$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa File: 4f833dec-49e6-3832-9493-21b1a1371d61.roa (raw, json) Hash identifier: ZtfgNYvKVYszDxWiyxACm3xValNDijIz8PhSYgAUZ1U= Subject key identifier: B7:69:EB:F5:93:92:88:2C:A3:9C:68:28:3A:CC:EA:4C:D0:A4:DB:EF Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584A119AB53FDE4971088380D080 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 26744 IP address blocks: 150.252.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b5:3f:de:49:71:08:83:80:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=353380a8-42db-44ab-b9db-8cac968200a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:59:87:8d:4a:9e:02:28:82:7f:b1:c3:fc:7e: f6:95:54:e5:0d:5c:7f:8d:44:92:fa:e8:9f:63:f3: 46:11:60:11:b7:bf:f9:d5:31:e0:9b:21:58:5a:da: 37:f1:d8:a5:12:d2:60:a7:2a:bf:f4:2c:22:38:88: 14:ba:10:c9:af:b8:36:e3:2c:25:a8:12:e1:50:8d: 70:04:50:f1:37:2c:68:8f:20:2a:04:53:e2:68:38: 10:86:26:ed:f4:ee:22:0e:e2:ee:bd:a8:61:42:6f: cf:96:a9:19:90:8f:39:31:af:94:80:50:1a:b9:e5: 02:1c:09:f1:ce:7e:30:6b:32:c0:9a:05:56:a8:f5: ab:53:36:f7:22:08:aa:36:35:f6:bd:11:d3:4f:49: 08:b1:5b:5d:45:c1:25:0d:3c:26:6f:f3:b5:da:76: 43:54:90:78:9d:bb:f4:9a:5a:7f:c0:7f:07:b8:a6: 11:16:89:aa:77:d7:2d:b1:e0:9a:a8:90:0c:bf:55: 04:2f:d6:9e:c4:fa:47:f2:3b:ac:95:f5:0a:a0:d8: 29:c2:84:aa:02:9d:57:31:cf:2b:26:ef:e0:ce:33: a0:66:ae:08:ab:09:d0:8b:12:d5:99:c1:8b:35:8f: 55:28:09:ca:20:27:66:61:db:63:93:bf:e1:2c:b5: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:69:EB:F5:93:92:88:2C:A3:9C:68:28:3A:CC:EA:4C:D0:A4:DB:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f833dec-49e6-3832-9493-21b1a1371d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b5:68:06:d3:f0:0e:97:4e:26:7b:83:e9:aa:50:03:cd:7c: 56:6a:a0:d2:ed:d6:62:e1:f2:d4:23:8b:96:8b:ab:d1:6c:77: 64:50:a4:55:24:77:b7:05:4a:cf:8c:5b:14:2a:73:2b:65:55: d5:95:6c:a3:99:71:05:11:39:54:69:17:ac:e1:cd:01:ec:2b: a8:1e:be:4c:37:53:ec:d7:5e:e0:ad:43:63:24:68:71:09:8d: a4:86:cc:e3:06:50:d5:c4:17:f2:9f:c9:c1:8e:13:94:da:2e: 07:4d:04:e7:fc:66:da:2d:e2:70:34:57:7d:97:79:df:54:d4: 3d:ab:c7:ea:84:b4:70:89:b9:11:ff:f8:8f:79:c9:9f:2f:3e: 11:1a:1c:c9:17:a7:46:d3:dc:a2:57:4a:e8:4f:f1:27:e4:f9: 9e:93:6c:35:a7:3a:ff:06:88:26:5c:fb:b4:38:44:e6:da:a8: 74:5e:31:45:b0:7e:11:48:77:1c:c8:df:a7:e6:6d:a2:6d:3e: 84:81:50:1f:69:6f:35:cb:a8:67:4e:1a:ed:1d:06:8f:1d:49: e5:d0:bd:38:52:85:dc:f4:11:71:42:85:b5:50:4d:88:e1:03: 2b:b9:c7:01:1d:40:0d:a7:4d:61:c3:2d:fe:e5:dc:0c:7c:cc: b5:b0:1b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrU/3klxCIOA0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MzUzMzgwYTgtNDJkYi00NGFiLWI5ZGItOGNhYzk2ODIwMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFmHjUqeAiiCf7HD/H72lVTlDVx/jUSS+uif Y/NGEWARt7/51THgmyFYWto38dilEtJgpyq/9CwiOIgUuhDJr7g24ywlqBLhUI1w BFDxNyxojyAqBFPiaDgQhibt9O4iDuLuvahhQm/PlqkZkI85Ma+UgFAaueUCHAnx zn4wazLAmgVWqPWrUzb3IgiqNjX2vRHTT0kIsVtdRcElDTwmb/O12nZDVJB4nbv0 mlp/wH8HuKYRFomqd9ctseCaqJAMv1UEL9aexPpH8juslfUKoNgpwoSqAp1XMc8r Ju/gzjOgZq4IqwnQixLVmcGLNY9VKAnKICdmYdtjk7/hLLWE9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdp6/WTkogso5xoKDrM6kzQpNvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvNGY4MzNkZWMtNDllNi0z ODMyLTk0OTMtMjFiMWExMzcxZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF21aAbT8A6XTiZ7g+mqUAPNfFZqoNLt1mLh8tQji5aLq9Fsd2RQpFUk d7cFSs+MWxQqcytlVdWVbKOZcQUROVRpF6zhzQHsK6gevkw3U+zXXuCtQ2MkaHEJ jaSGzOMGUNXEF/KfycGOE5TaLgdNBOf8Ztot4nA0V32Xed9U1D2rx+qEtHCJuRH/ +I95yZ8vPhEaHMkXp0bT3KJXSuhP8Sfk+Z6TbDWnOv8GiCZc+7Q4RObaqHReMUWw fhFIdxzI36fmbaJtPoSBUB9pbzXLqGdOGu0dBo8dSeXQvThShdz0EXFChbVQTYjh Ayu5xwEdQA2nTWHDLf7l3Ax8zLWwGws= -----END CERTIFICATE-----Generated at Mon Jun 30 08:42:07 2025 by rpki-client