$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa File: cc642cc8-e962-3e0e-9fd3-b811e41de541.roa (raw, json) Hash identifier: 6ByIPss8qY2VORQ0oaIRiR9OVT1/3uzK/iBj/a+1ZWs= Subject key identifier: 67:2B:77:9A:D9:02:7C:F9:A3:3E:26:78:C8:DC:7B:22:4F:B1:E1:70 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285848CAF3E03495B0ADDDC6356100 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa Signing time: Thu 06 Feb 2025 12:51:33 +0000 ROA not before: Thu 06 Feb 2025 12:51:33 +0000 ROA not after: Wed 07 May 2025 11:51:33 +0000 asID: 16509 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ca:f3:e0:34:95:b0:ad:dd:c6:35:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Feb 6 12:51:33 2025 GMT Not After : May 7 11:51:33 2025 GMT Subject: CN=75c94190-d5f3-40ba-b97a-2a6a504deacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:7d:ec:a5:ca:47:57:1f:5e:84:d7:9f:1c: a3:65:01:ac:18:37:e6:3a:46:89:de:22:ba:9f:bb: 7a:f9:71:fb:2d:48:cf:0b:83:24:f7:a1:e7:8f:33: 12:a2:8a:05:43:99:c3:48:59:25:0d:a3:d0:7f:42: 11:9e:2a:4b:b5:20:68:3d:ad:16:84:27:95:dc:77: 68:74:cb:6e:3f:9c:a3:6d:68:1f:88:a2:e5:73:b1: 71:81:5f:f0:b0:5c:2f:65:03:78:3b:25:55:81:9f: 15:a9:f5:97:e2:6f:50:b0:12:52:72:7e:e8:74:8a: 01:e0:fd:47:de:63:ba:68:5e:0e:da:12:8c:b0:e3: dd:8c:4a:cc:c2:0a:33:eb:66:3d:d4:a3:73:36:9f: 00:0a:04:b5:4f:41:5f:f4:e0:75:cf:a4:aa:de:8f: fa:11:63:de:ab:dc:ab:f3:40:36:3c:82:b2:d4:f6: 3b:17:cc:0b:42:22:96:63:0d:1e:a7:5c:f5:49:5a: f0:ae:a8:62:29:f4:a8:6f:64:fe:21:6f:2d:ca:80: 91:b9:05:a1:fb:c1:89:b2:c4:95:a5:2f:55:10:41: 7f:58:73:ca:af:d6:b6:73:f5:11:73:c4:f5:78:2a: ca:57:89:69:2b:fd:11:6a:d0:63:9a:ed:3a:87:29: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2B:77:9A:D9:02:7C:F9:A3:3E:26:78:C8:DC:7B:22:4F:B1:E1:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f3:bf:7e:93:2e:36:33:8d:13:5e:58:a6:40:93:0d:1f:8a: 12:49:42:83:66:1a:1a:c6:df:b3:67:5e:1e:41:c2:1b:2f:34: 06:3a:cc:7a:3d:fa:30:2c:f0:37:78:69:40:f7:ee:c6:05:a8: b2:37:be:c8:da:24:8e:13:a9:80:e1:76:9d:ac:42:70:2d:4a: 3e:98:34:cc:09:ba:84:9a:c3:ac:f9:b2:ea:e8:38:a9:0e:5b: e9:21:c1:ae:44:e7:38:3d:67:f0:2c:cf:73:82:dd:f1:4d:ca: a3:1b:79:5e:0d:95:c5:ff:74:72:7e:71:60:7e:e2:ca:af:42: 5f:53:36:67:dd:39:d3:e2:d5:57:5f:a4:71:eb:0e:81:66:d1: ce:ec:e2:08:0d:1a:d8:89:57:1a:b7:86:43:0d:06:b9:38:b4: 43:4f:2a:4c:50:c0:5b:e2:1c:ad:05:f1:1e:d9:f2:3e:e1:9e: d8:37:da:fc:7e:ef:4a:bb:02:8c:3e:96:91:73:db:b6:48:f3: 8d:47:23:f7:13:ae:5c:b9:d8:df:b7:be:15:00:92:37:aa:ce: 49:54:45:01:16:e5:b0:4a:12:4a:f5:7c:a7:9d:d0:c8:b6:ed: 02:66:2d:3b:ba:8e:f7:c4:89:29:64:ba:c7:a0:f8:89:90:88: 08:e0:51:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjK8+A0lbCt3cY1YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDIwNjEyNTEzM1oXDTI1MDUwNzExNTEzM1owLzEtMCsGA1UEAxMk NzVjOTQxOTAtZDVmMy00MGJhLWI5N2EtMmE2YTUwNGRlYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkV97KXKR1cfXoTXnxyjZQGsGDfmOkaJ3iK6 n7t6+XH7LUjPC4Mk96HnjzMSoooFQ5nDSFklDaPQf0IRnipLtSBoPa0WhCeV3Hdo dMtuP5yjbWgfiKLlc7FxgV/wsFwvZQN4OyVVgZ8VqfWX4m9QsBJScn7odIoB4P1H 3mO6aF4O2hKMsOPdjErMwgoz62Y91KNzNp8ACgS1T0Ff9OB1z6Sq3o/6EWPeq9yr 80A2PIKy1PY7F8wLQiKWYw0ep1z1SVrwrqhiKfSob2T+IW8tyoCRuQWh+8GJssSV pS9VEEF/WHPKr9a2c/URc8T1eCrKV4lpK/0RatBjmu06hykfrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcrd5rZAnz5oz4meMjceyJPseFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2M2NDJjYzgtZTk2Mi0z ZTBlLTlmZDMtYjgxMWU0MWRlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3zv36TLjYzjRNeWKZAkw0fihJJQoNmGhrG37NnXh5BwhsvNAY6zHo9 +jAs8Dd4aUD37sYFqLI3vsjaJI4TqYDhdp2sQnAtSj6YNMwJuoSaw6z5suroOKkO W+khwa5E5zg9Z/Asz3OC3fFNyqMbeV4NlcX/dHJ+cWB+4sqvQl9TNmfdOdPi1Vdf pHHrDoFm0c7s4ggNGtiJVxq3hkMNBrk4tENPKkxQwFviHK0F8R7Z8j7hntg32vx+ 70q7Aow+lpFz27ZI841HI/cTrly52N+3vhUAkjeqzklURQEW5bBKEkr1fKed0Mi2 7QJmLTu6jvfEiSlkuseg+ImQiAjgUew= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:24 2025 by rpki-client