$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa File: ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa (raw, json) Hash identifier: uSdILUrf5prO9USGrbLLq9ZAb88qUJOFJ6nhbTM0xR8= Subject key identifier: A5:68:8A:84:56:99:08:2D:11:F8:35:10:E8:23:5B:41:13:47:41:6A Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Certificate serial: 010D0C9F43285849955F1F4ED053639D31ABE8E0 Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 394470 IP address blocks: 172.83.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1f:4e:d0:53:63:9d:31:ab:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=a61f6cbf-c105-4552-9652-8fbf61d98031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:77:93:f3:49:6e:23:b4:f1:e7:fc:5b:7e: 62:cb:24:e6:b0:d7:d2:63:3b:47:ca:4c:2a:ac:ba: 4b:43:0c:c4:cc:2d:21:6a:83:16:79:31:c3:34:85: ab:f1:ec:43:f4:70:b1:df:13:6c:7e:bf:3c:76:d9: 05:d6:4e:b9:34:29:a7:8f:22:3f:e4:ae:05:1a:33: c6:b3:68:34:8b:c9:7a:31:45:ae:e9:c3:65:a6:b2: 6a:62:c7:11:fc:0a:c1:64:47:f3:6f:c8:5e:54:f8: 72:a2:f1:38:b5:4a:9b:a1:35:c9:2d:8e:90:a4:db: 6b:c3:b2:3c:11:73:80:7f:7a:e8:c4:6c:a7:51:b7: 39:c0:c4:c9:ae:cb:9e:ab:87:e5:5f:ab:b7:5a:c9: c1:5c:61:36:19:b4:a4:57:64:78:7a:83:fe:64:66: df:ad:14:ab:ef:f0:ff:ef:9c:02:02:2d:0a:35:63: eb:fe:39:47:52:f4:55:99:2f:2e:46:e3:98:9d:77: 3e:73:d4:fa:e2:08:c2:34:3a:40:75:ca:8c:35:5b: f6:cb:ff:7c:73:69:84:80:7b:2b:a7:85:1c:18:70: a2:09:ce:ad:e7:89:66:b4:16:79:1d:67:bc:fe:6c: 3b:1b:a7:ba:0e:be:20:69:c6:d5:0f:f7:90:13:3e: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:68:8A:84:56:99:08:2D:11:F8:35:10:E8:23:5B:41:13:47:41:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl X509v3 Authority Key Identifier: keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer sbgp-ipAddrBlock: critical IPv4: 172.83.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2e:c0:63:b5:ee:d0:12:f7:e3:fe:9a:05:52:c8:bf:c5:fe: 65:be:21:be:77:a9:eb:7d:cb:bd:4a:c9:06:6f:31:bd:56:42: db:4c:91:17:38:a0:ea:91:03:82:57:89:53:79:8f:fc:1b:cf: 06:22:4a:1e:aa:f1:14:7a:3c:c0:18:b3:65:6f:9e:1b:5b:04: 64:36:34:14:8e:49:6f:95:61:24:d9:03:7e:db:d2:8c:d6:5e: 37:ad:17:ff:f3:1b:65:1d:c0:63:ec:10:dc:fe:1e:84:6a:f1: 99:b2:b0:2b:9b:47:7f:ef:0c:37:72:10:8e:d1:7e:48:29:23: 50:6d:cc:d7:1c:e9:b9:e7:03:ce:8f:06:e7:b2:4d:76:3d:8c: 2e:7c:f5:8d:79:1c:ea:c6:12:86:1b:20:a9:00:ab:9b:48:20: 00:f3:7a:cf:0c:db:8e:32:c7:2e:33:2f:64:02:3e:41:c2:00: 2b:c8:7b:05:11:7d:11:65:be:c1:8d:6c:2b:f3:53:75:f4:27: 1f:ea:46:74:b3:c5:f6:a0:a6:b0:d4:c7:70:e3:9e:33:ff:77: 52:76:4d:8a:ec:c3:04:b2:f9:39:d3:cf:9f:f6:0c:9d:5a:83: 9d:00:10:1b:e2:6a:40:37:7a:38:b6:9e:fa:ab:56:00:c4:91: a9:86:26:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXx9O0FNjnTGr6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1 Y2M0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk YTYxZjZjYmYtYzEwNS00NTUyLTk2NTItOGZiZjYxZDk4MDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNB3k/NJbiO08ef8W35iyyTmsNfSYztHykwq rLpLQwzEzC0haoMWeTHDNIWr8exD9HCx3xNsfr88dtkF1k65NCmnjyI/5K4FGjPG s2g0i8l6MUWu6cNlprJqYscR/ArBZEfzb8heVPhyovE4tUqboTXJLY6QpNtrw7I8 EXOAf3roxGynUbc5wMTJrsueq4flX6u3WsnBXGE2GbSkV2R4eoP+ZGbfrRSr7/D/ 75wCAi0KNWPr/jlHUvRVmS8uRuOYnXc+c9T64gjCNDpAdcqMNVv2y/98c2mEgHsr p4UcGHCiCc6t54lmtBZ5HWe8/mw7G6e6Dr4gacbVD/eQEz4qAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVoioRWmQgtEfg1EOgjW0ETR0FqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvYWI3YWNhZTAtYjM2My0z NGI1LWFjZDEtMWNlYTdjOTM0YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3 NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4 ZDc5NzVjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFOWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMuwGO17tAS9+P+mgVSyL/F/mW+Ib53qet9y71KyQZvMb1WQttMkRc4 oOqRA4JXiVN5j/wbzwYiSh6q8RR6PMAYs2VvnhtbBGQ2NBSOSW+VYSTZA37b0ozW XjetF//zG2UdwGPsENz+HoRq8ZmysCubR3/vDDdyEI7RfkgpI1BtzNcc6bnnA86P BueyTXY9jC589Y15HOrGEoYbIKkAq5tIIADzes8M244yxy4zL2QCPkHCACvIewUR fRFlvsGNbCvzU3X0Jx/qRnSzxfagprDUx3DjnjP/d1J2TYrswwSy+TnTz5/2DJ1a g50AEBviakA3eji2nvqrVgDEkamGJjo= -----END CERTIFICATE-----Generated at Mon Apr 28 15:33:23 2025 by rpki-client