$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa File: 4caa9342-737f-3da7-a847-9c004e5815b3.roa (raw, json) Hash identifier: 1J2tkYi6ZNQWcprOR/mY+UwORgbNbpy4g4bBzFPbMCc= Subject key identifier: 59:BE:B1:40:3B:02:AC:74:90:7F:8E:FF:63:9D:6A:F6:C3:51:82:4B Certificate issuer: /CN=85befeae-24b8-4c74-a4dc-19e1382944ad Certificate serial: 010D0C9F43285848BFEBA16C11095CA6B3203300 Authority key identifier: C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 14618 IP address blocks: 156.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a1:6c:11:09:5c:a6:b3:20:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85befeae-24b8-4c74-a4dc-19e1382944ad Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=ac67f972-590d-433d-bb45-9d6cc1e59b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:16:46:2b:5a:fb:b5:89:0c:df:ec:3a:38:cc: 26:ea:e5:99:73:9b:0b:b9:6e:65:19:d3:c5:48:8b: fe:ee:d1:f6:5b:80:a9:af:8d:38:72:f5:44:8e:7d: d9:3d:32:8b:2d:17:e5:24:88:7d:c2:d5:83:54:5b: 9c:13:8a:19:4f:22:48:2e:89:5f:21:fb:5f:9a:1a: 4d:ea:40:9d:66:b3:21:4b:70:59:6f:cd:cf:76:70: 66:32:84:4b:ae:78:de:11:91:8a:66:ce:c6:c7:e0: 57:bf:30:2f:25:a6:18:52:13:f1:62:a9:17:a3:75: f2:d5:43:8b:7f:54:35:0a:8b:7b:93:b1:ac:04:d9: 8b:be:76:7b:92:8d:a7:e2:e5:be:0c:0a:f2:c4:8b: 03:88:95:6c:0e:8c:3e:b6:45:95:76:59:d7:cf:cd: 99:67:37:9e:5e:b7:f5:34:8a:47:0c:ee:aa:67:b1: eb:c4:ad:30:7d:59:09:8b:39:6d:b7:5b:fc:a3:42: be:fe:28:6c:b7:f7:ae:b6:8f:dd:2a:cc:a1:79:c6: 79:06:85:14:66:81:f3:d8:bc:e4:f5:9a:71:bc:e7: 10:d5:18:9c:14:26:71:6d:ff:65:9c:61:41:46:af: bd:8b:9f:bd:d4:fb:e0:09:33:7c:4a:8d:cf:a1:b3: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BE:B1:40:3B:02:AC:74:90:7F:8E:FF:63:9D:6A:F6:C3:51:82:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl X509v3 Authority Key Identifier: keyid:C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer sbgp-ipAddrBlock: critical IPv4: 156.154.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0a:64:d1:0f:2c:8d:48:1f:49:74:53:36:55:e4:ef:53:1c: 17:a7:9c:e8:d4:c1:d0:af:37:f6:65:af:f0:e4:09:dc:df:b9: 16:32:66:a8:9a:b9:ab:eb:b2:f1:77:6b:b6:0f:fc:a8:ef:c2: 93:87:8e:79:6b:97:b2:4b:c1:ed:29:5d:ac:fe:9c:e3:93:88: e7:18:a2:a1:7b:e0:bf:c7:a8:61:e2:86:44:c2:ed:18:82:bb: bf:a1:06:2f:4d:ca:26:af:cd:d0:a7:2f:77:24:c5:c4:bd:bf: 78:cb:aa:17:97:ab:6a:41:b1:16:f4:60:4c:ea:fc:f0:84:52: 7f:14:61:c8:ff:42:ce:6e:d9:f3:26:f5:5c:49:5f:1d:6e:0a: c6:09:c4:6b:04:88:85:69:6b:6b:90:69:f1:d9:1a:da:f8:21: c1:35:00:fb:13:13:e2:c5:6b:57:a0:81:e7:c7:67:a6:b1:50: ca:b9:2b:03:7a:92:53:8f:aa:a2:8b:25:88:39:11:c2:b4:d1: 83:36:52:4a:4b:bb:97:f2:e8:05:2e:8a:33:0c:e5:8d:f9:8e: f5:93:57:60:a4:8c:35:4d:31:13:86:79:51:92:41:d0:e9:54: 39:70:3d:b7:98:15:ac:b6:cc:60:6e:87:6a:0e:08:b8:17:3b: 5a:a4:9a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66FsEQlcprMgMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZWZlYWUtMjRiOC00Yzc0LWE0ZGMtMTllMTM4Mjk0 NGFkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YWM2N2Y5NzItNTkwZC00MzNkLWJiNDUtOWQ2Y2MxZTU5Yjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBZGK1r7tYkM3+w6OMwm6uWZc5sLuW5lGdPF SIv+7tH2W4Cpr404cvVEjn3ZPTKLLRflJIh9wtWDVFucE4oZTyJILolfIftfmhpN 6kCdZrMhS3BZb83PdnBmMoRLrnjeEZGKZs7Gx+BXvzAvJaYYUhPxYqkXo3Xy1UOL f1Q1Cot7k7GsBNmLvnZ7ko2n4uW+DAryxIsDiJVsDow+tkWVdlnXz82ZZzeeXrf1 NIpHDO6qZ7HrxK0wfVkJizltt1v8o0K+/ihst/euto/dKsyhecZ5BoUUZoHz2Lzk 9ZpxvOcQ1RicFCZxbf9lnGFBRq+9i5+91PvgCTN8So3PobOe/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFm+sUA7Aqx0kH+O/2OdavbDUYJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJl ZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUxMzgyOTQ0YWQvNGNhYTkzNDItNzM3Zi0z ZGE3LWE4NDctOWMwMDRlNTgxNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODViZWZlYWUtMjRiOC00Yzc0LWE0 ZGMtMTllMTM4Mjk0NGFkLzg1YmVmZWFlLTI0YjgtNGM3NC1hNGRjLTE5ZTEzODI5 NDRhZC5jcmwwHwYDVR0jBBgwFoAUwzVtrRq38XwWjDErZQ/V5Z/BvSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJlZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUx MzgyOTQ0YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJoTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEKZNEPLI1IH0l0UzZV5O9THBennOjUwdCvN/Zlr/DkCdzfuRYyZqia uavrsvF3a7YP/KjvwpOHjnlrl7JLwe0pXaz+nOOTiOcYoqF74L/HqGHihkTC7RiC u7+hBi9NyiavzdCnL3ckxcS9v3jLqheXq2pBsRb0YEzq/PCEUn8UYcj/Qs5u2fMm 9VxJXx1uCsYJxGsEiIVpa2uQafHZGtr4IcE1APsTE+LFa1eggefHZ6axUMq5KwN6 klOPqqKLJYg5EcK00YM2UkpLu5fy6AUuijMM5Y35jvWTV2CkjDVNMROGeVGSQdDp VDlwPbeYFay2zGBuh2oOCLgXO1qkmiQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:43 2025 by rpki-client