$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/137ac021-2448-3b1c-93b0-e6126e0b634c.roa File: 137ac021-2448-3b1c-93b0-e6126e0b634c.roa (raw, json) Hash identifier: XklKIGSuwEDJGUVX0ZJMCMNbyO3aFwyzBqskY3kakB0= Subject key identifier: 6D:4A:90:54:36:CD:5E:83:71:B2:73:C4:29:6A:30:F3:1D:17:E7:6C Certificate issuer: /CN=354b54a0-5686-4c99-8f48-3477d048264a Certificate serial: 010D0C9F43285848B6261E16210496CC6FB73C60 Authority key identifier: 06:5B:6D:91:71:30:7B:F1:45:93:FE:43:F1:12:96:8D:61:B0:FA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/137ac021-2448-3b1c-93b0-e6126e0b634c.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 398537 IP address blocks: 156.12.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/354b54a0-5686-4c99-8f48-3477d048264a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/354b54a0-5686-4c99-8f48-3477d048264a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:1e:16:21:04:96:cc:6f:b7:3c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354b54a0-5686-4c99-8f48-3477d048264a Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=e91484c3-671c-4be0-8e82-89aaf7212ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:21:56:d6:e5:c1:37:66:29:a6:2e:be:5b:74: 87:ce:27:31:77:96:d8:67:29:84:7e:b3:b3:b4:71: 4c:48:09:a1:e2:84:51:ff:77:c3:f8:b5:36:16:06: b1:c8:03:1e:58:c6:6e:17:d8:b9:ff:07:cd:cf:e3: 93:80:d4:95:5c:46:5c:46:26:a2:51:32:2c:17:a5: c9:1f:55:3c:24:fd:c2:d2:76:ef:8e:34:3e:a2:95: ba:c0:b8:b6:4b:4f:c5:c5:17:1f:80:55:4d:54:e5: 39:5b:eb:6f:2b:82:fb:d7:7e:dd:08:e3:93:6e:c2: 7e:df:44:42:7f:ef:43:80:8d:e6:73:d6:77:99:c3: 9d:bc:e2:04:f6:fa:22:55:c0:98:8a:c7:7a:2e:24: 90:47:58:a3:45:bb:0e:85:d7:7d:8e:a0:85:01:f7: 78:25:fe:52:54:ca:1a:54:96:12:4d:2d:03:a6:85: 02:14:18:cd:c6:1d:87:c9:f2:02:b9:ba:07:b0:d7: 46:68:cc:e6:22:0f:f4:8a:82:57:3a:73:70:53:0d: 3d:63:24:5a:12:16:6d:f4:9f:cd:0f:e4:a2:3d:d4: e8:80:f9:3d:05:af:30:1d:80:71:c2:83:4a:94:b9: b7:9f:9f:69:81:8a:7a:b2:04:57:05:08:f8:4f:b2: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4A:90:54:36:CD:5E:83:71:B2:73:C4:29:6A:30:F3:1D:17:E7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/137ac021-2448-3b1c-93b0-e6126e0b634c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/354b54a0-5686-4c99-8f48-3477d048264a.crl X509v3 Authority Key Identifier: keyid:06:5B:6D:91:71:30:7B:F1:45:93:FE:43:F1:12:96:8D:61:B0:FA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a.cer sbgp-ipAddrBlock: critical IPv4: 156.12.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:17:72:1f:00:28:d8:85:d6:16:bc:0a:65:29:43:b6:5c:91: fa:25:c1:8b:f2:ba:16:ab:8c:ed:6d:3d:9f:f0:87:85:0b:4d: 0a:f1:2e:17:e6:c7:9e:a9:41:8f:f6:0e:b2:8b:35:b6:31:cf: dc:c3:94:9f:7b:cf:df:ee:84:32:01:29:44:25:fb:9b:54:0f: 97:2b:61:ca:08:c8:ff:d7:74:8b:7c:da:ef:47:f1:fe:3b:b9: 58:61:a0:c9:ee:5e:33:88:93:ad:d3:9f:1c:f1:5f:b5:1c:5a: 25:ad:e6:0b:26:b4:64:19:29:bc:31:81:17:68:9b:b9:1a:cd: 89:3a:56:22:14:1f:30:0b:b2:03:95:4a:16:f7:d3:f5:bc:f0: e7:98:b8:81:e7:47:20:d7:1b:64:2e:3b:3b:4d:64:2f:3b:3a: eb:5b:6a:b1:60:d9:f4:7a:f0:a8:2f:b8:0b:ba:22:4f:13:2a: d0:a1:68:94:f8:25:85:09:27:f1:36:32:05:51:0a:b9:0f:7f: e3:51:5a:2f:f7:26:01:3c:2f:80:e0:9e:a8:b6:1d:b9:4e:6e: ae:a0:64:47:84:28:a6:12:d8:1a:d5:aa:1b:98:e7:95:a6:4b: a2:6b:be:67:d9:0f:d9:15:f5:4a:55:f9:4b:19:ea:cd:61:07: b8:df:70:6b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi2Jh4WIQSWzG+3PGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU0YjU0YTAtNTY4Ni00Yzk5LThmNDgtMzQ3N2QwNDgy NjRhMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk ZTkxNDg0YzMtNjcxYy00YmUwLThlODItODlhYWY3MjEyZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiFW1uXBN2Yppi6+W3SHzicxd5bYZymEfrOz tHFMSAmh4oRR/3fD+LU2FgaxyAMeWMZuF9i5/wfNz+OTgNSVXEZcRiaiUTIsF6XJ H1U8JP3C0nbvjjQ+opW6wLi2S0/FxRcfgFVNVOU5W+tvK4L7137dCOOTbsJ+30RC f+9DgI3mc9Z3mcOdvOIE9voiVcCYisd6LiSQR1ijRbsOhdd9jqCFAfd4Jf5SVMoa VJYSTS0DpoUCFBjNxh2HyfICuboHsNdGaMzmIg/0ioJXOnNwUw09YyRaEhZt9J/N D+SiPdTogPk9Ba8wHYBxwoNKlLm3n59pgYp6sgRXBQj4T7LSQwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG1KkFQ2zV6DcbJzxClqMPMdF+dsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNTRi NTRhMC01Njg2LTRjOTktOGY0OC0zNDc3ZDA0ODI2NGEvMTM3YWMwMjEtMjQ0OC0z YjFjLTkzYjAtZTYxMjZlMGI2MzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzU0YjU0YTAtNTY4Ni00Yzk5LThm NDgtMzQ3N2QwNDgyNjRhLzM1NGI1NGEwLTU2ODYtNGM5OS04ZjQ4LTM0NzdkMDQ4 MjY0YS5jcmwwHwYDVR0jBBgwFoAUBlttkXEwe/FFk/5D8RKWjWGw+uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNTRiNTRhMC01Njg2LTRjOTktOGY0OC0zNDc3 ZDA0ODI2NGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGRdyHwAo2IXWFrwKZSlDtlyR+iXBi/K6FquM7W09n/CHhQtNCvEuF+bH nqlBj/YOsos1tjHP3MOUn3vP3+6EMgEpRCX7m1QPlythygjI/9d0i3za70fx/ju5 WGGgye5eM4iTrdOfHPFftRxaJa3mCya0ZBkpvDGBF2ibuRrNiTpWIhQfMAuyA5VK FvfT9bzw55i4gedHINcbZC47O01kLzs661tqsWDZ9HrwqC+4C7oiTxMq0KFolPgl hQkn8TYyBVEKuQ9/41FaL/cmATwvgOCeqLYduU5urqBkR4QophLYGtWqG5jnlaZL omu+Z9kP2RX1SlX5SxnqzWEHuN9waw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:01 2025 by rpki-client