$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa File: 5b896e6e-578e-3e6a-a229-c85a29386919.roa (raw, json) Hash identifier: 7ZrcnUm9B18Y0hVBZSWQfgKamR6MAfwEh75qr68knC4= Subject key identifier: F3:E2:22:93:09:C6:6B:B5:5E:D2:CC:56:C1:6E:BE:5B:B0:FF:DE:B4 Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F43285849287E61C05EDB93590D3D0400 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:61:c0:5e:db:93:59:0d:3d:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=738f6314-846a-4ce0-b5c1-078894356a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:a8:94:bd:b9:4f:7c:45:28:96:5f:f4:00: 8b:15:26:49:e2:f0:18:05:f2:0b:dc:e5:97:12:63: 54:71:7d:fe:7f:ae:6e:c5:a1:51:3b:5d:bf:04:75: e6:93:ef:56:50:44:ef:b6:fc:f3:cc:0e:e9:d3:91: 7c:a7:4a:ca:6c:1e:3d:1b:10:96:2e:51:cb:a0:ff: e9:aa:35:0a:f1:3b:94:c3:8f:00:03:95:79:25:b2: 8b:9e:0b:56:f0:0d:50:a2:b7:99:e7:77:ee:d5:15: 4b:7c:f3:85:7c:25:a3:c1:a3:f0:2a:0b:70:3b:85: 36:05:35:54:6d:cc:70:ca:6e:9a:a2:97:12:3f:75: b0:6b:7f:60:d7:3d:66:9f:bd:b5:a9:9b:c6:2b:11: 1b:a7:da:eb:85:88:95:f7:2c:b4:3e:4e:1b:e6:d2: cb:d3:d7:e1:71:ac:0d:ef:dc:77:70:e2:40:98:fc: 58:e2:d5:c1:17:35:fc:2e:2d:ee:10:ac:d7:d7:38: cc:c6:e0:de:f6:0e:79:19:9e:af:c3:fd:49:8e:9e: fe:7d:9c:07:48:d1:3f:1b:54:e1:6c:8e:84:da:4f: 4c:bc:82:f3:47:1a:24:14:7e:65:0d:f5:94:8a:a8: 6e:ac:fb:85:41:e4:be:73:a3:f3:b7:93:0d:a2:63: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E2:22:93:09:C6:6B:B5:5E:D2:CC:56:C1:6E:BE:5B:B0:FF:DE:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:06:4c:37:e1:ec:92:66:cb:81:7e:14:99:0b:b8:f6:64:2f: d5:d0:e5:32:56:cd:57:54:34:12:0e:cb:c4:e9:87:c9:8c:0c: a2:76:a6:c8:53:ac:2d:d2:7d:d1:ca:b8:1a:b6:58:13:ce:c5: 83:aa:3c:b7:2c:95:12:72:ce:cc:e1:fc:1e:e5:21:6c:da:59: 51:d3:a5:0e:92:e7:ac:13:88:bd:7b:38:92:1b:72:5f:a1:4f: 4b:cd:49:2f:09:c8:49:0c:20:64:7a:fb:8c:6d:e7:28:58:fc: 44:4d:5e:da:da:6b:c1:b0:77:13:d5:3f:28:b1:a5:b5:61:ba: 9c:9e:b6:d9:20:69:40:b2:81:eb:bd:49:55:3d:d2:fb:86:83: c6:f6:e6:57:d9:5e:10:15:f7:0d:4d:56:9f:fb:02:f0:5c:94: 01:50:e9:82:31:9c:16:b3:c9:ce:87:f8:7c:a5:e1:1c:c8:90: c6:0d:66:7e:30:e0:52:b4:f9:c1:8d:12:f8:34:5e:26:b1:cd: 8a:c6:03:f1:77:75:ba:88:58:a9:35:ce:40:85:36:1a:60:9e: 88:61:65:8b:cf:b0:4a:9e:d9:20:b9:82:89:37:22:ef:0e:27: 51:d5:cd:6b:c2:5e:63:ca:06:c7:b0:4a:00:b2:3a:d1:51:96: 13:b7:fb:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmHAXtuTWQ09BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NzM4ZjYzMTQtODQ2YS00Y2UwLWI1YzEtMDc4ODk0MzU2YTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOKolL25T3xFKJZf9ACLFSZJ4vAYBfIL3OWX EmNUcX3+f65uxaFRO12/BHXmk+9WUETvtvzzzA7p05F8p0rKbB49GxCWLlHLoP/p qjUK8TuUw48AA5V5JbKLngtW8A1QoreZ53fu1RVLfPOFfCWjwaPwKgtwO4U2BTVU bcxwym6aopcSP3Wwa39g1z1mn721qZvGKxEbp9rrhYiV9yy0Pk4b5tLL09fhcawN 79x3cOJAmPxY4tXBFzX8Li3uEKzX1zjMxuDe9g55GZ6vw/1Jjp7+fZwHSNE/G1Th bI6E2k9MvILzRxokFH5lDfWUiqhurPuFQeS+c6Pzt5MNomMXjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPiIpMJxmu1XtLMVsFuvluw/960MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvNWI4OTZlNmUtNTc4ZS0z ZTZhLWEyMjktYzg1YTI5Mzg2OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4GTDfh7JJmy4F+FJkLuPZkL9XQ5TJWzVdUNBIOy8Tph8mMDKJ2pshT rC3SfdHKuBq2WBPOxYOqPLcslRJyzszh/B7lIWzaWVHTpQ6S56wTiL17OJIbcl+h T0vNSS8JyEkMIGR6+4xt5yhY/ERNXtraa8GwdxPVPyixpbVhupyettkgaUCygeu9 SVU90vuGg8b25lfZXhAV9w1NVp/7AvBclAFQ6YIxnBazyc6H+Hyl4RzIkMYNZn4w 4FK0+cGNEvg0XiaxzYrGA/F3dbqIWKk1zkCFNhpgnohhZYvPsEqe2SC5gok3Iu8O J1HVzWvCXmPKBsewSgCyOtFRlhO3+1w= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:37 2025 by rpki-client