$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa File: 8a8acdda-9292-36a3-b876-4a2667d678bc.roa (raw, json) Hash identifier: LSelknUCHYyC7s+PGynHES6YbtbXED2RfscGWUFKYzA= Subject key identifier: A8:56:CB:86:F2:17:74:3D:01:2D:66:D3:2A:65:4B:E8:F0:D2:7C:94 Certificate issuer: /CN=0db67e40-561b-4114-ad6b-0716593573be Certificate serial: 010D0C9F432858497DA46C5A56D55ADF28D68280 Authority key identifier: 35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 54702 IP address blocks: 128.254.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6c:5a:56:d5:5a:df:28:d6:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67e40-561b-4114-ad6b-0716593573be Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=77ec22bb-69cb-4f61-b883-ed5a7afad5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fc:87:9e:5a:d3:90:24:21:95:b3:64:28:4f: 48:db:a8:4b:29:45:62:69:06:63:34:5c:d4:45:0f: cb:d6:36:c9:93:83:84:e3:bf:74:a9:a9:23:a6:18: 9b:6d:d7:ad:b9:ca:53:57:d0:fd:3f:6e:bf:7c:01: 2c:55:90:3a:55:fa:3d:9a:0b:9b:ad:bd:05:b7:3a: 28:c3:d1:d7:4b:5e:a5:0b:68:6e:08:9b:be:17:26: 0b:07:e2:2c:fa:5b:ec:e3:34:b3:2e:e8:f1:b2:06: 47:66:ef:89:e8:72:c0:52:fb:58:8a:d6:a8:75:e3: f8:de:bd:4c:2f:17:08:54:69:6e:80:e3:e7:77:92: b9:92:14:9e:e0:7b:a9:45:0a:e4:ff:c5:b4:43:51: b9:af:b2:ee:3a:5d:a0:ed:1c:ca:4c:6c:a5:93:fb: be:83:70:38:65:4a:16:d0:3d:8f:a3:b1:c8:98:01: 52:96:5d:de:90:ed:f3:49:b6:c0:2a:13:07:f3:e6: 3e:da:85:0a:45:5c:aa:fa:23:c3:ac:00:8c:f4:f6: ca:d0:c3:29:92:3e:35:a0:92:c9:23:ca:f5:e5:e1: f7:8e:fe:49:78:24:96:3b:ea:45:0e:d4:ae:32:ef: 62:2f:77:37:cd:5f:63:ad:16:df:f1:62:39:eb:f3: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:56:CB:86:F2:17:74:3D:01:2D:66:D3:2A:65:4B:E8:F0:D2:7C:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.crl X509v3 Authority Key Identifier: keyid:35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer sbgp-ipAddrBlock: critical IPv4: 128.254.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:b9:3d:4a:45:6d:a7:b2:3a:8f:95:46:b6:12:7f:46:6d:5b: 19:a7:92:7e:34:f1:75:50:be:30:1e:a4:0c:ec:1e:a5:3e:36: ef:00:43:02:4a:b1:dd:c8:7d:92:39:9e:90:10:60:a1:aa:58: 95:50:c4:4c:1e:c5:98:ec:fa:79:77:bb:0f:a6:7e:e8:f2:48: 88:31:38:db:70:b0:52:fd:3f:24:78:5c:65:e9:61:4f:10:6c: 03:6c:b8:e3:3e:e9:e0:1d:01:75:da:dd:a3:9c:f1:fa:1f:b4: 2e:d9:ea:6b:06:c4:a9:0f:b0:da:56:4c:b2:d0:9c:86:f8:34: c8:7c:b5:31:57:5d:df:ca:00:1c:b6:d0:d4:47:f3:ca:cf:c2: 0e:49:d9:f0:ea:88:3b:68:f4:ab:69:8b:bf:c2:bb:cc:30:71: 1c:d1:90:73:49:7e:63:71:58:18:2c:e0:ff:2d:59:b8:ae:7a: 89:d3:f7:49:27:b7:7f:8d:13:75:64:f5:77:01:70:56:16:ed: 54:7e:17:04:7b:15:ce:11:87:36:cf:fe:c0:39:07:1a:13:f6: d9:93:7b:a7:5a:97:7c:f3:c2:09:aa:6d:7d:3d:3a:55:f4:b0: 70:3d:f3:6d:14:29:ee:fc:29:4f:cc:c5:1e:8d:d5:4a:d4:54: 72:e5:35:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pGxaVtVa3yjWgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiNjdlNDAtNTYxYi00MTE0LWFkNmItMDcxNjU5MzU3 M2JlMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzdlYzIyYmItNjljYi00ZjYxLWI4ODMtZWQ1YTdhZmFkNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPyHnlrTkCQhlbNkKE9I26hLKUViaQZjNFzU RQ/L1jbJk4OE4790qakjphibbdetucpTV9D9P26/fAEsVZA6Vfo9mgubrb0Ftzoo w9HXS16lC2huCJu+FyYLB+Is+lvs4zSzLujxsgZHZu+J6HLAUvtYitaodeP43r1M LxcIVGlugOPnd5K5khSe4HupRQrk/8W0Q1G5r7LuOl2g7RzKTGylk/u+g3A4ZUoW 0D2Po7HImAFSll3ekO3zSbbAKhMH8+Y+2oUKRVyq+iPDrACM9PbK0MMpkj41oJLJ I8r15eH3jv5JeCSWO+pFDtSuMu9iL3c3zV9jrRbf8WI56/MEFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhWy4byF3Q9AS1m0yplS+jw0nyUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZGI2 N2U0MC01NjFiLTQxMTQtYWQ2Yi0wNzE2NTkzNTczYmUvOGE4YWNkZGEtOTI5Mi0z NmEzLWI4NzYtNGEyNjY3ZDY3OGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGRiNjdlNDAtNTYxYi00MTE0LWFk NmItMDcxNjU5MzU3M2JlLzBkYjY3ZTQwLTU2MWItNDExNC1hZDZiLTA3MTY1OTM1 NzNiZS5jcmwwHwYDVR0jBBgwFoAUNWXKcOKldVx5Po7/8RyeLWOoR9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZGI2N2U0MC01NjFiLTQxMTQtYWQ2Yi0wNzE2 NTkzNTczYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq5PUpFbaeyOo+VRrYSf0ZtWxmnkn408XVQvjAepAzsHqU+Nu8AQwJK sd3IfZI5npAQYKGqWJVQxEwexZjs+nl3uw+mfujySIgxONtwsFL9PyR4XGXpYU8Q bANsuOM+6eAdAXXa3aOc8foftC7Z6msGxKkPsNpWTLLQnIb4NMh8tTFXXd/KABy2 0NRH88rPwg5J2fDqiDto9Ktpi7/Cu8wwcRzRkHNJfmNxWBgs4P8tWbiueonT90kn t3+NE3Vk9XcBcFYW7VR+FwR7Fc4RhzbP/sA5BxoT9tmTe6dal3zzwgmqbX09OlX0 sHA9820UKe78KU/MxR6N1UrUVHLlNWQ= -----END CERTIFICATE-----Generated at Fri May 9 09:39:37 2025 by rpki-client