$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa File: 7b56145a-292a-3242-b062-ea6188b785e0.roa (raw, json) Hash identifier: ff8ji1M3eHwarZ25BHCTVMrhyFc9W4/DSVmkzEJqngU= Subject key identifier: 25:79:7A:0A:7A:52:9B:07:AF:5F:36:26:29:18:E3:52:7D:7D:46:AE Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584910E180F7FEC770E1A6702880 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 16276 IP address blocks: 199.48.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:80:f7:fe:c7:70:e1:a6:70:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=be74a8ab-4a07-4793-a473-3e472a3c5b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:fb:ce:8a:88:92:54:00:ac:d2:f9:68:e6: c1:d5:80:2a:da:c4:97:50:d3:c3:09:fd:ac:f5:73: 64:7b:12:e1:5b:f3:ec:f6:f8:dc:54:1c:8e:7d:6a: ae:6c:e5:73:d6:d8:7a:b8:32:1f:4a:1b:08:8a:56: 40:ac:54:c6:8b:ed:ec:8f:73:04:96:04:83:96:5f: fb:ab:aa:2f:c3:da:a6:4f:cd:83:f5:8b:19:5a:e7: 12:5d:18:04:ec:37:0e:8f:0c:3c:c4:7b:a6:8d:af: 26:5a:01:5d:dd:e8:40:1e:36:cc:b5:9a:49:4e:04: 20:2e:71:b4:e1:18:d9:be:ac:31:6c:ae:29:42:42: c3:92:b2:10:d7:23:25:90:75:12:9e:ec:f6:46:78: 54:ae:f4:23:13:a2:7a:b6:e3:88:70:1d:6e:f6:d8: 79:37:68:f2:fa:4b:be:d9:75:41:de:c1:7e:88:86: 04:ed:be:5e:3b:c6:29:cd:d1:70:40:e8:02:7f:6f: f9:ba:2f:12:63:5f:ae:58:23:dd:f7:7f:ed:a0:6c: a7:15:85:e6:f9:c6:cc:43:0d:20:10:00:97:dd:11: 76:21:8b:f7:39:b1:43:37:4f:c6:33:81:66:06:fb: f2:71:36:a9:c7:e0:8c:cc:0a:96:48:dc:59:b4:2c: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:79:7A:0A:7A:52:9B:07:AF:5F:36:26:29:18:E3:52:7D:7D:46:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:47:44:54:40:a2:22:e2:1f:32:b5:4a:c0:67:97:3d:95:7e: 5f:b5:ab:89:5a:e4:e4:bd:21:d3:82:3c:9d:5d:88:39:3e:c8: 06:3f:aa:44:0e:34:ab:58:48:8b:20:31:87:c2:a9:22:50:7a: ac:d8:84:f6:cd:93:8a:5e:5c:ab:4e:10:e7:62:eb:9f:e6:c5: 45:24:00:cd:74:4b:7b:4c:0d:8e:87:5a:15:a2:c8:e7:c6:13: 45:d7:3b:95:81:5c:ba:10:95:79:6e:64:d8:86:f1:9a:6c:6e: b5:27:0e:ce:e0:aa:95:cd:85:15:9b:98:da:c1:f2:2d:8a:4d: 05:bc:c6:b5:c7:9c:e9:82:a4:be:6a:38:01:05:ed:0e:50:c8: b8:46:ba:d4:ec:f1:75:bd:14:24:bb:7a:46:9a:37:07:e7:05: c3:0f:ed:18:25:eb:2e:fe:67:fe:88:58:b5:34:1a:ff:ac:6f: eb:56:7e:aa:7f:4e:62:e7:72:8f:18:5c:b7:3a:f8:c2:5d:8b: dd:9c:0c:57:d6:14:10:d1:85:95:38:50:15:93:b8:91:fc:69: d5:2f:00:2a:66:78:25:33:19:97:38:94:f4:78:6d:e0:0b:be: 51:64:48:5f:74:fe:b8:23:d8:ee:a6:86:1d:b5:8b:5f:1e:9f: c8:42:9c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4YD3/sdw4aZwKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk YmU3NGE4YWItNGEwNy00NzkzLWE0NzMtM2U0NzJhM2M1YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP77zoqIklQArNL5aObB1YAq2sSXUNPDCf2s 9XNkexLhW/Ps9vjcVByOfWqubOVz1th6uDIfShsIilZArFTGi+3sj3MElgSDll/7 q6ovw9qmT82D9YsZWucSXRgE7DcOjww8xHumja8mWgFd3ehAHjbMtZpJTgQgLnG0 4RjZvqwxbK4pQkLDkrIQ1yMlkHUSnuz2RnhUrvQjE6J6tuOIcB1u9th5N2jy+ku+ 2XVB3sF+iIYE7b5eO8YpzdFwQOgCf2/5ui8SY1+uWCPd93/toGynFYXm+cbMQw0g EACX3RF2IYv3ObFDN0/GM4FmBvvycTapx+CMzAqWSNxZtCxIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV5egp6UpsHr182JikY41J9fUauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvN2I1NjE0NWEtMjkyYS0z MjQyLWIwNjItZWE2MTg4Yjc4NWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFHRFRAoiLiHzK1SsBnlz2Vfl+1q4la5OS9IdOCPJ1diDk+yAY/qkQO NKtYSIsgMYfCqSJQeqzYhPbNk4peXKtOEOdi65/mxUUkAM10S3tMDY6HWhWiyOfG E0XXO5WBXLoQlXluZNiG8ZpsbrUnDs7gqpXNhRWbmNrB8i2KTQW8xrXHnOmCpL5q OAEF7Q5QyLhGutTs8XW9FCS7ekaaNwfnBcMP7Rgl6y7+Z/6IWLU0Gv+sb+tWfqp/ TmLnco8YXLc6+MJdi92cDFfWFBDRhZU4UBWTuJH8adUvACpmeCUzGZc4lPR4beAL vlFkSF90/rgj2O6mhh21i18en8hCnMI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:17:53 2025 by rpki-client