$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa File: 7255de94-c26e-30a0-a765-c429b196c862.roa (raw, json) Hash identifier: Qfjf4g5rbuVuZa+9ASAPE61ESHD3LjC5LyKLmWj74tI= Subject key identifier: 1C:40:6B:33:DE:CA:01:4A:EC:41:59:F6:78:F5:42:21:7C:01:59:81 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F43285848E9CBEC2FB452D98D1D10F000 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 55 IP address blocks: 158.130.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:ec:2f:b4:52:d9:8d:1d:10:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=7e3492b0-dd53-4ce8-8b43-2c4553c0cc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:c7:a8:bd:1d:56:7b:3c:f4:21:de:7f:c1: 4e:dd:3f:d0:da:f8:8a:05:b3:ec:81:d0:64:da:f2: 55:ec:9a:6a:ca:d1:6a:77:c3:a9:35:a4:6a:13:1b: 78:05:1e:55:d9:14:9c:fa:75:1c:70:c8:38:54:b8: 57:66:8a:45:06:59:6d:2f:d5:e5:5d:e1:49:b9:4b: 5c:46:db:d2:58:34:97:6e:8a:85:a7:58:0d:e1:8e: d2:06:9e:63:12:4a:42:c3:de:fb:9a:54:e6:92:f5: 81:12:8b:4c:d2:88:d2:24:15:81:df:02:a9:15:37: bf:6d:d6:db:19:ac:09:dd:2e:3a:9f:13:c7:5e:d3: a3:67:d8:78:65:ef:bd:f3:2d:6f:2f:80:27:d6:af: ca:ab:f7:0d:7c:4d:a1:97:71:c6:5d:a3:01:28:6f: 9d:5c:4f:91:25:6a:ce:27:59:75:e7:66:4e:b9:db: df:71:f2:66:5a:07:cd:0d:67:6f:19:8f:f4:78:37: 98:c6:d2:60:e7:ff:8a:06:dd:f0:8a:12:5b:1c:27: a3:2f:45:a4:e5:24:84:10:49:b5:89:2e:d5:6b:36: 90:56:99:52:42:8c:a4:5a:52:81:bc:ae:8b:5a:78: 47:98:fa:8f:87:a7:d9:4d:81:eb:a5:2b:13:cb:44: 1a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:40:6B:33:DE:CA:01:4A:EC:41:59:F6:78:F5:42:21:7C:01:59:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 158.130.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:30:77:65:93:dc:49:32:66:03:04:bc:50:fb:92:e9:21:00: ba:79:6c:7c:87:7b:c6:f2:83:49:36:24:59:f8:f5:02:57:8f: 96:c2:42:ef:5a:23:bf:07:1e:07:b0:c4:af:60:e5:d5:04:0b: 98:83:92:56:f6:b4:0d:c1:5b:ee:48:cd:5a:5f:3b:4d:7b:17: c9:72:f9:b9:d4:af:72:66:d2:61:e1:81:37:ed:f4:3c:6b:f6: 2d:66:fa:12:6b:72:ee:6d:6e:73:80:7c:2e:21:24:b1:ab:82: a4:e0:0d:2d:25:63:28:bd:e0:4d:c4:92:b7:95:f6:a4:a4:88: ee:8b:e3:af:da:3b:d3:59:b6:9c:d2:4f:ce:b3:3e:b5:5c:5e: 49:28:f9:c5:cf:04:4c:14:6b:85:6c:3b:7c:9e:9f:74:ac:9a: f6:3f:2f:33:52:4b:f3:e2:d6:98:c6:91:a4:bd:11:ae:a9:5a: 8d:6a:bf:bb:99:14:39:84:a8:f3:de:e2:40:8c:fb:fa:55:c1: f8:87:4f:4a:61:18:68:f7:70:73:92:87:da:6e:61:e8:e8:64: 17:d8:f4:10:45:dd:e1:6e:96:ea:72:65:c7:92:f9:17:76:3a: 3a:39:73:0c:77:03:ab:54:d3:4a:ee:4f:00:9a:c5:09:84:ea: c4:ed:16:dd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjpy+wvtFLZjR0Q8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk N2UzNDkyYjAtZGQ1My00Y2U4LThiNDMtMmM0NTUzYzBjYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3rHqL0dVns89CHef8FO3T/Q2viKBbPsgdBk 2vJV7JpqytFqd8OpNaRqExt4BR5V2RSc+nUccMg4VLhXZopFBlltL9XlXeFJuUtc RtvSWDSXboqFp1gN4Y7SBp5jEkpCw977mlTmkvWBEotM0ojSJBWB3wKpFTe/bdbb GawJ3S46nxPHXtOjZ9h4Ze+98y1vL4An1q/Kq/cNfE2hl3HGXaMBKG+dXE+RJWrO J1l152ZOudvfcfJmWgfNDWdvGY/0eDeYxtJg5/+KBt3wihJbHCejL0Wk5SSEEEm1 iS7VazaQVplSQoykWlKBvK6LWnhHmPqPh6fZTYHrpSsTy0QaGwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBxAazPeygFK7EFZ9nj1QiF8AVmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvNzI1NWRlOTQtYzI2ZS0z MGEwLWE3NjUtYzQyOWIxOTZjODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnoIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaTB3ZZPcSTJmAwS8UPuS6SEAunlsfId7xvKDSTYkWfj1AlePlsJC71oj vwceB7DEr2Dl1QQLmIOSVva0DcFb7kjNWl87TXsXyXL5udSvcmbSYeGBN+30PGv2 LWb6Emty7m1uc4B8LiEksauCpOANLSVjKL3gTcSSt5X2pKSI7ovjr9o701m2nNJP zrM+tVxeSSj5xc8ETBRrhWw7fJ6fdKya9j8vM1JL8+LWmMaRpL0RrqlajWq/u5kU OYSo897iQIz7+lXB+IdPSmEYaPdwc5KH2m5h6OhkF9j0EEXd4W6W6nJlx5L5F3Y6 OjlzDHcDq1TTSu5PAJrFCYTqxO0W3Q== -----END CERTIFICATE-----Generated at Wed Apr 9 00:18:41 2025 by rpki-client