXlsZc/J9U+2L xqDCWketYJHc2VzoNKN3h4JLGIeJcw9GYrd4vUX84iXoCpgr3YwPhZqdIxWDs3ZZ dV1f5mYS4TUzJAGzSubdYyjd5niprAW95aw/dhXmgNGkHjxh7oUIixlOPyeGCrWB DvZLqggj3gJw1ZsMyK75OmHr0pdQcEldwFHEiWF4iCfII5Y3QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWZD1muGx4OQG26G1ds2BeR/JUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYzk4NzY0OGUtNWJjNS0z YzkxLTk5NzItZWU3Yzg2ZTlhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbk4g+RWmRNvPkyalo2AWCmYO5aJDBKK/43Bgt1Zc1tqEiuHsjiLQgN zWYxAEe/WXn9u+EQUDmM6jPeotuc0w82puvDntVlDXPyKcosicbRYI/zyaXbKYtG q5+exOXQ43FLdPBjsXhykC2++s875Pd4eunynd1A7vt4S7234RLv2ZWbladnH6d4 gI7RL1POVobnhGfoRAie3OnjsW955OZqFe+Qg/EQWAdeVQUK1SCceoqHmePteDG4 ZD9wxsp7wiCqKFFdmkzZnlamg/pnY3aU7nx3/5IBCm4Zau4bbp8QxKsrsrs3Vln7 uTO1mzoWbew43BincQ5aoyc7TheRYsE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:25 2025 by rpki-client