$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa File: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (raw, json) Hash identifier: fJH/5g215SpCkUTRFNvMG9LHoEzTfs0v3Cs79wS9MIA= Subject key identifier: DC:14:8D:CA:F6:AC:87:F1:76:8B:00:7D:8C:D4:92:FA:E3:36:90:67 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584917DC27521F9B3E3746CD3DA0 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 22773 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:27:52:1f:9b:3e:37:46:cd:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=9ab3ae59-22da-449a-8010-7196242ab9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:ae:ac:42:99:0e:d3:a5:d1:11:6b:b8:c7: 86:52:6a:f8:d3:ff:67:4d:a8:66:68:7f:3c:18:92: 2d:6a:2f:6c:a7:ba:bf:39:60:be:fd:b0:30:cc:ef: 49:f0:09:84:d4:27:2b:4e:73:22:86:e8:b7:f2:2a: 06:41:bb:86:f2:b2:72:bd:44:95:9d:b1:4a:a5:f8: e4:b2:b9:36:2e:3b:38:56:5b:16:68:4a:c2:e5:23: 75:74:01:8d:9a:d0:bb:94:e4:f8:17:73:2a:2f:07: c0:77:e0:98:ea:09:d5:cc:ce:ae:ab:29:ab:9f:6d: 53:05:29:4d:e3:ea:4e:6b:63:da:16:00:07:b2:f7: e5:06:42:f5:ed:17:43:c8:ed:74:5d:13:c5:65:e3: de:89:fd:0f:0c:4d:b7:19:b4:10:b9:ee:c8:42:27: 64:5e:29:45:6e:b2:59:7b:11:06:de:9a:f4:28:1f: 7e:fd:4b:de:07:0b:db:5f:96:c0:fa:89:35:4d:9e: d4:d5:33:d6:a1:50:85:9e:61:e1:ad:dc:6e:15:4a: 15:26:95:4d:d5:17:b2:89:04:85:8b:f6:36:21:a6: 77:8f:62:f6:0f:b6:b5:e5:6a:f8:aa:87:11:c1:52: 45:b3:d5:bf:53:7d:08:ce:98:24:0b:bb:b1:73:b8: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:14:8D:CA:F6:AC:87:F1:76:8B:00:7D:8C:D4:92:FA:E3:36:90:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9f:fe:41:f6:61:e1:dd:e5:39:9b:18:b8:75:a9:09:71:76: ec:e9:64:3f:a9:8c:d4:0d:15:1b:29:b7:61:7c:ca:54:9c:e2: 71:01:a7:91:b4:94:6c:ff:bd:d7:31:64:d0:5f:39:5e:d3:55: a9:08:6b:3c:76:57:bc:98:a8:1c:77:d0:fb:bf:47:66:fb:65: 6a:03:61:a0:61:d8:20:e2:9d:d2:ca:65:d2:03:5f:b0:67:88: cb:b7:c4:90:7d:bc:ec:ce:a2:87:fd:b8:f5:c6:37:ab:46:d7: 6a:6e:e0:7d:e7:80:d5:4f:d5:3c:f8:93:39:4d:9c:69:14:32: ef:1b:ad:c1:a4:46:06:a7:f1:0b:4a:08:94:b2:45:c2:71:a1: 91:d9:4d:f5:4d:32:56:6a:76:56:a4:11:37:9d:a3:48:6b:e9: d8:8f:55:de:8b:15:cb:5d:11:1f:66:02:c5:95:a8:05:09:89: 41:48:83:08:ea:f8:d1:73:08:d8:bb:f7:8f:e8:e5:2f:96:3e: e0:38:ba:d5:7a:1f:d0:61:04:77:89:21:14:4d:f5:55:ba:9f: 0b:47:32:53:a2:71:dc:65:55:0d:0d:ec:3a:2e:4e:66:f9:85: 89:aa:81:9b:d1:73:8f:ef:c2:4f:f7:93:64:5f:cb:bf:ef:d5: f5:cf:4a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CdSH5s+N0bNPaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk OWFiM2FlNTktMjJkYS00NDlhLTgwMTAtNzE5NjI0MmFiOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tSurEKZDtOl0RFruMeGUmr40/9nTahmaH88 GJItai9sp7q/OWC+/bAwzO9J8AmE1CcrTnMihui38ioGQbuG8rJyvUSVnbFKpfjk srk2Ljs4VlsWaErC5SN1dAGNmtC7lOT4F3MqLwfAd+CY6gnVzM6uqymrn21TBSlN 4+pOa2PaFgAHsvflBkL17RdDyO10XRPFZePeif0PDE23GbQQue7IQidkXilFbrJZ exEG3pr0KB9+/UveBwvbX5bA+ok1TZ7U1TPWoVCFnmHhrdxuFUoVJpVN1ReyiQSF i/Y2IaZ3j2L2D7a15Wr4qocRwVJFs9W/U30IzpgkC7uxc7haBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwUjcr2rIfxdosAfYzUkvrjNpBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNjEzNGQyMWUtODk4Mi0z YTM5LWE1MWYtOGFkMjJjM2RlOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGf/kH2YeHd5TmbGLh1qQlxduzpZD+pjNQNFRspt2F8ylSc4nEBp5G0 lGz/vdcxZNBfOV7TVakIazx2V7yYqBx30Pu/R2b7ZWoDYaBh2CDindLKZdIDX7Bn iMu3xJB9vOzOoof9uPXGN6tG12pu4H3ngNVP1Tz4kzlNnGkUMu8brcGkRgan8QtK CJSyRcJxoZHZTfVNMlZqdlakETedo0hr6diPVd6LFctdER9mAsWVqAUJiUFIgwjq +NFzCNi794/o5S+WPuA4utV6H9BhBHeJIRRN9VW6nwtHMlOicdxlVQ0N7DouTmb5 hYmqgZvRc4/vwk/3k2Rfy7/v1fXPSig= -----END CERTIFICATE-----Generated at Fri Apr 11 21:30:06 2025 by rpki-client