$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/54e67212-03e1-31e9-a509-391456ce51e8.roa File: 54e67212-03e1-31e9-a509-391456ce51e8.roa (raw, json) Hash identifier: 7Fxskw+TBburIkxWyEvIzxX0F7cX8YlEehpONtBDbZA= Subject key identifier: D4:9C:E7:16:94:7F:81:8C:F8:FA:CF:30:B7:34:28:84:BF:50:B3:45 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F432858494E2EABA0C400E76D4F4D6200 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/54e67212-03e1-31e9-a509-391456ce51e8.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 18434 IP address blocks: 156.55.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ab:a0:c4:00:e7:6d:4f:4d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=3cfa75ff-9494-4b41-978f-1971e90d90ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:0d:c3:1b:9f:72:2e:60:44:0c:7a:3d:d7: 71:62:4b:75:3d:af:e2:8c:d0:8b:a0:b1:ba:03:a0: c3:a9:a9:04:a8:e1:0b:f5:d0:32:df:38:6e:ca:32: 35:66:6b:6a:72:af:b3:a6:0a:74:e4:99:cc:50:fb: e3:b8:08:b1:e3:08:d0:01:2b:aa:4a:e4:4d:05:42: 31:45:17:59:be:6c:ad:cb:de:2f:aa:73:61:02:43: 11:27:e5:2f:1a:05:82:c4:15:ae:74:b3:05:a4:2a: 4e:b8:bd:6e:38:9f:55:2d:23:05:11:b5:8c:38:1b: 4d:bf:cd:d0:81:a8:a1:39:c7:c3:5e:3f:ba:de:2b: e7:95:ec:a1:23:15:79:54:6c:4f:14:4a:a8:c3:55: bd:06:21:fc:f5:4e:90:ed:4d:bb:bf:af:b5:d0:03: 35:9e:89:cf:ae:e2:5f:16:2c:1d:38:68:01:fe:cc: a6:e9:17:89:74:f8:7d:63:0f:1b:74:c7:f4:61:88: 3a:37:8e:ae:0c:9d:4c:92:28:b8:84:e9:b6:84:b7: a4:c7:89:43:86:f7:63:84:62:da:ec:0a:0d:7d:81: f7:8a:ef:00:b6:25:56:e8:82:ef:81:54:c1:fc:33: 3c:77:51:98:91:72:f8:c8:c9:f6:eb:96:c0:d0:e0: 72:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9C:E7:16:94:7F:81:8C:F8:FA:CF:30:B7:34:28:84:BF:50:B3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/54e67212-03e1-31e9-a509-391456ce51e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 156.55.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8a:ed:e5:0f:9e:9a:ec:48:eb:38:ac:65:e0:2f:ca:b1:57: bf:32:d8:8f:22:27:c9:91:aa:24:03:7c:89:2b:07:58:04:23: c7:be:e4:da:f9:f6:c0:32:29:02:39:29:2d:cf:37:e8:5b:e7: 27:7f:45:50:3b:5f:ae:d2:c8:22:88:70:87:e5:52:db:06:19: 6e:6a:61:c6:a3:3b:40:59:68:a9:42:71:0b:c2:41:50:57:b2: ee:87:d4:f6:b9:2a:c2:6b:22:36:69:8e:4a:92:dc:e6:de:ba: 4a:d4:a7:0e:de:11:ac:03:fb:0e:eb:10:80:fb:be:c1:91:7e: 39:43:46:f3:9e:9e:03:52:13:79:6b:96:aa:82:5c:8c:8c:06: 35:3e:a5:cd:4a:c1:91:bd:13:a8:5e:f8:28:fd:54:5b:4c:86: f1:54:8b:1e:d3:eb:39:50:13:90:69:bd:79:39:13:1d:10:ae: ed:bb:00:03:62:c6:0b:dc:62:a4:51:c8:5a:58:81:2d:39:6d: 46:00:75:87:f6:bc:2c:87:c4:a8:63:33:15:ae:5c:4f:a1:23: ed:11:63:b7:ee:5d:6b:84:5a:60:5c:c2:69:6c:f4:dd:db:61: cf:31:6e:3a:5f:03:d0:48:f6:e5:b6:0d:d7:e7:41:08:6c:65: 79:bb:78:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLqugxADnbU9NYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk M2NmYTc1ZmYtOTQ5NC00YjQxLTk3OGYtMTk3MWU5MGQ5MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr54Nwxufci5gRAx6PddxYkt1Pa/ijNCLoLG6 A6DDqakEqOEL9dAy3zhuyjI1Zmtqcq+zpgp05JnMUPvjuAix4wjQASuqSuRNBUIx RRdZvmyty94vqnNhAkMRJ+UvGgWCxBWudLMFpCpOuL1uOJ9VLSMFEbWMOBtNv83Q gaihOcfDXj+63ivnleyhIxV5VGxPFEqow1W9BiH89U6Q7U27v6+10AM1nonPruJf FiwdOGgB/sym6ReJdPh9Yw8bdMf0YYg6N46uDJ1Mkii4hOm2hLekx4lDhvdjhGLa 7AoNfYH3iu8AtiVW6ILvgVTB/DM8d1GYkXL4yMn265bA0OBy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSc5xaUf4GM+PrPMLc0KIS/ULNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvNTRlNjcyMTItMDNlMS0z MWU5LWE1MDktMzkxNDU2Y2U1MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnDerMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiK7eUPnprsSOs4rGXgL8qxV78y2I8iJ8mRqiQDfIkrB1gEI8e+5Nr5 9sAyKQI5KS3PN+hb5yd/RVA7X67SyCKIcIflUtsGGW5qYcajO0BZaKlCcQvCQVBX su6H1Pa5KsJrIjZpjkqS3ObeukrUpw7eEawD+w7rEID7vsGRfjlDRvOengNSE3lr lqqCXIyMBjU+pc1KwZG9E6he+Cj9VFtMhvFUix7T6zlQE5BpvXk5Ex0Qru27AANi xgvcYqRRyFpYgS05bUYAdYf2vCyHxKhjMxWuXE+hI+0RY7fuXWuEWmBcwmls9N3b Yc8xbjpfA9BI9uW2DdfnQQhsZXm7eGM= -----END CERTIFICATE-----Generated at Fri Apr 11 21:29:55 2025 by rpki-client