$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/ba1f3747-9264-318a-a209-7cea98135a76.roa File: ba1f3747-9264-318a-a209-7cea98135a76.roa (raw, json) Hash identifier: VX0TCZieLIXTm+s2w/NSaA5OnU2nJiTuqjuIR0v2sT8= Subject key identifier: CC:87:A9:34:12:69:9E:E2:1B:6E:05:8B:8A:C0:11:9D:F2:A9:7E:F8 Certificate issuer: /CN=1b1fd062-f802-4363-ad37-7232f990c625 Certificate serial: 010D0C9F4328584961B63D9A581CAF22D26F2E98 Authority key identifier: D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/ba1f3747-9264-318a-a209-7cea98135a76.roa Signing time: Tue 01 Apr 2025 12:54:26 +0000 ROA not before: Tue 01 Apr 2025 12:54:26 +0000 ROA not after: Mon 30 Jun 2025 12:54:26 +0000 asID: 397593 IP address blocks: 158.51.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b6:3d:9a:58:1c:af:22:d2:6f:2e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fd062-f802-4363-ad37-7232f990c625 Validity Not Before: Apr 1 12:54:26 2025 GMT Not After : Jun 30 12:54:26 2025 GMT Subject: CN=d5179174-04d1-4023-aee2-a7081b9e095a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1a:58:70:fd:36:d1:10:72:de:1b:e5:08:6c: 7d:29:65:b3:0a:20:e7:df:92:cd:2f:43:27:2a:7a: 12:71:ef:a8:54:3c:13:a4:b1:ba:27:3a:da:33:41: 4c:90:19:1d:20:ea:1d:0c:37:f6:3e:8c:83:c6:48: af:a3:4e:2a:3d:c3:07:d5:71:43:cf:49:3c:0b:7d: 6f:41:db:50:e8:d2:4d:58:c4:2b:4f:42:01:6b:b5: 8d:69:78:88:e6:e4:2b:75:19:b5:f4:cf:41:49:7e: ea:0a:9f:bb:ed:cf:94:d6:88:36:fe:0d:dd:04:26: ca:5f:47:6e:50:ce:a2:35:24:65:e4:a8:70:e1:b6: 94:50:7a:19:84:e1:e6:23:e7:e7:93:c7:87:77:a4: f4:97:28:5b:5d:7f:18:0c:58:12:39:28:37:36:08: 3a:91:b4:7a:ce:f2:fb:c1:08:27:09:ad:1f:27:41: 70:09:18:86:7f:77:f8:16:97:47:37:7a:d1:38:27: 36:d2:7f:b9:1f:e9:af:96:b8:2e:9a:6f:1b:55:d5: 50:94:9f:1b:ae:0c:af:bd:00:e2:7f:f4:79:50:98: ef:ef:32:7c:db:a5:c5:96:27:c1:6f:5a:89:22:9b: fe:b1:b4:a3:b9:a2:ea:c3:a5:00:14:b4:bf:a8:27: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:87:A9:34:12:69:9E:E2:1B:6E:05:8B:8A:C0:11:9D:F2:A9:7E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/ba1f3747-9264-318a-a209-7cea98135a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl X509v3 Authority Key Identifier: keyid:D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer sbgp-ipAddrBlock: critical IPv4: 158.51.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b7:d5:f2:eb:a3:c3:91:cf:69:a6:bf:7b:a6:b9:32:57:07: 87:3f:8a:9a:87:68:76:1f:de:00:6c:71:08:ea:52:16:8e:56: 3e:90:60:74:ae:ae:9c:2f:3e:1f:ad:de:9d:6f:59:9d:73:04: 46:2f:32:b3:0f:0e:94:0a:4f:8d:6c:ea:07:91:d9:95:ca:21: 1f:c5:bb:1d:62:69:8f:b1:67:54:ce:7a:1b:23:a1:38:2e:89: 12:22:8c:ea:46:95:c2:8e:14:c5:db:62:da:31:90:3a:61:17: 9d:42:60:b1:eb:94:b8:a4:af:12:50:a1:7c:ce:35:3d:6b:07: d5:0c:b4:0b:85:50:b7:4d:60:04:f1:36:d5:be:b5:6d:62:82: b1:1e:e8:8d:e2:bc:0c:e3:5f:81:16:e9:f2:26:33:8b:96:70: 74:94:8f:74:63:58:a2:50:93:b8:f2:0c:49:a3:04:3a:be:a4: e0:34:86:22:04:ca:bc:f5:a9:d7:f1:8f:cc:2f:67:dc:cc:3c: ce:9a:4a:bf:ec:dd:e5:30:a2:94:37:7e:21:82:82:30:5d:84: 69:82:d4:97:56:5b:21:e3:a2:27:59:fd:f5:9a:2a:a5:09:b9: 4f:36:18:22:86:53:58:82:37:5c:48:c9:0f:d1:92:7b:7f:8a: f8:d0:62:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhtj2aWByvItJvLpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIxZmQwNjItZjgwMi00MzYzLWFkMzctNzIzMmY5OTBj NjI1MB4XDTI1MDQwMTEyNTQyNloXDTI1MDYzMDEyNTQyNlowLzEtMCsGA1UEAxMk ZDUxNzkxNzQtMDRkMS00MDIzLWFlZTItYTcwODFiOWUwOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBpYcP020RBy3hvlCGx9KWWzCiDn35LNL0Mn KnoSce+oVDwTpLG6JzraM0FMkBkdIOodDDf2PoyDxkivo04qPcMH1XFDz0k8C31v QdtQ6NJNWMQrT0IBa7WNaXiI5uQrdRm19M9BSX7qCp+77c+U1og2/g3dBCbKX0du UM6iNSRl5Khw4baUUHoZhOHmI+fnk8eHd6T0lyhbXX8YDFgSOSg3Ngg6kbR6zvL7 wQgnCa0fJ0FwCRiGf3f4FpdHN3rROCc20n+5H+mvlrgumm8bVdVQlJ8brgyvvQDi f/R5UJjv7zJ826XFlifBb1qJIpv+sbSjuaLqw6UAFLS/qCcpWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyHqTQSaZ7iG24Fi4rAEZ3yqX74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYjFm ZDA2Mi1mODAyLTQzNjMtYWQzNy03MjMyZjk5MGM2MjUvYmExZjM3NDctOTI2NC0z MThhLWEyMDktN2NlYTk4MTM1YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWIxZmQwNjItZjgwMi00MzYzLWFk MzctNzIzMmY5OTBjNjI1LzFiMWZkMDYyLWY4MDItNDM2My1hZDM3LTcyMzJmOTkw YzYyNS5jcmwwHwYDVR0jBBgwFoAU0ckB+rgex7N3ArlPQbwFpe2Ue8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYjFmZDA2Mi1mODAyLTQzNjMtYWQzNy03MjMy Zjk5MGM2MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES31fLro8ORz2mmv3umuTJXB4c/ipqHaHYf3gBscQjqUhaOVj6QYHSu rpwvPh+t3p1vWZ1zBEYvMrMPDpQKT41s6geR2ZXKIR/Fux1iaY+xZ1TOehsjoTgu iRIijOpGlcKOFMXbYtoxkDphF51CYLHrlLikrxJQoXzONT1rB9UMtAuFULdNYATx NtW+tW1igrEe6I3ivAzjX4EW6fImM4uWcHSUj3RjWKJQk7jyDEmjBDq+pOA0hiIE yrz1qdfxj8wvZ9zMPM6aSr/s3eUwopQ3fiGCgjBdhGmC1JdWWyHjoidZ/fWaKqUJ uU82GCKGU1iCN1xIyQ/Rknt/ivjQYn8= -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:15 2025 by rpki-client