$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa File: a936f59c-530b-3701-8514-dcc669422914.roa (raw, json) Hash identifier: WfklgkOIk+GxUkTJYgCGuGjJRyNenEVYOgtDFJCwAFw= Subject key identifier: 2D:F5:C1:E3:E5:53:CE:8D:B8:E7:28:B4:F3:BD:F4:9E:56:6C:80:4D Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F432858490E16C8496EED61319A019570 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 1448 IP address blocks: 156.146.128.0/18 maxlen: 18 156.146.192.0/20 maxlen: 20 156.146.208.0/20 maxlen: 20 156.146.224.0/19 maxlen: 19 158.41.128.0/19 maxlen: 19 158.41.160.0/20 maxlen: 20 158.41.176.0/21 maxlen: 21 158.41.184.0/21 maxlen: 21 158.41.192.0/20 maxlen: 20 158.41.208.0/20 maxlen: 20 158.41.224.0/20 maxlen: 20 158.41.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c8:49:6e:ed:61:31:9a:01:95:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=3c79f5e0-2131-4c3b-9936-e2a39c0f8f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:fd:d0:ec:68:60:6b:40:e1:03:a4:cb:31: 35:5d:5e:7d:38:7e:d2:0b:0f:3f:65:e5:6e:ee:fa: 3b:e5:d6:33:c9:e9:f4:33:03:8e:0c:95:7b:89:66: d5:6f:14:20:96:4b:83:df:c2:44:71:3c:cf:90:cb: 39:62:0a:2c:1d:6a:52:5c:96:fd:f6:99:e1:ed:23: 3a:ab:e0:7a:ae:77:f1:6e:26:47:75:56:98:66:ed: 78:43:ec:a1:1b:23:1c:72:5e:73:56:3c:c9:e9:07: 4a:6b:ae:a2:ef:d2:97:dd:d1:70:01:69:27:a9:8d: bc:64:bb:40:d9:73:b0:f1:8a:aa:5c:22:fb:d6:36: 9d:85:2f:9b:df:55:63:77:1d:03:b1:26:7e:74:97: 17:bf:f1:26:9c:9c:c6:49:4d:d5:da:b7:a2:7f:a1: b4:7e:72:0e:55:59:f5:33:97:33:87:5f:95:42:40: 64:92:90:84:d8:1d:47:fe:30:4d:a4:83:95:ef:ba: 14:93:a9:c0:9e:64:76:52:75:99:54:bd:6f:ab:cf: 71:eb:6a:05:30:24:19:89:99:b4:b1:c6:8d:6f:bc: eb:0d:89:92:97:43:0a:c4:cd:c4:3c:c0:51:02:7a: 8b:64:b5:db:6d:50:85:12:6e:b0:c3:ab:fd:32:b5: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F5:C1:E3:E5:53:CE:8D:B8:E7:28:B4:F3:BD:F4:9E:56:6C:80:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:17:61:f0:cb:42:66:de:c3:d4:5f:2d:63:e2:b1:55:79:7f: c5:ef:14:4c:b7:cb:d1:e0:1d:db:6a:aa:be:96:51:57:1e:ac: 6f:f2:f9:d7:b5:47:b5:e6:69:ce:51:36:f7:e5:2f:d2:9d:f0: 19:a9:39:06:71:21:bc:1b:4f:61:42:e5:04:66:e6:d3:53:f6: 96:fe:7d:83:d2:ce:05:d6:c7:71:fa:77:8b:36:c7:69:00:64: d1:95:d1:e9:f1:b0:c6:f3:1c:83:83:8b:87:fc:6e:d8:b3:59: c8:d8:10:ee:dd:98:77:17:3f:fc:16:42:0a:ff:f5:f8:34:fd: a1:4a:73:86:73:9a:8b:04:81:5c:61:b6:62:4a:c1:58:c1:0e: 6f:79:d8:db:83:28:2e:ff:2e:9d:42:22:32:93:8b:a5:14:2d: 7a:2f:f1:f8:4e:1b:37:48:34:5e:89:76:00:3d:17:c3:73:90: ed:89:ae:c2:3a:16:91:01:0b:fb:64:3c:86:ca:2f:55:c0:3e: b4:7e:f0:e0:7b:4a:68:ff:eb:f8:a5:1b:64:31:70:03:cb:47: 0a:8e:0d:86:fc:37:19:fa:71:5f:50:2b:64:40:b7:cf:ed:59: 92:70:b2:ac:41:b5:ac:d1:a1:9e:9d:6e:b0:ff:e0:b1:7b:38: 7c:80:ae:3d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkOFshJbu1hMZoBlXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk M2M3OWY1ZTAtMjEzMS00YzNiLTk5MzYtZTJhMzljMGY4Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ/90OxoYGtA4QOkyzE1XV59OH7SCw8/ZeVu 7vo75dYzyen0MwOODJV7iWbVbxQglkuD38JEcTzPkMs5YgosHWpSXJb99pnh7SM6 q+B6rnfxbiZHdVaYZu14Q+yhGyMccl5zVjzJ6QdKa66i79KX3dFwAWknqY28ZLtA 2XOw8YqqXCL71jadhS+b31Vjdx0DsSZ+dJcXv/EmnJzGSU3V2reif6G0fnIOVVn1 M5czh1+VQkBkkpCE2B1H/jBNpIOV77oUk6nAnmR2UnWZVL1vq89x62oFMCQZiZm0 scaNb7zrDYmSl0MKxM3EPMBRAnqLZLXbbVCFEm6ww6v9MrVS8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC31wePlU86NuOcotPO99J5WbIBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTkzNmY1OWMtNTMwYi0z NzAxLTg1MTQtZGNjNjY5NDIyOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIkXYfDLQmbew9RfLWPisVV5f8XvFEy3y9HgHdtqqr6WUVce rG/y+de1R7Xmac5RNvflL9Kd8BmpOQZxIbwbT2FC5QRm5tNT9pb+fYPSzgXWx3H6 d4s2x2kAZNGV0enxsMbzHIODi4f8btizWcjYEO7dmHcXP/wWQgr/9fg0/aFKc4Zz mosEgVxhtmJKwVjBDm952NuDKC7/Lp1CIjKTi6UULXov8fhOGzdINF6JdgA9F8Nz kO2JrsI6FpEBC/tkPIbKL1XAPrR+8OB7Smj/6/ilG2QxcAPLRwqODYb8Nxn6cV9Q K2RAt8/tWZJwsqxBtazRoZ6dbrD/4LF7OHyArj0= -----END CERTIFICATE-----Generated at Sat Apr 5 12:44:33 2025 by rpki-client