$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/903824f4-f423-3cdc-a834-4ec2ad4ef111.roa File: 903824f4-f423-3cdc-a834-4ec2ad4ef111.roa (raw, json) Hash identifier: oU+RQ212KEWQNCPl6SRmbfQDVdWElyH5sr4TUtXKQYY= Subject key identifier: ED:4F:51:B0:94:D2:B5:3A:E1:6A:4F:C2:43:A7:B4:4F:15:F1:35:D4 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6BB348E9138A3B3ADBE40 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/903824f4-f423-3cdc-a834-4ec2ad4ef111.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 21570 IP address blocks: 159.18.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:bb:34:8e:91:38:a3:b3:ad:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=5748efa6-ac0a-451a-b082-31a607063cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4d:84:a7:d1:40:ac:7a:61:9d:00:c0:54:9c: 1b:2d:5e:2e:4e:99:15:bc:18:f3:cc:90:46:c7:5d: 0d:6b:ee:18:3b:90:a7:73:37:26:7f:5b:9f:ee:d5: 8f:7c:99:44:e6:6c:98:23:49:08:e3:fc:8e:5f:64: b5:c5:7c:0b:0a:e0:6c:42:8d:16:e2:de:a5:b4:af: 53:aa:ed:cc:18:60:80:3a:f5:5d:1e:60:10:75:1b: 0d:d1:de:d2:40:93:63:77:01:ce:40:07:20:a5:d6: 9a:80:86:83:2a:12:a5:da:2e:16:ee:86:41:46:ad: 6f:d8:39:94:3c:06:ba:25:39:d3:72:a0:8e:38:3b: 5e:68:5a:ee:af:18:df:58:b2:d1:55:20:d4:80:19: b7:ab:ef:02:a1:65:82:08:04:6e:96:cf:2a:dc:09: 52:bd:ba:69:f6:d9:02:89:53:dd:d5:50:6d:12:2e: 19:c7:0e:ae:00:41:08:98:fc:3a:5a:61:98:d1:29: ed:59:4f:7d:08:95:b1:be:5e:3f:70:4c:86:c9:82: c3:57:b7:1a:9e:6d:ad:d1:50:d8:7e:a1:74:69:a0: 61:b6:6d:a3:cc:f2:59:05:62:a3:46:e8:6a:67:1b: 60:55:a1:c0:b1:51:a5:31:33:89:92:23:7f:ad:9c: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4F:51:B0:94:D2:B5:3A:E1:6A:4F:C2:43:A7:B4:4F:15:F1:35:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/903824f4-f423-3cdc-a834-4ec2ad4ef111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 159.18.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:89:a7:50:13:ef:31:06:5d:c8:7b:2b:c2:81:4a:55:77:5a: 0f:b2:39:79:6c:92:18:a9:d5:9b:25:74:3e:09:3b:e8:fb:0f: 99:f3:66:e3:78:12:c8:fc:81:a6:ac:22:3c:17:f7:32:d7:65: e9:af:a5:4c:cc:bf:c5:07:b0:62:55:74:09:cf:c1:12:47:1e: 21:8c:46:bf:dd:a5:28:a9:26:ac:67:4f:43:a6:b4:86:19:e1: 06:5d:b8:16:2e:31:59:de:a7:da:6c:63:0a:04:e9:bd:d5:ba: d4:94:69:d2:c8:84:06:3d:0c:76:d1:51:f1:ac:24:7d:eb:96: 04:69:33:cd:9e:86:7f:11:ef:f0:64:91:75:5f:de:eb:62:15: 86:44:12:aa:e1:18:3a:eb:b9:b8:7a:32:a9:6d:dc:09:f9:51: 65:b8:7d:82:13:47:a7:49:83:6c:57:7b:a9:5b:c0:dd:50:f1: a9:57:5b:ec:c0:96:f1:76:fc:48:96:d0:86:b4:99:4d:c3:55: 5e:62:7c:dc:1c:1f:8b:81:01:5b:4a:10:89:37:2e:e5:ce:86: 7c:fe:3e:28:03:d7:03:cc:8e:12:49:9b:05:03:67:91:08:63: 92:6d:6e:fc:ac:8c:d4:f7:5e:39:80:02:72:f3:59:37:3d:5a: 69:49:c6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprs0jpE4o7OtvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NTc0OGVmYTYtYWMwYS00NTFhLWIwODItMzFhNjA3MDYzY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7U2Ep9FArHphnQDAVJwbLV4uTpkVvBjzzJBG x10Na+4YO5Cnczcmf1uf7tWPfJlE5myYI0kI4/yOX2S1xXwLCuBsQo0W4t6ltK9T qu3MGGCAOvVdHmAQdRsN0d7SQJNjdwHOQAcgpdaagIaDKhKl2i4W7oZBRq1v2DmU PAa6JTnTcqCOODteaFrurxjfWLLRVSDUgBm3q+8CoWWCCARuls8q3AlSvbpp9tkC iVPd1VBtEi4Zxw6uAEEImPw6WmGY0SntWU99CJWxvl4/cEyGyYLDV7canm2t0VDY fqF0aaBhtm2jzPJZBWKjRuhqZxtgVaHAsVGlMTOJkiN/rZxDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1PUbCU0rU64WpPwkOntE8V8TXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvOTAzODI0ZjQtZjQyMy0z Y2RjLWE4MzQtNGVjMmFkNGVmMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxIGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKJp1AT7zEGXch7K8KBSlV3Wg+yOXlskhip1ZsldD4JO+j7D5nzZuN4 Esj8gaasIjwX9zLXZemvpUzMv8UHsGJVdAnPwRJHHiGMRr/dpSipJqxnT0OmtIYZ 4QZduBYuMVnep9psYwoE6b3VutSUadLIhAY9DHbRUfGsJH3rlgRpM82ehn8R7/Bk kXVf3utiFYZEEqrhGDrrubh6Mqlt3An5UWW4fYITR6dJg2xXe6lbwN1Q8alXW+zA lvF2/EiW0Ia0mU3DVV5ifNwcH4uBAVtKEIk3LuXOhnz+PigD1wPMjhJJmwUDZ5EI Y5JtbvysjNT3XjmAAnLzWTc9WmlJxss= -----END CERTIFICATE-----Generated at Sun Apr 6 20:28:43 2025 by rpki-client