$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa File: 5b896e6e-578e-3e6a-a229-c85a29386919.roa (raw, json) Hash identifier: Il7DCuG9M0YRrKcwazM8Tt28jOYVulEOgxdDvQW3RSc= Subject key identifier: B3:70:AE:7F:66:E6:60:84:B6:46:5F:D9:96:08:36:B8:53:CC:00:21 Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F432858484945686D2313AE8877FBC8C0 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 14618 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:68:6d:23:13:ae:88:77:fb:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=be03d1e7-eec0-4d92-a740-3e3312624f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:ad:2c:e9:c1:2e:67:c3:d0:8c:0a:c1:76: 03:87:91:30:be:5e:d9:44:76:62:84:e2:3c:e2:3e: 0c:5f:82:86:e3:63:c7:93:8e:0a:c0:00:3f:a6:d3: 1a:00:16:d0:9c:94:e1:e2:69:b8:6c:52:49:af:b0: d3:60:9a:6f:66:b6:0a:2e:ff:eb:36:17:34:62:dc: db:be:fd:71:52:d8:ae:3f:39:12:ae:52:4e:06:ff: a5:21:d6:a8:51:2a:c7:25:cf:02:4d:ac:29:f0:77: db:f1:34:23:74:45:e0:6f:60:52:cd:67:9e:b4:c5: 95:3d:f0:10:d1:0c:5e:b2:6a:92:57:bd:fb:df:0e: 3e:ea:2e:6c:23:c4:9f:17:d5:0e:04:0b:1f:6b:c7: cc:0b:33:4d:61:af:fe:b8:2b:1c:24:7e:00:27:2f: 5d:e3:28:46:ce:6c:2d:cb:0a:41:84:5e:93:13:97: 5c:bf:cf:bb:35:23:c2:57:e5:29:f9:0b:f9:7c:bc: 25:b7:c6:78:77:4e:fc:f5:24:b6:3b:c6:1c:ae:fa: 2b:53:5c:48:11:e7:a5:e6:d7:8c:55:8d:e4:98:f9: c7:bf:d9:e0:a4:af:22:c8:03:38:da:96:3f:16:1e: e7:80:d4:c1:64:18:5a:71:74:38:22:1a:e5:4e:67: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:70:AE:7F:66:E6:60:84:B6:46:5F:D9:96:08:36:B8:53:CC:00:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e0:41:34:cd:0b:c8:3f:8d:4e:03:87:59:4d:c8:72:47:29: 45:27:67:35:2a:2f:08:f3:7f:12:5e:ba:df:c1:f6:6d:33:d1: 30:ff:46:be:7f:fd:28:da:3e:21:04:d6:99:bd:9d:b7:3d:f5: 1e:50:b8:58:03:48:fe:b2:c1:32:d4:7a:72:02:07:11:d2:57: 64:a0:34:3f:64:a5:c2:06:d9:41:2a:33:03:4a:2d:ae:4c:a1: c4:5c:8c:0c:8c:86:17:a3:44:fd:c9:a0:6c:dd:af:ad:8f:15: 22:77:fd:c5:e5:e1:34:42:77:4e:66:99:3f:23:ad:59:9e:de: 99:da:17:e5:36:97:84:5c:61:ff:8b:4d:05:bb:08:e8:a0:03: a4:d5:71:dd:85:98:0c:37:f0:1f:d3:bc:19:28:33:c8:56:9c: db:bd:a1:ac:f4:ef:ad:9b:68:97:71:2b:f7:60:6b:bb:20:fb: 10:e9:92:16:4f:b0:73:47:ca:87:45:a8:b9:aa:ee:ce:8e:66: 24:ad:df:47:df:be:fb:41:85:8d:47:2b:cf:73:15:60:13:9a: bf:5a:38:e8:08:0d:55:50:20:42:8e:a4:41:73:a3:d9:68:25: 2d:c7:54:aa:0f:25:16:ca:10:57:8c:e0:61:e8:36:66:21:9f: 29:bf:de:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRWhtIxOuiHf7yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk YmUwM2QxZTctZWVjMC00ZDkyLWE3NDAtM2UzMzEyNjI0ZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3WtLOnBLmfD0IwKwXYDh5Ewvl7ZRHZihOI8 4j4MX4KG42PHk44KwAA/ptMaABbQnJTh4mm4bFJJr7DTYJpvZrYKLv/rNhc0Ytzb vv1xUtiuPzkSrlJOBv+lIdaoUSrHJc8CTawp8Hfb8TQjdEXgb2BSzWeetMWVPfAQ 0QxesmqSV7373w4+6i5sI8SfF9UOBAsfa8fMCzNNYa/+uCscJH4AJy9d4yhGzmwt ywpBhF6TE5dcv8+7NSPCV+Up+Qv5fLwlt8Z4d0789SS2O8YcrvorU1xIEeel5teM VY3kmPnHv9ngpK8iyAM42pY/Fh7ngNTBZBhacXQ4IhrlTmcfSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNwrn9m5mCEtkZf2ZYINrhTzAAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvNWI4OTZlNmUtNTc4ZS0z ZTZhLWEyMjktYzg1YTI5Mzg2OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbgQTTNC8g/jU4Dh1lNyHJHKUUnZzUqLwjzfxJeut/B9m0z0TD/Rr5/ /SjaPiEE1pm9nbc99R5QuFgDSP6ywTLUenICBxHSV2SgND9kpcIG2UEqMwNKLa5M ocRcjAyMhhejRP3JoGzdr62PFSJ3/cXl4TRCd05mmT8jrVme3pnaF+U2l4RcYf+L TQW7COigA6TVcd2FmAw38B/TvBkoM8hWnNu9oaz0762baJdxK/dga7sg+xDpkhZP sHNHyodFqLmq7s6OZiSt30ffvvtBhY1HK89zFWATmr9aOOgIDVVQIEKOpEFzo9lo JS3HVKoPJRbKEFeM4GHoNmYhnym/3k0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:06 2025 by rpki-client