$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa File: b0877303-3406-3332-9cef-2f93ba63c3c3.roa (raw, json) Hash identifier: Lrbp9DALE5/jTYQwxrG/807uVckQPv4y8tkhZBtwW/M= Subject key identifier: 97:64:8C:22:14:26:54:76:52:3F:58:24:24:48:00:FC:56:54:BC:6A Certificate issuer: /CN=608a6439-1cee-431f-908b-dcfad7329c1d Certificate serial: 010D0C9F43285848F22BE335E09DED98D49870C0 Authority key identifier: 0D:C4:2C:0A:47:35:26:93:C6:61:F5:DD:3C:1B:3C:7A:BB:7D:35:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 159.137.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e3:35:e0:9d:ed:98:d4:98:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=608a6439-1cee-431f-908b-dcfad7329c1d Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=863a2cb1-fb01-415b-9134-c2ee30536627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:78:9c:6d:bb:2f:70:f9:55:13:ee:a6:c5: bd:62:98:14:f9:2f:92:66:1e:21:91:00:89:4e:0a: e2:9f:8f:2f:0c:8a:80:62:7e:9b:be:3c:b8:3e:8e: 0c:a4:ba:de:f1:b4:8b:10:12:98:6c:f0:1c:64:9e: e0:92:ee:5f:f4:7b:88:a4:5a:be:a7:38:f3:ba:7e: 23:74:54:c8:d0:fd:0a:80:2a:dd:30:b6:cc:c9:eb: 85:7b:d7:14:ea:4c:6a:df:61:01:1c:ce:42:22:dc: 80:fa:d1:e0:f7:c4:c1:e9:05:39:3d:15:d4:62:aa: a9:b5:da:72:d4:aa:a0:ef:c1:43:18:f7:f3:e9:7b: 3a:fb:be:b6:33:bd:55:9a:f8:5a:68:f9:dc:ac:ae: 33:e8:12:38:8c:5b:73:52:38:56:9f:ff:5b:44:3b: f0:28:cb:6f:d9:63:98:a5:c6:50:8f:fa:a4:71:54: 23:75:4d:d6:a0:0f:5a:d0:1a:e8:e5:5c:11:3a:3e: 93:ac:54:28:46:5c:8a:0f:97:46:c8:12:7d:f4:4e: 43:8a:83:49:0e:52:48:e6:b1:b3:c7:ac:e2:83:36: e4:47:b4:fb:10:cd:1d:ae:8c:bc:82:e4:d0:3c:82: c3:8b:49:e6:87:f9:50:b0:49:18:32:6b:94:4e:bb: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:64:8C:22:14:26:54:76:52:3F:58:24:24:48:00:FC:56:54:BC:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.crl X509v3 Authority Key Identifier: keyid:0D:C4:2C:0A:47:35:26:93:C6:61:F5:DD:3C:1B:3C:7A:BB:7D:35:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer sbgp-ipAddrBlock: critical IPv4: 159.137.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:21:72:a5:79:44:90:d6:3c:1a:d0:01:4d:ba:4d:8c:f5:41: 80:e5:ee:ef:ad:c2:58:75:56:59:28:10:bd:d2:c5:ad:e7:2c: 95:16:cf:bb:59:3e:2a:68:dd:4b:39:a9:79:46:cf:22:af:3f: fc:0d:bc:a8:99:af:67:d0:50:b6:e4:38:95:89:da:5a:3a:83: 4d:3f:1a:00:65:28:4f:38:1e:b7:80:96:62:10:80:9d:c4:5b: d3:af:08:1c:4a:03:77:e9:3b:02:d2:ae:f6:d1:be:03:ac:82: 3a:79:d0:56:de:6d:3b:c0:bd:e8:4b:37:5e:b3:c1:c0:bf:b1: 51:32:28:b6:8b:9d:cc:82:16:26:55:5b:8a:7d:67:78:1c:97: e4:b3:f1:87:f2:55:f7:1a:1e:47:7c:57:67:71:f3:dd:a4:53: 56:5f:a3:62:24:44:bc:f8:9e:56:fa:50:7d:fe:ca:4e:7f:0a: a6:96:7d:52:0f:a3:f4:56:13:bb:50:a3:aa:ad:a1:29:48:1d: dc:ae:66:56:6d:ce:7a:c3:87:71:98:d7:55:4b:2b:7e:76:ec: 07:3a:d7:03:d2:a1:51:8e:01:1f:f8:98:ca:db:74:e8:f0:23: 38:fb:d0:5d:0d:67:ee:6c:5e:92:06:b8:1b:31:e1:72:33:16: 4d:76:b9:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+M14J3tmNSYcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA4YTY0MzktMWNlZS00MzFmLTkwOGItZGNmYWQ3MzI5 YzFkMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ODYzYTJjYjEtZmIwMS00MTViLTkxMzQtYzJlZTMwNTM2NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD54nG27L3D5VRPupsW9YpgU+S+SZh4hkQCJ Tgrin48vDIqAYn6bvjy4Po4MpLre8bSLEBKYbPAcZJ7gku5f9HuIpFq+pzjzun4j dFTI0P0KgCrdMLbMyeuFe9cU6kxq32EBHM5CItyA+tHg98TB6QU5PRXUYqqptdpy 1Kqg78FDGPfz6Xs6+762M71VmvhaaPncrK4z6BI4jFtzUjhWn/9bRDvwKMtv2WOY pcZQj/qkcVQjdU3WoA9a0Bro5VwROj6TrFQoRlyKD5dGyBJ99E5DioNJDlJI5rGz x6zigzbkR7T7EM0droy8guTQPILDi0nmh/lQsEkYMmuUTrvxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdkjCIUJlR2Uj9YJCRIAPxWVLxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MDhh NjQzOS0xY2VlLTQzMWYtOTA4Yi1kY2ZhZDczMjljMWQvYjA4NzczMDMtMzQwNi0z MzMyLTljZWYtMmY5M2JhNjNjM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjA4YTY0MzktMWNlZS00MzFmLTkw OGItZGNmYWQ3MzI5YzFkLzYwOGE2NDM5LTFjZWUtNDMxZi05MDhiLWRjZmFkNzMy OWMxZC5jcmwwHwYDVR0jBBgwFoAUDcQsCkc1JpPGYfXdPBs8ert9NfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MDhhNjQzOS0xY2VlLTQzMWYtOTA4Yi1kY2Zh ZDczMjljMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn4kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYhcqV5RJDWPBrQAU26TYz1QYDl7u+twlh1VlkoEL3Sxa3nLJUWz7tZ Pipo3Us5qXlGzyKvP/wNvKiZr2fQULbkOJWJ2lo6g00/GgBlKE84HreAlmIQgJ3E W9OvCBxKA3fpOwLSrvbRvgOsgjp50FbebTvAvehLN16zwcC/sVEyKLaLncyCFiZV W4p9Z3gcl+Sz8YfyVfcaHkd8V2dx892kU1Zfo2IkRLz4nlb6UH3+yk5/CqaWfVIP o/RWE7tQo6qtoSlIHdyuZlZtznrDh3GY11VLK3527Ac61wPSoVGOAR/4mMrbdOjw Izj70F0NZ+5sXpIGuBsx4XIzFk12uZA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:02:44 2025 by rpki-client