$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa File: 0156459b-1048-3ac6-b762-361ee7d49132.roa (raw, json) Hash identifier: g693eCu7MtrwtYxLftERCUSAhUGdWomjgRlz/hnexRk= Subject key identifier: C6:6C:A2:A4:BA:32:19:DD:E4:5E:C8:06:F8:16:E5:0B:69:6F:EF:F4 Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F43285849DC8FC65CCD1002EC1671BE4C Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 204.79.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c6:5c:cd:10:02:ec:16:71:be:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=dfd27c9f-c074-4c83-aa0f-39454aaaba54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:e1:f7:89:7f:60:3b:4e:83:47:b6:4a:87: ca:ae:8a:3e:e7:91:c3:ef:28:1e:da:1c:7f:4d:7b: 4d:4e:de:07:8d:56:06:c4:78:52:93:d9:dd:37:9b: c7:ab:72:28:2a:33:77:57:95:46:3c:df:91:90:1b: 58:ea:70:4a:c0:b9:24:33:02:63:48:56:78:fd:d7: 08:0e:9b:af:d2:49:a4:42:6c:55:94:d7:9f:ad:e2: 85:71:d6:b0:be:14:04:5b:2f:ea:44:aa:31:2b:e9: b5:12:02:24:bf:12:50:0b:a0:8a:bb:bb:6e:a0:8a: 71:2a:1f:21:84:56:a7:34:69:27:a1:99:6e:6e:35: 86:4a:d5:fb:2d:1d:c8:6a:0e:85:99:80:17:75:8d: e6:02:11:9d:46:99:d2:84:0d:31:60:43:13:10:0b: 6b:90:a9:cb:5e:4c:47:47:16:8c:f2:87:1d:06:7a: c5:99:97:99:28:8f:d1:c2:81:ff:fd:0e:b0:32:8e: 54:59:2d:3d:03:9c:58:e7:65:21:67:f9:67:fa:dd: 5a:a6:94:72:b3:8b:49:49:b5:15:21:aa:f2:d1:71: 22:0a:cf:09:99:8b:61:92:91:e1:29:48:dc:39:cf: cd:25:88:86:bb:4a:7c:64:59:0f:92:4f:12:01:e1: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6C:A2:A4:BA:32:19:DD:E4:5E:C8:06:F8:16:E5:0B:69:6F:EF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: 204.79.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ec:66:01:6b:a1:b8:b6:7e:f2:60:6b:f1:fa:df:a1:e9:ed: 26:16:ea:2b:d0:94:df:1d:3a:82:4a:0f:f6:56:95:e8:4e:cf: 8d:b1:34:21:01:e2:23:ab:1c:08:66:5c:ca:2b:62:3e:12:fb: 58:f9:1c:a2:2b:c9:79:aa:3c:ce:bf:a8:5f:a2:77:4f:d3:1a: 36:ad:ae:d0:9d:f5:82:d5:ca:41:56:f4:c4:b6:a0:3d:c6:74: 22:cb:c7:55:9b:35:93:cf:d8:2a:29:7e:fc:11:10:65:3a:5f: 17:5b:82:e3:ef:9d:92:f1:73:c9:9f:20:8d:4c:0c:f1:4e:8d: b8:e9:e9:05:e4:cf:44:28:67:4b:7b:26:93:f1:9e:ee:32:b2: 10:ee:45:ce:16:1a:2d:f1:99:86:7a:47:c0:ad:76:95:df:05: 89:0e:e4:b5:42:ff:6e:2d:92:11:5b:44:6a:49:c6:95:41:9e: bf:99:31:fd:63:41:ed:fb:4d:6e:64:1a:eb:08:18:20:27:47: 34:ef:fe:5e:b7:8e:1f:f8:3b:50:aa:9e:63:0a:1c:a6:5a:99: 2c:d0:b8:47:19:f2:ca:70:d3:5e:5b:6d:b0:19:57:91:0b:ab: de:cc:8d:a9:7e:35:b7:39:44:8c:ea:62:f3:02:25:72:7f:70: 78:c5:8f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8ZczRAC7BZxvkwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGZkMjdjOWYtYzA3NC00YzgzLWFhMGYtMzk0NTRhYWFiYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1rh94l/YDtOg0e2SofKroo+55HD7yge2hx/ TXtNTt4HjVYGxHhSk9ndN5vHq3IoKjN3V5VGPN+RkBtY6nBKwLkkMwJjSFZ4/dcI Dpuv0kmkQmxVlNefreKFcdawvhQEWy/qRKoxK+m1EgIkvxJQC6CKu7tuoIpxKh8h hFanNGknoZlubjWGStX7LR3Iag6FmYAXdY3mAhGdRpnShA0xYEMTEAtrkKnLXkxH RxaM8ocdBnrFmZeZKI/RwoH//Q6wMo5UWS09A5xY52UhZ/ln+t1appRys4tJSbUV Iary0XEiCs8JmYthkpHhKUjcOc/NJYiGu0p8ZFkPkk8SAeGjnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZsoqS6Mhnd5F7IBvgW5Qtpb+/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvMDE1NjQ1OWItMTA0OC0z YWM2LWI3NjItMzYxZWU3ZDQ5MTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHsZgFrobi2fvJga/H636Hp7SYW6ivQlN8dOoJKD/ZWlehOz42xNCEB 4iOrHAhmXMorYj4S+1j5HKIryXmqPM6/qF+id0/TGjatrtCd9YLVykFW9MS2oD3G dCLLx1WbNZPP2CopfvwREGU6XxdbguPvnZLxc8mfII1MDPFOjbjp6QXkz0QoZ0t7 JpPxnu4yshDuRc4WGi3xmYZ6R8CtdpXfBYkO5LVC/24tkhFbRGpJxpVBnr+ZMf1j Qe37TW5kGusIGCAnRzTv/l63jh/4O1CqnmMKHKZamSzQuEcZ8spw015bbbAZV5EL q97Mjal+Nbc5RIzqYvMCJXJ/cHjFj7c= -----END CERTIFICATE-----Generated at Fri Jun 6 18:27:59 2025 by rpki-client