$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa File: ef7e153d-45df-351a-8da1-da52a2a74e64.roa (raw, json) Hash identifier: xobYyQK+XIgbBv/VBzWE4BzZKevHFGd6B/1t7tkkkOQ= Subject key identifier: 82:B9:85:FD:40:73:1C:4D:B7:8F:78:A7:DF:3A:FE:33:3C:F2:F0:35 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285849F9DFC752EBD2D2E5BC692A00 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 22863 IP address blocks: 159.18.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c7:52:eb:d2:d2:e5:bc:69:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=d0c7d3c1-52c5-47c8-b1dd-f4b70259070b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3a:69:8e:bd:1c:fa:19:27:62:60:0d:80:56: ef:08:e0:b4:80:3c:2b:b9:cc:66:b6:22:b4:32:9c: 12:da:9a:5b:c0:70:4e:24:47:24:f5:b1:dc:51:94: 33:78:f6:72:e2:fb:74:d1:34:93:7a:0e:f1:a9:ea: 1a:46:fd:be:b0:ab:ce:ba:7d:0f:e4:f6:28:37:d8: 06:bd:a2:0d:1d:24:69:3d:f3:16:af:20:4a:a4:be: b4:61:53:7e:23:b6:f8:e0:91:1a:90:4a:11:93:34: 0e:1a:76:01:fe:90:18:9b:74:56:05:08:fe:64:44: 48:30:2c:cb:4c:60:b1:74:02:eb:2c:50:7c:c4:2d: a1:f4:0f:89:ee:e6:bc:15:de:db:c2:63:b2:49:f1: b3:a7:89:81:82:ca:4a:d7:79:a6:1f:84:c2:8f:88: a3:c0:08:ac:25:b3:d1:00:b5:b8:5d:08:a5:34:fe: 44:57:54:02:80:9c:7f:42:25:9c:a7:6c:19:bf:b4: 87:9c:a8:75:07:a2:49:c2:0d:01:d9:c5:dd:a2:bf: 6f:13:ab:5d:20:77:d4:9c:9d:dd:00:35:45:33:f5: d4:f1:9e:5d:52:2c:f8:89:bc:86:37:aa:96:d1:a7: ed:37:0b:4f:cf:ad:2e:84:c4:f5:04:a5:45:14:29: 3e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B9:85:FD:40:73:1C:4D:B7:8F:78:A7:DF:3A:FE:33:3C:F2:F0:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ef7e153d-45df-351a-8da1-da52a2a74e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 159.18.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:7a:64:86:75:4a:84:05:cd:3d:0a:f4:cf:5b:5d:d5:fb:4c: b6:54:b6:38:c9:6a:1e:67:9a:10:a8:14:59:a3:19:7b:f9:11: 78:cd:53:7f:5d:75:ae:12:0b:74:11:db:ee:3c:bd:23:c6:3a: 3e:2f:2e:ff:4e:f0:71:b1:f0:2e:63:50:c4:f2:96:c2:fe:da: 1f:7d:df:52:93:af:0d:91:d4:f7:e6:55:2d:a8:4a:9a:82:5d: e5:69:0b:39:83:22:47:ac:18:74:2f:b7:b2:85:82:16:6d:57: ea:cf:a4:9d:64:ac:c4:cd:f3:1b:3f:e0:65:00:bd:f0:1f:b4: b7:6d:c6:d3:56:15:aa:56:81:f8:a5:f6:ea:d3:2c:1e:06:f4: 14:e8:45:c7:08:d8:7a:06:bc:fd:0c:0f:b1:f1:66:30:e1:12: 52:ef:55:bc:5e:ba:11:21:a7:f1:25:5d:e1:73:84:ab:52:94: e3:3e:0c:df:19:08:89:f9:56:8a:0c:63:cc:96:73:b4:99:27: 2b:78:ef:0a:f8:1a:99:0d:61:6e:3b:e3:a4:db:09:18:fa:6c: 22:81:6b:8a:be:2e:60:4a:0b:90:3d:1f:4d:87:b4:ee:b4:12: 36:70:9d:d7:06:56:9c:8f:89:27:e3:63:71:4f:04:49:94:18: e7:7d:01:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538dS69LS5bxpKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk ZDBjN2QzYzEtNTJjNS00N2M4LWIxZGQtZjRiNzAyNTkwNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDppjr0c+hknYmANgFbvCOC0gDwrucxmtiK0 MpwS2ppbwHBOJEck9bHcUZQzePZy4vt00TSTeg7xqeoaRv2+sKvOun0P5PYoN9gG vaINHSRpPfMWryBKpL60YVN+I7b44JEakEoRkzQOGnYB/pAYm3RWBQj+ZERIMCzL TGCxdALrLFB8xC2h9A+J7ua8Fd7bwmOySfGzp4mBgspK13mmH4TCj4ijwAisJbPR ALW4XQilNP5EV1QCgJx/QiWcp2wZv7SHnKh1B6JJwg0B2cXdor9vE6tdIHfUnJ3d ADVFM/XU8Z5dUiz4ibyGN6qW0aftNwtPz60uhMT1BKVFFCk+mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK5hf1AcxxNt494p986/jM88vA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZWY3ZTE1M2QtNDVkZi0z NTFhLThkYTEtZGE1MmEyYTc0ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxIVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB6ZIZ1SoQFzT0K9M9bXdX7TLZUtjjJah5nmhCoFFmjGXv5EXjNU39d da4SC3QR2+48vSPGOj4vLv9O8HGx8C5jUMTylsL+2h9931KTrw2R1PfmVS2oSpqC XeVpCzmDIkesGHQvt7KFghZtV+rPpJ1krMTN8xs/4GUAvfAftLdtxtNWFapWgfil 9urTLB4G9BToRccI2HoGvP0MD7HxZjDhElLvVbxeuhEhp/ElXeFzhKtSlOM+DN8Z CIn5VooMY8yWc7SZJyt47wr4GpkNYW4746TbCRj6bCKBa4q+LmBKC5A9H02HtO60 EjZwndcGVpyPiSfjY3FPBEmUGOd9AXc= -----END CERTIFICATE-----Generated at Mon Jun 2 16:39:08 2025 by rpki-client