$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d848b452-a2a9-3290-b0cd-f018232d8199.roa File: d848b452-a2a9-3290-b0cd-f018232d8199.roa (raw, json) Hash identifier: jk2kp6SDg+7+oE1BnKdqAbgJuo288yL4xtBLFkyVUB8= Subject key identifier: 66:54:54:06:8D:86:9B:67:E2:68:E5:FF:F1:B2:0F:6B:FB:11:F5:C8 Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Certificate serial: 010D0C9F43285848C5822A3AF3F572E1E9B76400 Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d848b452-a2a9-3290-b0cd-f018232d8199.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 207.126.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2a:3a:f3:f5:72:e1:e9:b7:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6973e014-c7e6-4582-a35f-10b6567ffdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a1:c3:a5:ca:54:9a:72:bd:e5:ed:17:0a:2a: a1:09:b6:63:62:9d:30:e7:17:cf:8f:93:1c:03:99: 8b:27:4c:5e:ee:74:af:65:19:a9:9f:af:04:f2:e9: b6:5d:a9:95:49:9d:2a:d6:a6:b8:83:1d:18:66:40: 1f:72:8e:51:79:ed:85:d0:b6:2d:94:e2:2b:c1:7f: 6a:0b:49:80:99:ab:0e:78:d7:8f:97:bb:67:f8:2d: 3e:b4:5d:ee:ae:e9:6f:84:20:51:7b:ea:82:9d:e5: 65:64:04:81:46:35:b5:3c:6c:f1:ab:96:a8:7b:f7: 86:c6:ba:df:29:b6:0a:10:6b:88:a3:d8:91:66:ff: 87:18:f2:b1:9b:1a:ec:8a:07:4f:80:79:88:7c:2e: 1b:14:3c:39:84:8c:dd:e8:06:15:be:25:a5:7c:a3: 79:92:2b:98:cd:20:cd:86:bf:3e:39:ad:a8:fe:15: 52:73:40:81:37:cd:e2:f1:17:d1:7a:6c:59:92:ed: b4:2a:9c:64:32:e0:0d:f8:5a:ff:c7:80:2e:52:28: 36:3d:34:b1:a7:1f:fd:ad:73:c8:09:4f:f5:9d:74: d4:08:39:f6:63:d9:d1:94:a5:51:17:86:40:c7:0b: 67:56:27:b9:7e:e0:26:80:e7:b3:e0:a6:5a:1f:7d: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:54:54:06:8D:86:9B:67:E2:68:E5:FF:F1:B2:0F:6B:FB:11:F5:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d848b452-a2a9-3290-b0cd-f018232d8199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl X509v3 Authority Key Identifier: keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer sbgp-ipAddrBlock: critical IPv4: 207.126.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f6:02:dc:91:41:c0:ca:da:fb:98:c2:9c:9a:a9:9e:f8:81: 9f:59:f4:bd:26:41:78:df:f7:d9:2f:68:f0:3b:82:bc:47:96: 3d:4b:5b:16:a4:e5:b2:0b:c8:59:16:f7:29:a5:0d:25:64:91: b4:28:f6:83:dd:87:ba:d2:1c:21:2b:16:75:0d:7c:c2:39:d3: 77:7a:5f:0a:9a:9d:11:6b:69:3e:a0:c9:e1:81:c1:ee:e1:08: b2:91:a6:2c:af:5f:10:6e:b2:05:5a:8e:9d:e5:e2:0e:d6:2a: 58:29:ea:cc:d6:60:0d:3a:a1:62:0a:aa:95:0c:95:f7:b0:7f: ee:0b:89:92:f3:03:4a:9a:92:47:fc:2c:d0:9e:90:e0:f1:da: f4:f7:aa:4a:f8:f8:40:f8:e8:af:93:d1:09:e1:8c:e8:65:c8: b7:cc:2e:4a:42:8c:fa:15:55:c5:35:47:12:41:24:25:0f:30: 6d:fb:79:97:52:3e:6d:97:39:46:05:48:cf:13:f3:85:2d:6c: dd:cd:70:99:c6:7e:ce:5b:2a:0f:b7:37:48:a9:71:08:30:c4: 1d:09:df:58:98:bf:16:06:34:e2:3a:17:4e:fd:ed:81:3c:19: 4b:89:4f:9e:a3:bd:48:6c:2e:aa:69:9a:07:00:a4:5d:6a:7a: 14:3b:a1:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgio68/Vy4em3ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm ZjYxMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Njk3M2UwMTQtYzdlNi00NTgyLWEzNWYtMTBiNjU2N2ZmZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6HDpcpUmnK95e0XCiqhCbZjYp0w5xfPj5Mc A5mLJ0xe7nSvZRmpn68E8um2XamVSZ0q1qa4gx0YZkAfco5Ree2F0LYtlOIrwX9q C0mAmasOeNePl7tn+C0+tF3urulvhCBRe+qCneVlZASBRjW1PGzxq5aoe/eGxrrf KbYKEGuIo9iRZv+HGPKxmxrsigdPgHmIfC4bFDw5hIzd6AYVviWlfKN5kiuYzSDN hr8+Oa2o/hVSc0CBN83i8RfRemxZku20KpxkMuAN+Fr/x4AuUig2PTSxpx/9rXPI CU/1nXTUCDn2Y9nRlKVRF4ZAxwtnVie5fuAmgOez4KZaH327cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZUVAaNhptn4mjl//GyD2v7EfXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3 YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZDg0OGI0NTItYTJhOS0z MjkwLWIwY2QtZjAxODIzMmQ4MTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr2AtyRQcDK2vuYwpyaqZ74gZ9Z9L0mQXjf99kvaPA7grxHlj1LWxak 5bILyFkW9ymlDSVkkbQo9oPdh7rSHCErFnUNfMI503d6XwqanRFraT6gyeGBwe7h CLKRpiyvXxBusgVajp3l4g7WKlgp6szWYA06oWIKqpUMlfewf+4LiZLzA0qakkf8 LNCekODx2vT3qkr4+ED46K+T0QnhjOhlyLfMLkpCjPoVVcU1RxJBJCUPMG37eZdS Pm2XOUYFSM8T84UtbN3NcJnGfs5bKg+3N0ipcQgwxB0J31iYvxYGNOI6F0797YE8 GUuJT56jvUhsLqppmgcApF1qehQ7oUY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:40 2025 by rpki-client