$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa File: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (raw, json) Hash identifier: +MHDzx8k0TOeSlCoPWTrq1YM4p0Xrj7lCvpTY2nK8Po= Subject key identifier: 1A:4A:86:47:50:69:DE:70:E4:BD:90:4B:6A:89:3C:8E:1C:16:D6:C8 Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F43285848AC60D68619F23A04BC8A5640 Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 397735 IP address blocks: 158.51.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d6:86:19:f2:3a:04:bc:8a:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=b6960f53-5d25-4461-935e-4034253c63ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:83:07:89:f1:c8:fa:33:75:a2:76:96:d7: 85:8d:9d:89:99:54:0c:6a:37:a8:be:8d:9b:85:ad: 7b:f7:0f:39:0a:b1:87:f6:d4:c6:65:6e:04:0a:19: 1d:f1:87:63:76:06:ff:ef:53:db:cf:f0:64:7b:45: dc:92:94:b0:10:49:6f:4f:27:5d:c1:c3:9f:6d:a5: 04:7f:99:dc:4a:62:bf:82:9c:fe:51:c2:ce:79:f0: 74:d1:07:16:16:16:dd:ba:9a:86:a9:9e:dc:48:0e: 42:1a:79:74:f8:0a:56:ed:88:66:49:e2:e3:2b:e2: d4:70:43:94:4e:59:ea:88:1e:bc:97:0c:4b:18:c3: a1:27:4a:01:0e:76:28:3e:99:e0:b8:03:a5:96:ca: 38:da:14:0c:99:0e:d3:3d:c2:0b:0d:08:97:3b:21: 7d:70:9a:fd:54:3c:53:91:ab:8f:28:a4:93:4f:88: 0a:25:b4:ef:41:03:e6:d8:43:bd:6d:86:69:55:84: 9a:56:ef:11:72:5d:1d:75:fd:ba:62:0b:4c:ac:93: 7a:b8:15:bb:d3:c8:e2:4c:e8:78:0c:4e:31:e5:7d: 28:0f:0b:cb:cc:3a:3f:0c:f7:67:50:ba:aa:65:e6: ae:1b:83:7c:13:27:86:e9:ed:91:32:1c:b7:a2:db: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4A:86:47:50:69:DE:70:E4:BD:90:4B:6A:89:3C:8E:1C:16:D6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f6:da:5c:1e:a8:31:88:55:73:0a:ad:08:4d:78:95:94:d8: 59:ae:98:72:ce:1c:f1:b5:9f:75:9c:4b:0a:d3:0f:7e:65:0f: 62:f8:50:53:2f:87:c4:22:66:39:64:c3:90:ca:c1:b8:36:7c: ef:47:cb:df:77:e9:a3:fe:f3:2e:e9:e0:db:79:29:e5:84:06: 74:99:74:39:43:de:55:35:8a:a6:eb:6d:66:d7:4b:6a:77:7b: ff:18:28:ef:62:42:ba:f5:67:b8:52:6e:1b:83:1c:4d:f3:05: 80:e1:aa:f2:8c:99:04:9d:1f:fc:bb:68:97:2a:3d:06:66:8c: 5d:40:93:ef:18:55:9f:f5:4b:56:5e:12:f1:d0:e0:c1:49:50: 9b:c1:70:2a:18:c3:b8:c1:f4:7c:96:7f:ee:51:6c:2f:53:26: 1e:15:f2:a2:08:52:e9:c1:f2:f3:42:d1:68:40:54:c3:8c:c7: bc:a8:13:af:71:3b:f5:37:4e:c7:ea:0f:47:86:56:f6:86:18: 1f:c0:ed:e9:a7:7c:27:79:fe:a4:4e:9f:28:71:ec:bc:27:aa: 88:8c:29:59:30:6a:ac:1c:cf:dd:6e:57:4b:35:4d:4e:c4:ea: a2:fc:82:59:d1:d9:a5:60:7f:a4:53:1b:db:09:96:17:b8:32: 2f:85:1c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNaGGfI6BLyKVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk YjY5NjBmNTMtNWQyNS00NDYxLTkzNWUtNDAzNDI1M2M2M2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8ODB4nxyPozdaJ2lteFjZ2JmVQMajeovo2b ha179w85CrGH9tTGZW4EChkd8Ydjdgb/71Pbz/Bke0XckpSwEElvTyddwcOfbaUE f5ncSmK/gpz+UcLOefB00QcWFhbdupqGqZ7cSA5CGnl0+ApW7YhmSeLjK+LUcEOU TlnqiB68lwxLGMOhJ0oBDnYoPpnguAOllso42hQMmQ7TPcILDQiXOyF9cJr9VDxT kauPKKSTT4gKJbTvQQPm2EO9bYZpVYSaVu8Rcl0ddf26YgtMrJN6uBW708jiTOh4 DE4x5X0oDwvLzDo/DPdnULqqZeauG4N8EyeG6e2RMhy3otsTfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpKhkdQad5w5L2QS2qJPI4cFtbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvYTRhZTFlYmUtOTg1Yy0z M2M4LWFlOTAtOGNhMzM4YTRlYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb22lweqDGIVXMKrQhNeJWU2FmumHLOHPG1n3WcSwrTD35lD2L4UFMv h8QiZjlkw5DKwbg2fO9Hy9936aP+8y7p4Nt5KeWEBnSZdDlD3lU1iqbrbWbXS2p3 e/8YKO9iQrr1Z7hSbhuDHE3zBYDhqvKMmQSdH/y7aJcqPQZmjF1Ak+8YVZ/1S1Ze EvHQ4MFJUJvBcCoYw7jB9HyWf+5RbC9TJh4V8qIIUunB8vNC0WhAVMOMx7yoE69x O/U3TsfqD0eGVvaGGB/A7emnfCd5/qROnyhx7LwnqoiMKVkwaqwcz91uV0s1TU7E 6qL8glnR2aVgf6RTG9sJlhe4Mi+FHBg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:26 2025 by rpki-client