$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa File: 867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa (raw, json) Hash identifier: V3h55R52obmJ2oBkXOx+jfLKQQhCIMov4n4yRdJFUME= Subject key identifier: 52:02:54:88:5D:E9:FA:7A:E6:70:FF:8C:F7:D3:C2:2B:79:BE:4D:82 Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F432858484945685ABA65F7F6AF692800 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:68:5a:ba:65:f7:f6:af:69:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=bd9e60d1-2f9a-4025-b153-95fb2e5599d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:1f:7a:28:94:04:bf:a1:e0:2c:bd:44:77: 34:1c:85:0b:e1:8d:7c:ae:8e:7a:40:f2:76:3d:4d: fc:8f:31:86:50:64:fc:e7:f5:8f:1e:3a:9f:7c:f6: db:a5:09:20:72:19:f4:33:31:15:2d:1b:f1:ba:6a: e6:ab:f1:54:76:82:2b:41:33:2d:05:2b:d2:d3:63: b2:49:14:b1:12:87:6b:da:af:1b:c2:ea:04:1d:8a: 17:c4:e4:d7:5b:3e:42:aa:58:7e:f1:e4:76:a6:81: 8b:6c:70:ee:5c:10:9d:89:03:00:35:d1:d6:00:12: 9b:a1:cf:06:11:14:6e:b6:f4:a1:3f:28:5d:84:e3: 2c:30:28:c8:a7:83:35:83:40:99:78:7f:1f:98:e8: 7b:17:a2:fd:e9:a3:c6:ba:87:f2:30:3b:67:7c:a1: 4b:52:b2:e7:ef:a4:c0:bf:76:03:ef:ef:ca:0a:0e: 2b:73:b5:2b:05:90:8c:3a:80:04:e7:36:3e:ef:54: c5:15:68:e9:88:8f:6b:13:23:9b:b7:55:36:3d:dc: 82:c1:0f:81:98:ca:52:c4:9d:d7:8d:0d:9d:6f:f1: 7c:95:bb:e0:c7:76:5d:10:2f:35:b7:4e:ef:c9:5c: 9c:41:e8:a9:c1:a4:81:49:56:c5:ec:99:21:63:da: 5f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:02:54:88:5D:E9:FA:7A:E6:70:FF:8C:F7:D3:C2:2B:79:BE:4D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:57:c1:2d:ab:f8:38:8a:de:cc:e7:0d:e4:69:e7:22:01:05: 76:2c:57:6b:d4:d5:3e:18:77:f4:a6:ff:ea:d1:bc:8b:8a:a3: 81:65:ca:2c:6e:f9:20:56:bc:80:89:38:1f:f1:9d:25:ba:4b: b6:22:f2:93:51:6a:89:a3:cf:ab:17:f0:f8:19:17:5e:08:ea: 3d:d5:09:b1:71:5d:4a:2d:13:b3:79:f8:af:9a:4d:eb:58:94: c8:89:dc:f1:c0:3c:f3:73:fb:d6:a1:d4:cc:a0:43:50:e6:d6: 81:9b:d7:a6:21:e4:59:d0:ad:43:cb:35:8a:28:6f:e6:c1:6a: 11:f0:ff:e5:ed:dc:34:ba:1a:f8:98:9e:30:65:72:3c:66:4e: 7e:04:6b:23:1b:3a:25:d5:e4:46:cb:32:59:a9:1c:e1:d6:8f: 41:47:31:17:b1:59:8c:2e:5c:00:a4:bc:fc:5b:f2:b0:90:b0: 7c:5f:89:69:cc:52:5f:66:14:5c:a6:03:53:8b:d8:4d:d9:6e: 7f:82:89:4a:42:d0:0e:c0:d8:7b:1c:c3:b4:1c:26:69:27:c3: 99:c6:7f:20:27:48:3f:1b:e7:55:be:d9:a1:5a:4e:49:23:62: 2b:cb:49:91:82:b1:c9:88:ae:20:37:10:cd:63:05:e2:a7:dd: d0:3a:8e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRWhaumX39q9pKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk YmQ5ZTYwZDEtMmY5YS00MDI1LWIxNTMtOTVmYjJlNTU5OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EgfeiiUBL+h4Cy9RHc0HIUL4Y18ro56QPJ2 PU38jzGGUGT85/WPHjqffPbbpQkgchn0MzEVLRvxumrmq/FUdoIrQTMtBSvS02Oy SRSxEodr2q8bwuoEHYoXxOTXWz5Cqlh+8eR2poGLbHDuXBCdiQMANdHWABKboc8G ERRutvShPyhdhOMsMCjIp4M1g0CZeH8fmOh7F6L96aPGuofyMDtnfKFLUrLn76TA v3YD7+/KCg4rc7UrBZCMOoAE5zY+71TFFWjpiI9rEyObt1U2PdyCwQ+BmMpSxJ3X jQ2db/F8lbvgx3ZdEC81t07vyVycQeipwaSBSVbF7JkhY9pf9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFICVIhd6fp65nD/jPfTwit5vk2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvODY3ZmZkMmMtMGYxYS0z OGY1LTkyZDItNDJmMTk0ZTAyYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZXwS2r+DiK3sznDeRp5yIBBXYsV2vU1T4Yd/Sm/+rRvIuKo4Flyixu +SBWvICJOB/xnSW6S7Yi8pNRaomjz6sX8PgZF14I6j3VCbFxXUotE7N5+K+aTetY lMiJ3PHAPPNz+9ah1MygQ1Dm1oGb16Yh5FnQrUPLNYoob+bBahHw/+Xt3DS6GviY njBlcjxmTn4EayMbOiXV5EbLMlmpHOHWj0FHMRexWYwuXACkvPxb8rCQsHxfiWnM Ul9mFFymA1OL2E3Zbn+CiUpC0A7A2Hscw7QcJmknw5nGfyAnSD8b51W+2aFaTkkj YivLSZGCscmIriA3EM1jBeKn3dA6jt4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:43 2025 by rpki-client