$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d2a4dd-fb74-3aa1-9e43-b202621da4fc.roa File: f5d2a4dd-fb74-3aa1-9e43-b202621da4fc.roa (raw, json) Hash identifier: WQyIQKXAp8JLOUzk7Y8FM+DI/CoE9uMM5HBH+E7HZK0= Subject key identifier: 63:E9:4E:BB:21:F6:3D:14:41:A7:76:43:71:62:15:38:F5:B5:67:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D0BE96823C11006331100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d2a4dd-fb74-3aa1-9e43-b202621da4fc.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 162.151.41.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:0b:e9:68:23:c1:10:06:33:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=2fd0d273-afea-4229-a361-03b6fd9eb8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:87:85:a5:df:81:7d:8f:a6:93:a8:93:9c:1f: b5:b8:06:f3:09:c7:26:d7:59:1e:1e:e8:b7:0f:be: 17:28:9a:0d:d4:ce:0c:f5:66:6f:20:75:d0:f9:5e: 44:87:1f:c0:f1:5a:39:c3:3d:85:31:06:0a:74:43: d3:23:c8:7e:a2:e1:c8:0a:db:b8:89:12:aa:d5:82: b1:72:18:ef:3c:42:38:e8:92:1f:6c:65:b0:8a:40: 54:ec:6a:6d:fa:70:b4:33:ab:01:88:54:2f:47:60: 2f:23:df:ee:d5:13:77:31:f9:42:45:8d:97:bb:5a: a9:6d:57:03:87:61:8e:53:9d:84:e8:1f:98:db:43: 12:1f:49:c8:29:1e:e5:82:34:bc:0f:5d:62:59:4a: b9:b1:da:58:b8:44:51:2c:c8:9b:36:f1:d6:7e:81: 0b:90:59:63:ed:4d:d6:ff:11:a1:a2:4e:fa:19:a0: a2:e8:ee:d1:e9:67:06:fd:46:75:37:1c:1c:ad:e2: c3:6c:9d:cf:65:15:99:7f:df:b8:3d:eb:26:a3:47: d6:3f:d1:30:e7:30:19:6d:47:7f:c5:d7:a0:9f:07: d0:b8:87:3a:f1:61:d0:8e:c9:a9:f2:7f:e3:18:11: 81:de:57:a7:5b:b7:69:99:21:22:c7:bc:57:30:d1: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:4E:BB:21:F6:3D:14:41:A7:76:43:71:62:15:38:F5:B5:67:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d2a4dd-fb74-3aa1-9e43-b202621da4fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 162.151.41.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:53:c5:f7:85:d4:fd:6b:a4:00:08:bd:9d:05:e1:0f:3e:93: 01:f4:be:d9:23:ca:88:79:07:98:57:ab:8c:e6:9d:a7:1d:1d: 1c:c0:66:50:1c:c2:21:2c:80:83:cc:60:9f:3e:af:64:b9:c7: fa:8e:08:eb:6a:74:a4:e2:28:1e:bf:6b:2c:2b:4f:f9:83:74: 04:fd:69:00:21:f9:54:36:95:4e:68:4f:13:f6:97:a8:e7:bb: 87:e2:fa:ab:6d:3e:a6:61:fe:43:77:ac:9a:78:d7:86:4a:37: 00:3d:5b:b6:23:fb:25:f9:5e:a4:ea:50:45:f7:15:d6:56:73: e5:22:05:19:f6:53:49:98:1c:a7:16:2c:74:48:2f:b6:f9:fa: 82:16:7c:ba:c1:ce:30:22:2b:77:74:70:be:35:1e:17:10:c9: 97:90:92:97:7d:4e:49:26:28:96:ea:70:a8:03:f6:4f:98:6e: 0b:40:a2:96:da:67:91:3d:de:94:52:fd:c2:8a:80:3b:d7:00: b7:07:bb:38:70:9a:6f:eb:ac:df:d9:2d:74:34:b6:d5:17:4e: b5:9d:ad:d3:cd:fb:02:3e:24:18:7a:ea:fb:8f:3a:13:ba:5e: 0a:fe:78:cf:5f:6a:68:48:72:5e:ef:25:7a:77:82:b9:0d:99: a7:99:c3:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiebQvpaCPBEAYzEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MmZkMGQyNzMtYWZlYS00MjI5LWEzNjEtMDNiNmZkOWViOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IeFpd+BfY+mk6iTnB+1uAbzCccm11keHui3 D74XKJoN1M4M9WZvIHXQ+V5Ehx/A8Vo5wz2FMQYKdEPTI8h+ouHICtu4iRKq1YKx chjvPEI46JIfbGWwikBU7Gpt+nC0M6sBiFQvR2AvI9/u1RN3MflCRY2Xu1qpbVcD h2GOU52E6B+Y20MSH0nIKR7lgjS8D11iWUq5sdpYuERRLMibNvHWfoELkFlj7U3W /xGhok76GaCi6O7R6WcG/UZ1NxwcreLDbJ3PZRWZf9+4Pesmo0fWP9Ew5zAZbUd/ xdegnwfQuIc68WHQjsmp8n/jGBGB3lenW7dpmSEix7xXMNHXbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGPpTrsh9j0UQad2Q3FiFTj1tWdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjVkMmE0ZGQtZmI3NC0z YWExLTllNDMtYjIwMjYyMWRhNGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHopcpgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArU8X3hdT9a6QACL2dBeEPPpMB9L7ZI8qIeQeYV6uM5p2nHR0cwGZQ HMIhLICDzGCfPq9kucf6jgjranSk4igev2ssK0/5g3QE/WkAIflUNpVOaE8T9peo 57uH4vqrbT6mYf5Dd6yaeNeGSjcAPVu2I/sl+V6k6lBF9xXWVnPlIgUZ9lNJmByn Fix0SC+2+fqCFny6wc4wIit3dHC+NR4XEMmXkJKXfU5JJiiW6nCoA/ZPmG4LQKKW 2meRPd6UUv3CioA71wC3B7s4cJpv66zf2S10NLbVF061na3TzfsCPiQYeur7jzoT ul4K/njPX2poSHJe7yV6d4K5DZmnmcNf -----END CERTIFICATE-----Generated at Mon Apr 7 09:36:03 2025 by rpki-client