$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3c613724-b5b7-3c79-a02c-0e97c721f97d.roa File: 3c613724-b5b7-3c79-a02c-0e97c721f97d.roa (raw, json) Hash identifier: sSNFXyTLn1BHWNv38fAq/B3PGLdSPAbqnygF4ls4RXs= Subject key identifier: 33:A7:A1:37:C1:9C:04:19:D7:F2:48:5E:16:41:19:AE:78:E9:67:97 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D19D82295EC89E08720F80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3c613724-b5b7-3c79-a02c-0e97c721f97d.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 23200 IP address blocks: 159.56.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:9d:82:29:5e:c8:9e:08:72:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=a1f7939c-97dc-44a2-bc52-85545b8a63d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:02:03:09:eb:93:14:03:f3:3d:6e:87:3c: 76:a8:71:04:fa:b7:0f:be:38:f9:d0:e7:8d:ff:46: c8:2c:21:b4:45:21:ad:59:85:02:2d:ea:d9:18:3e: cf:39:b8:03:3c:a0:d6:5b:b5:0b:6a:82:dd:64:c0: a3:52:56:d0:05:28:5a:bc:42:10:e7:d6:1d:5e:e7: 33:e4:fb:84:0b:de:6f:42:f6:8e:dc:62:63:3f:48: 4b:72:ea:c8:5e:58:93:b0:71:37:1e:d5:90:4e:4c: 03:4a:6b:76:8d:a5:45:08:3a:bc:15:6d:46:7b:44: c9:08:77:3d:61:37:3b:b2:eb:f8:cf:62:3f:bf:15: 13:3f:fa:30:dc:85:d3:eb:27:50:4a:35:2b:71:fc: ea:7b:38:d2:e7:db:9b:01:bc:76:c0:b7:a8:34:83: 23:bf:ee:47:d6:5a:cb:55:4f:a9:9b:e2:e2:da:33: 1d:eb:61:8a:cc:40:19:2b:b4:46:a5:58:32:1f:c1: 5e:07:f3:96:85:c9:ab:75:02:c7:30:3b:cc:6b:22: 7a:89:cf:6c:d5:c3:f7:ba:b4:81:1e:ba:0a:3e:69: 22:c2:87:62:d2:d3:92:3b:ca:ed:1b:86:7f:ae:87: 56:56:ed:34:d9:c0:f5:8f:36:35:23:a7:24:86:bd: f3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A7:A1:37:C1:9C:04:19:D7:F2:48:5E:16:41:19:AE:78:E9:67:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3c613724-b5b7-3c79-a02c-0e97c721f97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.56.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:8c:18:a5:21:8d:1b:73:41:c1:0f:6e:0d:65:71:b8:8a:aa: 27:8f:2a:0a:be:84:ad:11:fd:13:72:92:52:6d:38:bd:f1:59: 4e:8e:02:c5:f2:36:7c:df:6d:55:2e:04:8c:0b:8a:74:3d:a9: 15:2e:c6:4c:17:b1:49:13:c5:5d:70:c2:58:38:fa:f1:ea:86: 65:4d:fa:05:ab:73:4a:08:1e:61:c3:a4:14:b2:c9:c4:13:b2: 86:49:1f:58:1e:c4:c4:4c:cf:89:0e:00:ad:db:a0:42:0c:d6: 2d:b4:af:68:91:63:df:33:77:36:a4:d9:5d:de:86:42:01:65: cc:92:ae:c8:2f:7a:a2:95:2a:33:b9:11:65:ca:c7:2b:62:81: f7:a4:30:e7:e2:23:2b:1f:31:cb:85:87:98:3b:b4:06:34:c8: 1f:2c:39:db:4d:9f:00:e1:db:c6:91:34:87:51:88:89:9b:75: 81:19:45:d9:5d:78:3e:35:83:bb:cb:46:1e:e8:5b:00:64:17: 7e:26:5d:f1:05:09:96:28:f7:c5:ca:a1:13:21:13:7f:2a:1b: 39:e9:db:4d:51:a4:78:4e:42:1f:7d:9a:71:ca:c2:cb:40:56: c8:c8:4e:e8:f1:59:2a:78:4d:4d:b5:de:92:72:fa:80:ee:f9: f5:ec:39:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Z2CKV7InghyD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YTFmNzkzOWMtOTdkYy00NGEyLWJjNTItODU1NDViOGE2M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAcCAwnrkxQD8z1uhzx2qHEE+rcPvjj50OeN /0bILCG0RSGtWYUCLerZGD7PObgDPKDWW7ULaoLdZMCjUlbQBShavEIQ59YdXucz 5PuEC95vQvaO3GJjP0hLcurIXliTsHE3HtWQTkwDSmt2jaVFCDq8FW1Ge0TJCHc9 YTc7suv4z2I/vxUTP/ow3IXT6ydQSjUrcfzqezjS59ubAbx2wLeoNIMjv+5H1lrL VU+pm+Li2jMd62GKzEAZK7RGpVgyH8FeB/OWhcmrdQLHMDvMayJ6ic9s1cP3urSB HroKPmkiwodi0tOSO8rtG4Z/rodWVu002cD1jzY1I6ckhr3zywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOnoTfBnAQZ1/JIXhZBGa546WeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2M2MTM3MjQtYjViNy0z Yzc5LWEwMmMtMGU5N2M3MjFmOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnziQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCMGKUhjRtzQcEPbg1lcbiKqiePKgq+hK0R/RNyklJtOL3xWU6OAsXy NnzfbVUuBIwLinQ9qRUuxkwXsUkTxV1wwlg4+vHqhmVN+gWrc0oIHmHDpBSyycQT soZJH1gexMRMz4kOAK3boEIM1i20r2iRY98zdzak2V3ehkIBZcySrsgveqKVKjO5 EWXKxytigfekMOfiIysfMcuFh5g7tAY0yB8sOdtNnwDh28aRNIdRiImbdYEZRdld eD41g7vLRh7oWwBkF34mXfEFCZYo98XKoRMhE38qGznp201RpHhOQh99mnHKwstA VsjITujxWSp4TU213pJy+oDu+fXsOes= -----END CERTIFICATE-----Generated at Sun Apr 6 22:42:47 2025 by rpki-client