$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa File: fc8d790d-3854-30a3-ac52-4854a52b7835.roa (raw, json) Hash identifier: KCBz/eql6a3AIB/7tceSh+iWzjS8xo0xkYQUagcV+cE= Subject key identifier: 71:63:65:11:FD:87:39:B4:45:BC:3D:C7:72:05:6B:A7:63:1D:EA:87 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285849393E70490F240F82B21DC380 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 18434 IP address blocks: 156.55.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:70:49:0f:24:0f:82:b2:1d:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=cdf73af0-a7f9-4ce3-b3b4-750c0ac1dc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:8b:a3:d2:91:06:1c:c9:8d:a8:bb:b7:d3: b2:40:e6:0e:b2:d2:56:ee:75:f7:08:71:8c:db:1d: b2:64:02:b7:d5:0d:7d:67:53:f3:e5:4d:26:33:74: 58:d0:e1:a3:60:3a:fd:a3:41:41:73:e8:50:41:a3: a9:98:ca:0f:cd:19:25:99:e9:54:e7:84:e2:12:b2: da:b7:e6:5d:7e:18:15:61:b0:d4:20:4a:77:bd:e8: 38:d9:b2:15:8b:b0:b8:e9:3e:e7:95:2e:c7:91:28: 9f:fc:c8:24:18:49:c0:f4:08:1e:4c:3e:2e:35:10: 08:f6:fe:79:13:19:ad:c7:b9:6f:92:79:fc:a6:e8: 1b:36:75:95:1e:f2:50:f6:c0:07:fa:3c:56:a5:f9: f0:55:75:fe:48:40:19:ab:5c:cb:91:54:f5:d6:c2: e8:b5:a0:4a:42:57:41:d4:78:52:47:ba:a4:59:48: c9:dd:35:6e:30:c5:9f:ce:14:0e:51:f8:59:e5:04: 1e:d9:cb:26:eb:67:87:e8:47:c2:95:89:7a:c0:95: 25:70:f3:d1:d1:29:c7:f1:8b:f7:1b:3f:09:97:ee: 55:cb:2d:c3:71:8d:5a:48:11:a6:d8:d4:fb:1b:0f: 83:94:16:b5:89:c6:87:35:49:65:38:a6:40:87:e3: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:63:65:11:FD:87:39:B4:45:BC:3D:C7:72:05:6B:A7:63:1D:EA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 156.55.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:66:aa:ba:c7:27:0a:89:b6:d1:37:d2:a0:70:4c:db:54:31: ae:af:c7:00:1e:45:8c:9a:ba:0e:31:e3:be:1b:24:ec:f1:d9: bc:ee:89:1d:c1:f6:c0:04:0d:e2:4b:d2:8f:e2:9b:a7:68:fc: 97:33:4b:52:af:3c:07:65:1c:9c:da:44:ba:a6:10:eb:59:ef: be:56:3a:34:9b:15:fc:51:d8:cf:2c:3a:99:8d:92:22:e3:9e: 48:5e:11:7b:fa:83:7f:3f:46:db:36:b9:a6:07:ab:9d:56:6e: cc:d4:8a:80:89:e9:f7:08:71:76:c2:a6:b1:91:fc:cc:ec:67: d1:ad:08:d5:91:63:8f:21:53:ba:bc:37:1e:04:6e:26:85:1d: de:6f:e1:b7:a4:8c:c0:66:12:53:f0:84:45:5a:2c:92:85:8a: 52:6e:5a:e1:3d:e5:f7:a9:3a:28:ec:39:05:af:27:d5:da:39: a4:ab:ec:99:9d:14:b4:77:88:2a:6e:be:fc:7a:97:be:59:b2: 7e:53:dc:3f:81:43:50:1f:fb:3a:78:3c:35:b2:7d:cd:04:95: 0d:9a:46:56:af:46:82:6b:4f:d1:36:5f:8d:17:a7:1d:42:bb: 0d:af:75:d3:68:b2:c7:86:46:15:89:57:cc:e1:1d:ea:2e:9a: 34:b1:9b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnBJDyQPgrIdw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk Y2RmNzNhZjAtYTdmOS00Y2UzLWIzYjQtNzUwYzBhYzFkYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs+Lo9KRBhzJjai7t9OyQOYOstJW7nX3CHGM 2x2yZAK31Q19Z1Pz5U0mM3RY0OGjYDr9o0FBc+hQQaOpmMoPzRklmelU54TiErLa t+ZdfhgVYbDUIEp3veg42bIVi7C46T7nlS7HkSif/MgkGEnA9AgeTD4uNRAI9v55 Exmtx7lvknn8pugbNnWVHvJQ9sAH+jxWpfnwVXX+SEAZq1zLkVT11sLotaBKQldB 1HhSR7qkWUjJ3TVuMMWfzhQOUfhZ5QQe2csm62eH6EfClYl6wJUlcPPR0SnH8Yv3 Gz8Jl+5Vyy3DcY1aSBGm2NT7Gw+DlBa1icaHNUllOKZAh+NwlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFjZRH9hzm0Rbw9x3IFa6djHeqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZmM4ZDc5MGQtMzg1NC0z MGEzLWFjNTItNDg1NGE1MmI3ODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnDdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNmqrrHJwqJttE30qBwTNtUMa6vxwAeRYyaug4x474bJOzx2bzuiR3B 9sAEDeJL0o/im6do/JczS1KvPAdlHJzaRLqmEOtZ775WOjSbFfxR2M8sOpmNkiLj nkheEXv6g38/Rts2uaYHq51WbszUioCJ6fcIcXbCprGR/MzsZ9GtCNWRY48hU7q8 Nx4EbiaFHd5v4bekjMBmElPwhEVaLJKFilJuWuE95fepOijsOQWvJ9XaOaSr7Jmd FLR3iCpuvvx6l75Zsn5T3D+BQ1Af+zp4PDWyfc0ElQ2aRlavRoJrT9E2X40Xpx1C uw2vddNosseGRhWJV8zhHeoumjSxmzo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:13:31 2025 by rpki-client