$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa File: 795fa07a-13af-344a-81c5-38585d67c87d.roa (raw, json) Hash identifier: uUJVS8H1FCYs7ufqk650IvLCCoFNLr4eb2CONBtSG10= Subject key identifier: F5:9C:01:23:CE:9D:3C:8D:82:D7:24:66:0E:3E:12:AB:74:68:7D:4A Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F432858488280822E898679E17DF27D60 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 398471 IP address blocks: 157.62.0.0/16 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:82:2e:89:86:79:e1:7d:f2:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=9facd23d-54f9-45e5-a83e-779eebb3f8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a9:c1:75:4e:46:61:62:c9:21:e9:c5:83:94: a6:dc:0f:77:2f:54:03:37:63:0f:10:08:22:83:36: de:9c:c0:db:2c:57:59:e7:25:4c:f0:55:81:c1:77: 98:8c:ad:eb:07:16:43:1d:4d:9e:79:58:58:6c:3b: ad:00:e6:67:d5:da:19:0d:6b:13:68:1f:a5:f6:f7: 11:39:f4:01:5f:e2:7c:e0:1f:bb:53:7c:9b:b6:cb: 25:db:24:ca:37:ce:66:3f:18:f4:b5:36:c3:ee:b3: 31:b8:c5:3c:f8:bb:f7:da:fa:d2:dc:ae:1b:2f:80: 4b:e4:0c:32:53:bf:59:cc:48:b1:73:d2:8a:42:6d: 1e:f1:2c:f3:bb:1f:11:02:0a:54:fd:f0:4f:66:d1: 8b:c3:36:cd:e0:a6:a7:6f:03:8c:dc:dd:20:86:c3: d9:b6:e7:82:69:0d:82:d5:33:13:ef:6a:33:c5:de: 24:be:f4:45:8d:33:23:a5:3f:f6:29:a1:97:89:51: a8:bc:9e:ea:6e:35:9c:bb:b2:c0:88:06:61:f8:32: 4b:7b:78:9a:49:02:84:02:61:08:65:a3:c0:98:75: 03:e0:87:e1:13:52:51:f6:ac:2d:5d:85:b4:d0:79: ce:4f:e7:50:14:0b:b0:47:1d:f5:3d:0e:47:89:9a: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9C:01:23:CE:9D:3C:8D:82:D7:24:66:0E:3E:12:AB:74:68:7D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 157.62.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:74:c7:35:6e:8b:9b:2a:d5:ee:a9:b9:4d:b7:69:48:c0:37: ef:4e:0e:7d:4f:e1:c9:95:68:53:64:2b:62:d0:84:18:e1:d6: 81:54:a2:a3:75:40:0d:ee:81:bb:5a:68:72:08:6a:12:52:a6: 2e:a4:9c:83:00:b7:a8:db:11:c8:63:14:fe:64:27:a0:9c:7b: bb:26:52:15:99:dc:7e:8a:ea:56:ca:c6:82:71:43:c2:2b:08: cc:63:7d:44:9a:c2:ab:ec:1e:e7:82:d2:ca:c7:63:3e:79:37: 96:60:1b:05:83:5b:e5:27:96:02:0d:b5:d2:71:f3:d1:e6:4c: 4a:8b:b7:68:06:d1:07:76:42:b2:5d:b8:f2:63:85:7d:a7:f8: 2c:a9:0c:1c:dd:f3:6e:64:ac:45:63:5e:e5:d8:64:f8:05:db: b6:dc:a1:6e:ca:da:35:d2:f8:4b:1f:44:bb:54:fb:2d:4d:64: 88:98:03:9e:2c:8d:db:7c:a3:c2:73:7f:d0:60:e4:ed:33:c5: ed:46:a7:88:d0:71:e7:44:47:d8:81:26:4d:24:f0:39:11:b5: e6:c5:fc:bc:80:6c:ab:9a:aa:c2:70:ff:95:c7:60:b8:b1:11: 77:e8:f4:77:a0:db:7d:e2:3e:0d:96:fc:a4:83:42:b5:de:4f: 51:ef:f3:17 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiCgIIuiYZ54X3yfWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk OWZhY2QyM2QtNTRmOS00NWU1LWE4M2UtNzc5ZWViYjNmOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqnBdU5GYWLJIenFg5Sm3A93L1QDN2MPEAgi gzbenMDbLFdZ5yVM8FWBwXeYjK3rBxZDHU2eeVhYbDutAOZn1doZDWsTaB+l9vcR OfQBX+J84B+7U3ybtssl2yTKN85mPxj0tTbD7rMxuMU8+Lv32vrS3K4bL4BL5Awy U79ZzEixc9KKQm0e8Szzux8RAgpU/fBPZtGLwzbN4KanbwOM3N0ghsPZtueCaQ2C 1TMT72ozxd4kvvRFjTMjpT/2KaGXiVGovJ7qbjWcu7LAiAZh+DJLe3iaSQKEAmEI ZaPAmHUD4IfhE1JR9qwtXYW00HnOT+dQFAuwRx31PQ5HiZoL9QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPWcASPOnTyNgtckZg4+Eqt0aH1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvNzk1ZmEwN2EtMTNhZi0z NDRhLTgxYzUtMzg1ODVkNjdjODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnT4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAP3THNW6LmyrV7qm5TbdpSMA3704OfU/hyZVoU2QrYtCEGOHWgVSio3VA De6Bu1pocghqElKmLqScgwC3qNsRyGMU/mQnoJx7uyZSFZncforqVsrGgnFDwisI zGN9RJrCq+we54LSysdjPnk3lmAbBYNb5SeWAg210nHz0eZMSou3aAbRB3ZCsl24 8mOFfaf4LKkMHN3zbmSsRWNe5dhk+AXbttyhbsraNdL4Sx9Eu1T7LU1kiJgDniyN 23yjwnN/0GDk7TPF7UaniNBx50RH2IEmTSTwORG15sX8vIBsq5qqwnD/lcdguLER d+j0d6DbfeI+DZb8pINCtd5PUe/zFw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:36 2025 by rpki-client