$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa File: 4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa (raw, json) Hash identifier: mZdBPzf5vDXF0uCx7iI33eynSlU1XNaLOW1D2MTikbk= Subject key identifier: B8:B5:D7:22:87:63:93:DB:44:48:AB:1F:3A:0A:9D:E2:40:5D:56:E7 Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Certificate serial: 010D0C9F43285849648441D24B832E3526C26420 Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 14299 IP address blocks: 207.135.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:41:d2:4b:83:2e:35:26:c2:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=36a5cc5e-e3b8-4058-97fa-529ecf834efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:a5:82:ac:7f:e4:e4:f5:ca:06:b2:fb:31: 33:b1:fb:23:b0:41:c5:cf:35:6e:05:03:37:42:68: bc:04:aa:a2:24:38:4d:9b:47:cb:95:0b:cf:0d:1e: a1:d3:2d:6c:a6:16:59:78:bd:57:8e:91:f7:2e:fb: 1a:ae:be:a5:9e:ef:7f:4a:e0:76:60:d8:e3:19:19: ff:85:86:30:c3:02:ff:b4:54:fa:d6:7d:72:05:5e: 14:58:cd:41:96:38:4a:e4:79:c8:81:29:a5:c8:b0: bf:fe:6a:bd:74:80:48:08:17:37:5e:b6:a5:7e:f9: d7:7d:2b:53:fa:cf:83:e9:6c:a9:a3:b9:07:30:76: 81:79:0d:44:fc:8f:11:7f:25:2d:74:7d:2d:9a:df: ae:46:e1:d8:6a:b1:97:8f:5a:fd:a5:fc:67:bc:51: cb:02:3f:65:65:de:d0:b5:38:9a:f7:78:9e:3f:6c: 52:c2:43:bb:a5:9d:5d:e0:c2:27:ee:31:c1:6e:04: 05:ab:ed:30:d0:aa:d4:97:96:2c:fb:32:1c:98:6d: 01:66:d8:51:9c:a8:9a:23:1c:24:85:9b:4e:f0:fa: 9b:c6:b8:1b:67:cd:91:22:cb:29:ab:e2:ad:df:67: 63:74:51:be:81:46:df:2c:c0:f3:ca:49:9e:6e:f8: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B5:D7:22:87:63:93:DB:44:48:AB:1F:3A:0A:9D:E2:40:5D:56:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl X509v3 Authority Key Identifier: keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer sbgp-ipAddrBlock: critical IPv4: 207.135.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:33:66:cf:9e:98:5b:57:a3:dc:ae:c6:db:90:84:7b:92:fa: b8:8f:57:32:7c:96:e5:a4:af:7b:64:d6:4e:cd:b2:c2:b8:99: 33:c9:91:29:06:33:cc:4b:a5:18:06:d3:dc:51:03:3a:ef:b6: c6:e4:50:8b:ae:37:c3:25:1b:1f:9f:a6:1e:0d:96:42:ab:92: d6:05:9c:04:ea:16:bd:af:f2:c0:b9:f1:56:ec:67:17:71:8a: 8d:ea:c7:c2:4e:32:0f:e7:c3:c7:42:a8:b5:b9:09:f0:65:f1: c7:39:5c:88:04:3f:7f:10:71:74:7b:0c:54:d9:9e:03:b5:4e: 87:61:42:af:8d:ea:f1:4d:cd:ad:7c:2d:b7:fc:99:ac:8a:77: 0b:42:89:34:49:1b:de:d2:56:aa:10:e6:1f:59:a7:58:22:4e: e4:ce:73:b1:e1:03:a7:31:79:25:5f:b3:c0:5f:3b:fe:58:34: 37:32:97:49:be:02:e8:49:d7:37:2f:3d:d1:70:b2:66:02:a3: 6a:35:81:f3:f0:58:b4:65:a7:16:fe:74:7d:a8:ee:bb:e5:8a: fa:72:04:4f:43:50:c5:9a:b0:16:b6:6d:66:8e:8d:fb:3a:22: ec:8c:bb:d9:91:84:76:25:cc:1b:4d:df:c0:46:ec:49:1e:5a: 03:0f:8d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEHSS4MuNSbCZCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll NWU3MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MzZhNWNjNWUtZTNiOC00MDU4LTk3ZmEtNTI5ZWNmODM0ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Wlgqx/5OT1ygay+zEzsfsjsEHFzzVuBQM3 Qmi8BKqiJDhNm0fLlQvPDR6h0y1sphZZeL1XjpH3Lvsarr6lnu9/SuB2YNjjGRn/ hYYwwwL/tFT61n1yBV4UWM1BljhK5HnIgSmlyLC//mq9dIBICBc3XralfvnXfStT +s+D6Wypo7kHMHaBeQ1E/I8RfyUtdH0tmt+uRuHYarGXj1r9pfxnvFHLAj9lZd7Q tTia93ieP2xSwkO7pZ1d4MIn7jHBbgQFq+0w0KrUl5Ys+zIcmG0BZthRnKiaIxwk hZtO8PqbxrgbZ82RIsspq+Kt32djdFG+gUbfLMDzykmebvjxxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi11yKHY5PbREirHzoKneJAXVbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3 ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvNDQyOGYzNGQtODQwMy0z YWIyLTg5Y2MtMjNjY2RiY2VkYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5 NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5 ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk NTA5OWU1ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz4ecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMzZs+emFtXo9yuxtuQhHuS+riPVzJ8luWkr3tk1k7NssK4mTPJkSkG M8xLpRgG09xRAzrvtsbkUIuuN8MlGx+fph4NlkKrktYFnATqFr2v8sC58VbsZxdx io3qx8JOMg/nw8dCqLW5CfBl8cc5XIgEP38QcXR7DFTZngO1TodhQq+N6vFNza18 Lbf8mayKdwtCiTRJG97SVqoQ5h9Zp1giTuTOc7HhA6cxeSVfs8BfO/5YNDcyl0m+ AuhJ1zcvPdFwsmYCo2o1gfPwWLRlpxb+dH2o7rvlivpyBE9DUMWasBa2bWaOjfs6 IuyMu9mRhHYlzBtN38BG7EkeWgMPjdY= -----END CERTIFICATE-----Generated at Wed Apr 9 03:01:20 2025 by rpki-client