$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa File: 4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa (raw, json) Hash identifier: osdqw1UBa+MMQCmv261QZMse42VKMXow2Z345byrSU0= Subject key identifier: D1:FA:1C:79:80:1F:2C:00:40:5D:A2:9A:B8:D1:2E:A9:AA:AE:37:2C Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F432858496A19AD26E97A3F41804D8AC0 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 25697 IP address blocks: 209.151.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:ad:26:e9:7a:3f:41:80:4d:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=f413cdf7-250a-4e64-b63d-2722e2996448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:83:5c:61:e6:2d:10:d5:45:ab:13:e1:6b: 35:cb:53:00:4b:b9:ec:45:7d:cc:97:cb:66:74:20: 8f:4c:8e:52:54:c2:ea:86:d4:d7:2b:ce:38:71:1f: 93:82:81:15:ac:76:31:49:1f:4c:2a:7c:e9:dd:1b: 06:46:cd:20:6c:1f:8f:a9:72:70:2a:cd:29:27:90: 63:70:91:0d:9b:c1:64:84:6d:5c:31:bf:ba:56:1c: bc:1c:bc:d7:be:d7:bc:01:e4:1e:17:0c:bc:b5:bf: 36:0f:32:9e:de:f0:cc:34:bf:4b:b9:3e:fb:49:f2: 62:b2:95:c9:ab:b8:dc:11:ff:83:0a:0a:90:cb:6b: 67:fc:bd:95:37:9c:cc:b2:03:7a:cf:12:b0:ef:68: 14:0f:ef:d9:2d:fe:0e:b7:f7:45:ff:86:da:ca:f6: 5f:ba:cd:bd:09:7b:c6:5d:1f:38:6b:0e:c0:b2:5e: 81:49:0d:eb:13:9f:0c:fd:25:0b:89:41:7c:ed:c5: 86:71:94:3c:db:15:03:68:da:c1:71:88:73:b6:2f: 06:2c:51:af:c8:70:5f:6d:32:8e:55:f2:19:a6:02: 59:e1:4a:c4:dd:cc:35:1d:a5:29:db:31:39:5b:42: 92:10:03:05:70:ae:3b:7e:d6:90:ed:cd:34:a9:f8: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FA:1C:79:80:1F:2C:00:40:5D:A2:9A:B8:D1:2E:A9:AA:AE:37:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bb:4f:2e:c1:5d:23:39:e7:82:c0:a1:f7:25:0e:ee:b8:a2: 76:3c:92:e7:76:44:99:82:dc:a0:6e:b5:a4:d8:20:83:ef:48: fa:83:13:7f:93:e6:dd:86:97:a7:f9:11:b0:16:6e:dc:fe:29: 22:77:d4:7a:81:30:13:e2:eb:a4:f7:5e:8e:73:c5:80:ba:24: ce:4f:5b:0f:72:6f:ed:01:bc:8e:41:15:1b:86:e4:9b:3b:dc: bc:75:04:4a:7c:83:76:78:86:70:e6:3d:b8:0b:76:d9:ce:1c: d5:82:69:fe:dd:95:dc:6e:d5:16:d5:74:70:1c:8b:ea:a2:8f: 98:ba:03:f6:e3:ac:40:1f:7c:ae:47:9b:70:f3:f1:4f:bc:69: 6a:38:e7:a7:94:fd:a9:02:f0:96:b5:bb:23:8d:46:64:cd:14: 0f:dd:ce:5d:4d:42:bb:68:9f:d9:08:7d:60:88:f7:f7:56:5a: f8:c9:5f:31:f5:0f:58:70:d4:07:c6:d1:c1:0c:ee:8c:b2:57: 6e:86:32:60:b7:79:c4:64:f6:6f:9f:69:55:d6:fb:f2:85:b3: 6b:b6:96:ea:b1:0c:19:e3:47:88:a5:99:b8:61:8d:68:c8:bf: 6c:57:d3:d0:79:40:81:e4:a7:63:27:13:0e:d0:97:85:be:07: ce:15:dc:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGa0m6Xo/QYBNisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZjQxM2NkZjctMjUwYS00ZTY0LWI2M2QtMjcyMmUyOTk2NDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHqDXGHmLRDVRasT4Ws1y1MAS7nsRX3Ml8tm dCCPTI5SVMLqhtTXK844cR+TgoEVrHYxSR9MKnzp3RsGRs0gbB+PqXJwKs0pJ5Bj cJENm8FkhG1cMb+6Vhy8HLzXvte8AeQeFwy8tb82DzKe3vDMNL9LuT77SfJispXJ q7jcEf+DCgqQy2tn/L2VN5zMsgN6zxKw72gUD+/ZLf4Ot/dF/4bayvZfus29CXvG XR84aw7Asl6BSQ3rE58M/SULiUF87cWGcZQ82xUDaNrBcYhzti8GLFGvyHBfbTKO VfIZpgJZ4UrE3cw1HaUp2zE5W0KSEAMFcK47ftaQ7c00qfiPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH6HHmAHywAQF2imrjRLqmqrjcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvNGQzM2FkNzItY2Q2OS0z YjM5LWFmNTQtYmI3ZjYzNGEwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG7Ty7BXSM554LAofclDu64onY8kud2RJmC3KButaTYIIPvSPqDE3+T 5t2Gl6f5EbAWbtz+KSJ31HqBMBPi66T3Xo5zxYC6JM5PWw9yb+0BvI5BFRuG5Js7 3Lx1BEp8g3Z4hnDmPbgLdtnOHNWCaf7dldxu1RbVdHAci+qij5i6A/bjrEAffK5H m3Dz8U+8aWo456eU/akC8Ja1uyONRmTNFA/dzl1NQrton9kIfWCI9/dWWvjJXzH1 D1hw1AfG0cEM7oyyV26GMmC3ecRk9m+faVXW+/KFs2u2luqxDBnjR4ilmbhhjWjI v2xX09B5QIHkp2MnEw7Ql4W+B84V3CU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:05:05 2025 by rpki-client