$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa File: 13ab8837-7399-34cf-9991-a8cf72dc3218.roa (raw, json) Hash identifier: S5JZ4Gs2eMUSB9ukAHhPW6QrRKZXfbyr0+seRj+AWdo= Subject key identifier: 70:97:49:B7:72:82:A6:A1:0B:CB:FB:81:62:85:38:E9:FC:1A:29:65 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F432858491750E88F44D938C761F8FE88 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa Signing time: Wed 05 Mar 2025 21:20:26 +0000 ROA not before: Wed 05 Mar 2025 21:20:26 +0000 ROA not after: Tue 03 Jun 2025 20:20:26 +0000 asID: 14618 IP address blocks: 159.172.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:50:e8:8f:44:d9:38:c7:61:f8:fe:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Mar 5 21:20:26 2025 GMT Not After : Jun 3 20:20:26 2025 GMT Subject: CN=f6536b29-b596-4f90-a965-56173b61f9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:b4:14:3b:a1:3d:6e:6a:77:8e:75:30:78: 17:68:eb:90:9c:fa:5e:16:72:24:6d:28:82:ab:c9: 84:9c:dc:49:fa:5a:83:4e:5c:68:8e:a9:0e:69:3a: 89:ff:90:62:8b:b5:dd:27:ce:be:fc:67:91:9d:2d: ec:54:0c:3f:11:52:32:88:36:f3:b0:9a:93:e5:81: 3e:0b:3b:34:1f:81:fe:67:45:bd:50:21:6a:10:86: 74:a6:d3:8d:82:0c:23:e6:ac:40:41:95:b3:e0:c4: 0a:41:7b:e6:4c:24:a3:71:d8:f0:99:5e:b8:94:61: ab:06:13:b3:bc:df:37:9a:db:8f:72:a1:99:64:07: 04:71:8d:d8:93:70:6e:cd:f8:6b:01:bd:a4:4d:5a: a2:ce:ae:a2:28:ec:ca:41:cf:87:56:a8:d9:64:41: 59:44:fa:69:57:4e:dc:c5:e0:33:00:1f:d4:62:19: 9d:31:7b:b4:9c:f6:3b:7d:65:83:5d:3e:76:03:1c: 71:e1:57:40:73:bc:23:c7:be:72:5f:b1:2c:f7:9c: a3:87:11:0a:0e:bc:0b:2c:6d:26:04:83:6c:84:e5: e2:d7:d8:65:b4:8e:7b:07:2e:c7:76:27:4e:73:31: ba:ee:ad:ba:03:1c:b3:be:a5:dc:09:57:5d:fd:af: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:49:B7:72:82:A6:A1:0B:CB:FB:81:62:85:38:E9:FC:1A:29:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:90:51:96:ee:26:fc:3a:73:ae:92:ea:bf:8c:9a:e2:28:bd: 30:b9:03:8e:b2:ca:c2:6d:3d:9a:f8:9f:50:0e:78:51:df:b4: 64:13:74:55:2a:12:d6:66:3e:26:76:67:37:16:e6:28:67:2a: 51:7a:5e:40:88:ce:41:e3:91:55:d6:9b:c6:aa:71:b8:25:2f: 9b:53:b0:5f:cb:a6:9f:64:ab:10:37:c8:d6:06:8f:07:54:4a: 5c:53:d4:11:84:a0:07:9d:11:7a:34:5e:0b:a8:7a:5f:90:16: 65:9c:de:8d:97:2e:9d:92:d3:23:6d:ef:f8:39:78:bf:16:17: b0:c7:c1:55:84:78:17:7e:98:c4:35:ce:88:d1:c8:71:44:51: 8e:19:5d:cd:23:dd:02:c2:e8:48:b2:a0:8c:af:d8:3b:f4:b6: e4:73:dc:05:7f:da:ba:bf:be:27:4b:b9:b0:77:38:f6:0f:20: 89:e6:91:aa:48:90:08:b8:57:71:22:7d:96:11:ca:7b:35:a5: 47:29:1b:98:e8:6b:7e:e2:5e:7a:41:67:ae:f9:1a:d0:c1:e6: 5b:18:86:29:a6:c2:b4:88:7d:80:47:4f:d2:d3:47:7c:34:ae: 1d:6c:c8:d3:d3:39:dd:1a:fe:02:1d:00:d4:73:36:7d:2e:74: c2:2d:ea:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkXUOiPRNk4x2H4/ogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDMwNTIxMjAyNloXDTI1MDYwMzIwMjAyNlowLzEtMCsGA1UEAxMk ZjY1MzZiMjktYjU5Ni00ZjkwLWE5NjUtNTYxNzNiNjFmOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBW0FDuhPW5qd451MHgXaOuQnPpeFnIkbSiC q8mEnNxJ+lqDTlxojqkOaTqJ/5Bii7XdJ86+/GeRnS3sVAw/EVIyiDbzsJqT5YE+ Czs0H4H+Z0W9UCFqEIZ0ptONggwj5qxAQZWz4MQKQXvmTCSjcdjwmV64lGGrBhOz vN83mtuPcqGZZAcEcY3Yk3BuzfhrAb2kTVqizq6iKOzKQc+HVqjZZEFZRPppV07c xeAzAB/UYhmdMXu0nPY7fWWDXT52Axxx4VdAc7wjx75yX7Es95yjhxEKDrwLLG0m BINshOXi19hltI57By7HdidOczG67q26AxyzvqXcCVdd/a/ccwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCXSbdygqahC8v7gWKFOOn8GillMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMTNhYjg4MzctNzM5OS0z NGNmLTk5OTEtYThjZjcyZGMzMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGn6yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASQUZbuJvw6c66S6r+MmuIovTC5A46yysJtPZr4n1AOeFHftGQTdFUq EtZmPiZ2ZzcW5ihnKlF6XkCIzkHjkVXWm8aqcbglL5tTsF/Lpp9kqxA3yNYGjwdU SlxT1BGEoAedEXo0Xguoel+QFmWc3o2XLp2S0yNt7/g5eL8WF7DHwVWEeBd+mMQ1 zojRyHFEUY4ZXc0j3QLC6EiyoIyv2Dv0tuRz3AV/2rq/vidLubB3OPYPIInmkapI kAi4V3EifZYRyns1pUcpG5joa37iXnpBZ675GtDB5lsYhimmwrSIfYBHT9LTR3w0 rh1syNPTOd0a/gIdANRzNn0udMIt6jg= -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:03 2025 by rpki-client