$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa File: fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa (raw, json) Hash identifier: lMqogRvVw7kIHcUzXqE49EbUg28k+67dKSlxjTsk5GM= Subject key identifier: 1D:7E:EA:59:9C:B3:99:F1:16:9D:2F:B9:76:15:F4:C3:05:15:B3:61 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285848CAF3C04EE933C5746F8A9EC0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa Signing time: Thu 06 Feb 2025 12:51:18 +0000 ROA not before: Thu 06 Feb 2025 12:51:18 +0000 ROA not after: Wed 07 May 2025 11:51:18 +0000 asID: 14618 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ca:f3:c0:4e:e9:33:c5:74:6f:8a:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Feb 6 12:51:18 2025 GMT Not After : May 7 11:51:18 2025 GMT Subject: CN=eb065be8-4844-4018-a1fa-6eef3083db6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b9:98:1e:3f:3c:63:61:57:e5:69:4b:0f:58: 7d:56:86:68:8e:36:23:aa:0f:e3:59:5a:61:86:5b: 84:40:e1:03:cb:94:04:99:9d:d6:da:59:a0:58:a6: 51:38:8c:97:b9:d5:23:4d:9a:2c:60:d6:26:42:8f: 33:51:b6:d6:3d:29:5c:61:ab:d3:20:21:15:df:3e: 52:a7:48:a5:47:d5:04:62:b8:60:a2:0d:c9:3e:7f: d1:c7:84:0d:85:c0:5e:93:c3:57:12:8e:7a:48:c9: ae:00:e8:4f:af:23:88:ef:6f:6a:10:8e:2e:b6:98: 1b:39:a5:dd:c7:2d:0b:6c:a0:85:2e:0c:20:2a:7a: 51:a7:4a:5a:27:85:e7:99:d1:46:07:f3:2a:25:fe: a2:60:d4:d8:b5:55:89:a7:59:fb:25:54:f2:b0:c7: 75:89:29:f7:f7:a3:e3:1c:db:9a:50:10:d9:d4:71: 12:4e:ba:a7:35:c5:38:95:fc:f2:c4:48:8b:da:cc: fa:ed:b6:05:48:49:70:03:98:6f:f1:a9:f2:34:bd: ab:4c:d7:e9:77:9c:05:b4:cd:29:31:6f:17:76:87: 39:80:6e:ae:ed:ae:90:b1:99:1a:cf:88:bd:a9:45: 33:a9:2c:b4:0d:88:ff:ac:92:19:1f:5f:f6:3d:e1: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:EA:59:9C:B3:99:F1:16:9D:2F:B9:76:15:F4:C3:05:15:B3:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:53:48:37:8b:19:a5:16:ca:e5:2f:06:2c:4b:5c:4a:79:8a: 73:1c:54:a2:3f:18:fa:de:65:fb:37:b1:0d:06:84:48:ce:83: fd:fd:32:12:d4:16:5d:e4:7b:2e:bd:b9:17:0c:34:cd:02:b5: 69:65:a9:c3:19:e5:5b:94:63:1c:43:f5:f4:af:4d:26:bb:11: 69:16:64:78:ed:dd:ce:8c:20:c1:16:cc:63:1b:bf:c5:eb:30: c3:10:fb:69:f4:63:76:c6:89:0d:3a:26:d1:ce:0c:a8:78:a4: 02:82:3e:3b:93:0f:3a:72:cc:14:5f:d2:9f:a0:12:e5:e1:29: eb:8d:8a:ed:0a:ac:35:63:4d:45:27:ed:2b:49:23:b3:c3:1f: 3c:fe:df:ad:5f:2b:55:b9:57:da:e1:39:cc:65:b9:4d:6f:94: 61:e3:9b:3f:31:35:2d:31:70:2e:48:d8:9d:1a:7f:b6:92:80: 74:52:be:d2:28:b5:ff:0e:ff:e0:15:a5:1a:02:86:90:ef:a5: 5f:d9:49:e8:a0:fa:80:92:94:43:4d:8b:27:e8:5e:d1:bf:63: da:83:0b:20:96:2e:0d:12:7a:01:5a:ef:0a:64:cc:4a:32:6e: f8:a9:a8:11:7d:5d:92:90:5e:c0:cb:ec:24:b3:77:3e:5d:95: f3:de:d6:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjK88BO6TPFdG+KnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDIwNjEyNTExOFoXDTI1MDUwNzExNTExOFowLzEtMCsGA1UEAxMk ZWIwNjViZTgtNDg0NC00MDE4LWExZmEtNmVlZjMwODNkYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7mYHj88Y2FX5WlLD1h9VoZojjYjqg/jWVph hluEQOEDy5QEmZ3W2lmgWKZROIyXudUjTZosYNYmQo8zUbbWPSlcYavTICEV3z5S p0ilR9UEYrhgog3JPn/Rx4QNhcBek8NXEo56SMmuAOhPryOI729qEI4utpgbOaXd xy0LbKCFLgwgKnpRp0paJ4XnmdFGB/MqJf6iYNTYtVWJp1n7JVTysMd1iSn396Pj HNuaUBDZ1HESTrqnNcU4lfzyxEiL2sz67bYFSElwA5hv8anyNL2rTNfpd5wFtM0p MW8Xdoc5gG6u7a6QsZkaz4i9qUUzqSy0DYj/rJIZH1/2PeEr9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1+6lmcs5nxFp0vuXYV9MMFFbNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZmIyMTkxZDgtNzRhMi0z MGNiLWJmZmYtYzc5NGE2ZGNhYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9TSDeLGaUWyuUvBixLXEp5inMcVKI/GPreZfs3sQ0GhEjOg/39MhLU Fl3key69uRcMNM0CtWllqcMZ5VuUYxxD9fSvTSa7EWkWZHjt3c6MIMEWzGMbv8Xr MMMQ+2n0Y3bGiQ06JtHODKh4pAKCPjuTDzpyzBRf0p+gEuXhKeuNiu0KrDVjTUUn 7StJI7PDHzz+361fK1W5V9rhOcxluU1vlGHjmz8xNS0xcC5I2J0af7aSgHRSvtIo tf8O/+AVpRoChpDvpV/ZSeig+oCSlENNiyfoXtG/Y9qDCyCWLg0SegFa7wpkzEoy bvipqBF9XZKQXsDL7CSzdz5dlfPe1hk= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:04 2025 by rpki-client