$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa File: eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa (raw, json) Hash identifier: 3B1raygtbW2lOVoBO2SXtsNMp6Mssauq0UhLGokfU6E= Subject key identifier: 38:D2:F1:27:8C:14:44:76:69:D3:E6:DF:37:1F:D1:6E:55:44:9B:7E Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F4328584913AC20D14BCEB572B63FB400 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 53507 IP address blocks: 162.0.156.0/22 maxlen: 24 173.243.16.0/20 maxlen: 24 199.96.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:20:d1:4b:ce:b5:72:b6:3f:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=050d0c7d-d405-46a6-b172-5020c8761890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:d5:01:57:3c:f7:4b:e3:ee:59:68:5e:96: f8:51:3b:64:32:aa:30:c8:28:50:89:27:17:0c:08: 57:c8:22:38:9b:0a:2f:7a:74:25:8f:a7:05:43:2e: f9:e8:4d:2f:98:32:6c:64:2b:9a:11:52:81:52:3e: 2d:1d:0a:4a:cd:48:af:7e:88:7b:2e:61:1a:64:4d: 0c:ee:21:6c:df:92:56:a6:03:2d:78:4d:48:e6:4a: 0e:e2:f9:af:c5:0b:55:bf:47:51:7b:8d:27:6b:51: 8b:75:f2:eb:11:46:2d:36:ad:27:78:ae:cf:19:c5: 9c:71:de:ed:49:ad:d2:4e:d4:d5:f6:39:bb:44:96: 85:cd:7c:93:5a:56:f8:18:2c:72:a0:74:b7:83:9d: ac:23:22:c5:6d:ac:27:ae:64:28:dc:ac:d8:f4:29: 89:ac:0e:11:49:d4:eb:e7:81:97:8e:ae:32:a3:11: 52:50:6b:e4:75:c6:f4:6a:b3:82:b8:bb:aa:17:1b: 20:50:e5:dd:5b:78:09:76:8e:b1:0d:02:9f:d1:8c: f1:ac:75:7c:f3:0a:26:8a:2c:05:cf:d0:82:34:c1: 01:65:ea:55:a7:d7:8c:33:61:1e:42:81:4a:d4:37: 9c:fe:e2:8f:53:0c:59:a0:d0:08:4d:ac:d6:56:c5: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D2:F1:27:8C:14:44:76:69:D3:E6:DF:37:1F:D1:6E:55:44:9B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv4: 162.0.156.0/22 173.243.16.0/20 199.96.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:89:01:1c:d0:8b:bf:b1:04:87:a2:51:01:d6:d0:9b:8f:69: 2c:e4:e2:f7:83:a8:d5:c2:99:da:d7:b2:cc:c1:20:de:5d:30: 56:dd:de:9c:d9:8d:03:9f:6d:b7:f9:e9:eb:e2:3d:4c:08:9b: d7:86:56:ce:37:1d:ba:59:59:a7:61:7d:b3:4a:05:13:ec:ba: d6:79:4e:2c:23:67:61:de:05:e3:3a:11:96:ff:28:9c:3c:04: fb:fc:af:6e:fa:7c:e6:d8:f3:14:04:b0:b2:14:82:f3:55:8b: f9:2f:8b:ca:a4:4c:ac:2a:3f:50:34:e9:85:c4:55:a1:10:67: 46:c4:f9:05:df:48:23:df:54:4b:e3:69:e4:87:1d:02:07:43: 47:81:86:99:61:f3:a1:1c:8d:3f:57:4a:7c:43:b1:e2:e3:e8: 51:75:a3:97:61:c7:f8:58:03:99:68:63:7d:8f:70:24:45:2f: 47:c4:c6:4e:eb:e6:7e:0d:bb:73:e2:cb:e1:62:bc:fe:c4:0f: c5:f7:7c:36:1e:6a:aa:bf:21:8e:d2:2a:e8:f1:7e:2a:35:16: 42:0a:fb:61:95:ec:9a:10:9d:00:3a:89:7e:04:a1:f5:5d:77: b7:12:c7:85:75:67:53:36:6e:c4:0e:1d:da:f0:b5:7e:6a:da: 0d:0d:b6:06 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkTrCDRS861crY/tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MDUwZDBjN2QtZDQwNS00NmE2LWIxNzItNTAyMGM4NzYxODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxfVAVc890vj7lloXpb4UTtkMqowyChQiScX DAhXyCI4mwovenQlj6cFQy756E0vmDJsZCuaEVKBUj4tHQpKzUivfoh7LmEaZE0M 7iFs35JWpgMteE1I5koO4vmvxQtVv0dRe40na1GLdfLrEUYtNq0neK7PGcWccd7t Sa3STtTV9jm7RJaFzXyTWlb4GCxyoHS3g52sIyLFbawnrmQo3KzY9CmJrA4RSdTr 54GXjq4yoxFSUGvkdcb0arOCuLuqFxsgUOXdW3gJdo6xDQKf0YzxrHV88womiiwF z9CCNMEBZepVp9eMM2EeQoFK1Dec/uKPUwxZoNAITazWVsXNlQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDjS8SeMFER2adPm3zcf0W5VRJt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvZWI0NDUwNTgtMmM0My0z ZDUwLTlkNTUtN2M1YTY5ODVlMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCogCcAwQE rfMQAwQCx2A0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFOJARzQi7+xBIeiUQHW0JuPaSzk4veDqNXCmdrX sszBIN5dMFbd3pzZjQOfbbf56eviPUwIm9eGVs43HbpZWadhfbNKBRPsutZ5Tiwj Z2HeBeM6EZb/KJw8BPv8r276fObY8xQEsLIUgvNVi/kvi8qkTKwqP1A06YXEVaEQ Z0bE+QXfSCPfVEvjaeSHHQIHQ0eBhplh86EcjT9XSnxDseLj6FF1o5dhx/hYA5lo Y32PcCRFL0fExk7r5n4Nu3Piy+FivP7ED8X3fDYeaqq/IY7SKujxfio1FkIK+2GV 7JoQnQA6iX4EofVdd7cSx4V1Z1M2bsQOHdrwtX5q2g0NtgY= -----END CERTIFICATE-----Generated at Fri Mar 14 08:11:02 2025 by rpki-client