$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa File: ef7e153d-45df-351a-8da1-da52a2a74e64.roa (raw, json) Hash identifier: 0spfRCD/4a7clmW+88HTCrIvRJ9AlOhiL2ZuSkIAdog= Subject key identifier: 02:2B:0D:23:AD:91:42:37:A8:90:3B:47:2E:26:E3:B6:AC:3A:29:65 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6BB740361AF29ABC80100 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 22863 IP address blocks: 159.18.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:bb:74:03:61:af:29:ab:c8:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=f35baa74-5718-462c-8e77-6d399c4e52d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e9:be:68:24:66:06:33:9e:ef:d8:03:ea:2c: 7a:5a:ec:c0:4c:4c:59:28:96:c3:97:5b:65:44:52: 4a:33:6d:e8:e3:44:b8:83:79:57:10:0f:23:18:f0: 2a:ac:c1:47:60:89:6c:6f:68:e8:54:d4:59:4a:fc: 42:ce:e0:f0:69:73:9a:cb:de:41:3a:94:bc:8a:3c: 7d:0c:66:5f:b2:3f:d7:ff:f3:a1:00:77:9b:4b:21: 09:f0:26:05:5a:86:de:d3:c2:48:19:a9:0d:fe:92: c5:30:9d:59:37:84:4d:7e:63:b2:45:48:65:7d:98: 80:52:77:2a:a0:5a:8a:59:d7:45:7b:e0:b6:a9:32: b2:de:a2:7b:f1:d4:cb:22:5a:f1:a1:bd:e4:b1:12: 9a:63:aa:e5:0d:ab:8c:e5:ef:22:d6:24:bb:80:b9: 62:9c:4c:de:c8:a9:7c:20:96:64:98:86:e9:03:3d: d5:e4:69:a5:e4:c7:c3:79:d6:aa:3f:28:7a:9e:28: 36:c9:55:c0:68:8b:58:f0:d8:5a:39:95:66:2d:5b: c7:64:c8:e4:b9:e5:0e:43:e7:51:cf:01:e0:8d:2b: ad:e5:79:fa:05:59:58:dc:20:16:1e:7b:c6:f5:16: 97:86:c5:c1:80:50:b2:74:d1:c0:4f:0a:a1:81:11: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2B:0D:23:AD:91:42:37:A8:90:3B:47:2E:26:E3:B6:AC:3A:29:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 159.18.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c6:55:07:57:c9:87:4d:5d:d6:58:33:ad:bf:de:32:85:7f: 7d:87:0f:f9:7c:dd:e5:35:68:02:50:4e:13:8d:bd:1c:17:25: 44:ff:17:01:26:80:f0:9c:33:57:40:d1:2f:65:4a:29:c5:07: 20:e1:87:34:89:de:47:9a:c3:5e:61:ce:e8:4b:c3:43:d2:b9: 80:88:b7:28:ec:04:a2:22:5c:6e:a5:0c:31:60:10:75:51:3d: ba:f5:c0:ae:a5:ea:ec:31:0c:aa:1f:ed:05:5e:ac:d3:b8:c7: b5:12:7e:00:82:e5:c1:b4:e7:75:4f:a2:8f:a1:8f:74:e3:eb: 56:74:f9:02:fe:1d:6f:3f:05:48:0a:80:e0:dd:6c:84:a8:79: e9:a0:7f:c5:69:11:f9:a5:71:06:94:c1:8f:e5:f4:c6:da:fc: c5:67:3a:74:d8:fb:25:e9:ed:88:f0:3b:8f:ad:05:5c:2d:c8: ad:0f:df:6d:6e:61:33:f9:79:88:a9:eb:5e:c7:89:60:39:7b: a8:dd:2d:42:7d:72:0f:27:60:df:43:42:6a:f5:da:f0:35:df: cc:c9:1c:c8:33:44:6b:84:19:14:1e:a8:67:12:e8:61:a5:7e: 69:e9:08:c4:dc:1b:ac:fd:97:06:ce:18:20:38:2f:a8:8d:f0: a0:9e:b5:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprt0A2GvKavIAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjM1YmFhNzQtNTcxOC00NjJjLThlNzctNmQzOTljNGU1MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+um+aCRmBjOe79gD6ix6WuzATExZKJbDl1tl RFJKM23o40S4g3lXEA8jGPAqrMFHYIlsb2joVNRZSvxCzuDwaXOay95BOpS8ijx9 DGZfsj/X//OhAHebSyEJ8CYFWobe08JIGakN/pLFMJ1ZN4RNfmOyRUhlfZiAUncq oFqKWddFe+C2qTKy3qJ78dTLIlrxob3ksRKaY6rlDauM5e8i1iS7gLlinEzeyKl8 IJZkmIbpAz3V5Gml5MfDedaqPyh6nig2yVXAaItY8NhaOZVmLVvHZMjkueUOQ+dR zwHgjSut5Xn6BVlY3CAWHnvG9RaXhsXBgFCydNHATwqhgRFFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIrDSOtkUI3qJA7Ry4m47asOillMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZWY3ZTE1M2QtNDVkZi0z NTFhLThkYTEtZGE1MmEyYTc0ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxIVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXGVQdXyYdNXdZYM62/3jKFf32HD/l83eU1aAJQThONvRwXJUT/FwEm gPCcM1dA0S9lSinFByDhhzSJ3keaw15hzuhLw0PSuYCItyjsBKIiXG6lDDFgEHVR Pbr1wK6l6uwxDKof7QVerNO4x7USfgCC5cG053VPoo+hj3Tj61Z0+QL+HW8/BUgK gODdbISoeemgf8VpEfmlcQaUwY/l9Mba/MVnOnTY+yXp7YjwO4+tBVwtyK0P321u YTP5eYip617HiWA5e6jdLUJ9cg8nYN9DQmr12vA138zJHMgzRGuEGRQeqGcS6GGl fmnpCMTcG6z9lwbOGCA4L6iN8KCetZo= -----END CERTIFICATE-----Generated at Fri Mar 14 13:11:44 2025 by rpki-client