$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa File: 66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa (raw, json) Hash identifier: jaBMUW8UdlWdKH4Vk70jWNTHnuVxcobzUt64wbhq6NE= Subject key identifier: 7E:7D:18:78:66:29:77:D2:67:CF:53:C0:04:2E:20:5B:75:A5:AC:8D Certificate issuer: /CN=190a907f-bde1-4ae9-a43b-80d0b516600a Certificate serial: 010D0C9F43285848B6260DA889C566B730BA3700 Authority key identifier: 08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 398846 IP address blocks: 156.142.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:0d:a8:89:c5:66:b7:30:ba:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190a907f-bde1-4ae9-a43b-80d0b516600a Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=fa7ae9fb-ffa0-41e3-aa43-290dcbc8dd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:17:3e:96:12:95:2a:d6:c0:99:a8:66:1b:2a: e6:ad:a3:3e:71:0a:a8:e8:fb:87:ae:95:d4:6d:9b: da:b6:b7:bd:4a:77:d1:20:8f:d7:fe:c1:95:94:07: ac:28:2e:ca:78:f6:ca:59:8d:5a:d3:02:2e:0e:e8: a3:fc:b6:bf:e8:f3:9a:05:48:0d:b2:89:4a:14:52: c8:92:1b:18:7d:1d:fc:88:e0:bf:7a:10:97:3d:65: 5b:a7:01:41:ac:f8:e2:43:f7:0e:70:0b:61:7c:bf: a6:4d:a4:dc:97:01:66:44:e2:ac:7f:19:b7:2e:ec: 7c:aa:a8:3b:4a:65:ab:1c:a1:db:5a:5c:5c:e1:49: 5a:39:e4:17:52:3e:6b:f8:6e:d1:b5:51:9b:95:e4: c5:68:3f:c7:30:4b:fe:9d:31:4d:02:63:26:ac:88: 89:86:77:15:d7:50:e4:e4:9d:59:24:ff:5d:81:43: 96:29:bb:08:0b:20:8e:c0:18:cc:6c:a7:6b:aa:a2: 00:c5:be:65:b3:73:bf:23:09:f2:0b:aa:2b:0c:35: 6c:93:70:6c:24:12:50:47:0d:b5:d8:91:fb:b7:fe: df:11:0a:32:e6:2b:52:0d:b6:4d:b8:7a:73:19:94: 1d:97:da:a8:bf:72:97:a1:93:92:51:8c:d6:32:37: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7D:18:78:66:29:77:D2:67:CF:53:C0:04:2E:20:5B:75:A5:AC:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/66a7cafc-52e8-37ff-be50-8baddc2ec6aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.crl X509v3 Authority Key Identifier: keyid:08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer sbgp-ipAddrBlock: critical IPv4: 156.142.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:17:65:04:5d:68:1f:3c:54:d9:7d:28:50:e8:7f:db:00:af: 5f:08:d4:b0:fc:70:41:b6:5c:2c:aa:3e:50:51:6d:43:06:1e: f0:24:43:f6:3a:15:c1:d6:36:ff:42:28:29:16:8f:bd:09:ae: fe:ec:c9:c3:98:00:cb:78:48:bb:b6:7f:4e:ba:84:50:ae:f6: 15:41:15:1b:5c:5a:be:c2:61:15:96:6c:46:f6:89:15:77:5b: ac:98:a2:fb:b3:9b:00:0b:ee:1b:6b:b2:f5:8c:52:59:d5:2f: 5a:2b:fc:81:5a:99:57:90:96:73:04:97:77:ae:4f:5e:8b:a1: 61:60:e7:6e:ba:9b:6a:fd:c7:42:ea:d2:c3:f5:88:4b:f0:02: 35:52:22:93:23:7d:38:1c:42:99:a1:09:d5:af:db:3a:ee:26: 1a:46:49:f3:ee:89:12:b6:c9:f8:8b:27:4f:3f:f2:90:ed:22: 53:53:96:f7:13:53:58:27:4c:2d:11:3b:51:59:7f:14:36:69: 87:5c:4d:c8:da:5b:64:00:b7:7d:0b:c9:b0:36:e4:4e:b1:d3: e5:df:5d:9b:84:07:21:5f:ff:76:e7:ca:27:0c:07:a6:8f:28: 32:96:f1:d7:21:d0:cf:40:a5:19:dc:98:b0:dc:a0:22:6c:51: 2c:80:1b:26 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi2Jg2oicVmtzC6NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkwYTkwN2YtYmRlMS00YWU5LWE0M2ItODBkMGI1MTY2 MDBhMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk ZmE3YWU5ZmItZmZhMC00MWUzLWFhNDMtMjkwZGNiYzhkZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Rc+lhKVKtbAmahmGyrmraM+cQqo6PuHrpXU bZvatre9SnfRII/X/sGVlAesKC7KePbKWY1a0wIuDuij/La/6POaBUgNsolKFFLI khsYfR38iOC/ehCXPWVbpwFBrPjiQ/cOcAthfL+mTaTclwFmROKsfxm3Lux8qqg7 SmWrHKHbWlxc4UlaOeQXUj5r+G7RtVGbleTFaD/HMEv+nTFNAmMmrIiJhncV11Dk 5J1ZJP9dgUOWKbsICyCOwBjMbKdrqqIAxb5ls3O/IwnyC6orDDVsk3BsJBJQRw21 2JH7t/7fEQoy5itSDbZNuHpzGZQdl9qov3KXoZOSUYzWMje3owIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH59GHhmKXfSZ89TwAQuIFt1payNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xOTBh OTA3Zi1iZGUxLTRhZTktYTQzYi04MGQwYjUxNjYwMGEvNjZhN2NhZmMtNTJlOC0z N2ZmLWJlNTAtOGJhZGRjMmVjNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTkwYTkwN2YtYmRlMS00YWU5LWE0 M2ItODBkMGI1MTY2MDBhLzE5MGE5MDdmLWJkZTEtNGFlOS1hNDNiLTgwZDBiNTE2 NjAwYS5jcmwwHwYDVR0jBBgwFoAUCDqvMbfAYQkjMB45jpx1buiBzMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xOTBhOTA3Zi1iZGUxLTRhZTktYTQzYi04MGQw YjUxNjYwMGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnI4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGhdlBF1oHzxU2X0oUOh/2wCvXwjUsPxwQbZcLKo+UFFtQwYe8CRD9joV wdY2/0IoKRaPvQmu/uzJw5gAy3hIu7Z/TrqEUK72FUEVG1xavsJhFZZsRvaJFXdb rJii+7ObAAvuG2uy9YxSWdUvWiv8gVqZV5CWcwSXd65PXouhYWDnbrqbav3HQurS w/WIS/ACNVIikyN9OBxCmaEJ1a/bOu4mGkZJ8+6JErbJ+IsnTz/ykO0iU1OW9xNT WCdMLRE7UVl/FDZph1xNyNpbZAC3fQvJsDbkTrHT5d9dm4QHIV//dufKJwwHpo8o Mpbx1yHQz0ClGdyYsNygImxRLIAbJg== -----END CERTIFICATE-----Generated at Sat Apr 12 00:20:53 2025 by rpki-client