$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa File: 689d2a9d-418d-3143-b2c1-3624646b67b1.roa (raw, json) Hash identifier: aIl7go4tXdIF89NYraKdK8sCxXoFEyqUtSnxg/H8+yo= Subject key identifier: 07:CE:3C:27:10:7D:50:76:E0:54:6C:96:05:17:BF:8B:52:AE:39:D9 Certificate issuer: /CN=b1898100-f40c-4002-b68a-8a97b548e69d Certificate serial: 010D0C9F432858487755E0414D68350B8D5E7BC0 Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 18526 IP address blocks: 158.51.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e0:41:4d:68:35:0b:8d:5e:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=8804d4a1-d29f-445a-99c9-659e927ae602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:59:79:2d:26:d1:06:5f:e0:ff:45:5b:83:e9: b6:9d:9f:16:c1:a1:bc:80:54:df:5f:b5:db:20:14: 47:bb:d0:f1:8a:25:6e:29:04:f8:d3:56:ba:0e:50: 6c:5d:c4:7c:01:0b:f1:bc:5b:a9:05:a4:a7:38:87: 28:fb:e3:4f:a5:74:bc:3c:ae:c5:fb:a8:fa:09:5e: 5c:7d:a1:c1:15:05:2e:82:4c:f9:38:93:76:d1:ff: 11:cf:37:a0:83:8e:e8:6f:c3:c5:b0:d8:dd:78:4c: b9:22:23:ef:7b:25:9a:50:36:4e:51:c9:47:c7:11: e8:8a:87:83:be:db:14:2f:30:73:9e:a4:b0:a3:1f: 8d:bb:2e:17:3b:30:7d:70:0b:82:aa:dd:1c:51:66: 70:a6:4e:8c:90:98:44:b3:aa:e2:9c:43:64:4c:3d: 88:5c:d0:08:d2:f9:80:14:c4:f0:30:b1:69:a3:62: fe:cf:9a:7c:8b:79:12:8a:33:ac:82:bb:5e:06:64: 35:16:d1:f3:08:39:46:eb:f3:8c:ae:ef:de:5a:fd: a1:e5:ad:b0:38:35:85:eb:78:70:10:54:ee:1f:1c: b8:07:17:1b:17:00:51:2e:8b:0e:59:e6:35:72:13: 6f:df:e3:41:ba:e6:d5:f7:dd:a4:73:c9:c1:13:de: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CE:3C:27:10:7D:50:76:E0:54:6C:96:05:17:BF:8B:52:AE:39:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl X509v3 Authority Key Identifier: keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer sbgp-ipAddrBlock: critical IPv4: 158.51.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e7:c3:fb:bd:d6:92:13:e7:fd:96:47:10:ad:ce:50:a7:dc: 35:bd:84:53:f4:d2:7e:5a:30:19:91:86:7e:24:b6:8e:bd:d5: dd:e6:01:cc:26:29:5c:26:62:6f:c1:d9:50:b4:fa:5d:b5:f2: ee:e0:21:74:3c:fe:8b:30:5f:9a:70:00:8f:6c:eb:53:2d:45: 70:b2:eb:ca:6e:a8:94:6f:c6:1a:1b:10:eb:07:8a:8f:f8:2a: 47:1f:5e:24:26:e3:b6:59:b5:2f:34:69:5f:07:5e:d5:97:d9: 9f:bd:af:22:21:3d:5f:f2:65:4c:30:55:62:0c:b5:45:9c:56: e2:b8:7c:b1:66:59:bf:3e:3c:7c:23:4a:5a:b5:f4:00:a0:56: f3:bf:a4:f2:c5:aa:24:38:cf:02:35:aa:02:0b:42:b0:5c:1b: a2:a3:74:87:7b:79:97:77:53:ac:fd:2d:c6:ca:7b:af:4f:b3: 88:e6:65:7c:98:8a:29:79:e5:d0:fd:a9:c6:fe:93:d9:5d:2b: 71:b6:92:bd:ff:1d:34:b2:36:52:e6:e9:2b:21:ce:e9:d1:7d: 20:ee:6d:2e:06:6c:72:65:fe:75:7d:91:47:35:d4:2e:5c:a7: 61:1b:72:2c:18:98:af:86:23:04:dc:10:07:d4:cd:6b:c7:42: 50:a3:c6:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeBBTWg1C41ee8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl NjlkMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ODgwNGQ0YTEtZDI5Zi00NDVhLTk5YzktNjU5ZTkyN2FlNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjll5LSbRBl/g/0Vbg+m2nZ8WwaG8gFTfX7Xb IBRHu9DxiiVuKQT401a6DlBsXcR8AQvxvFupBaSnOIco++NPpXS8PK7F+6j6CV5c faHBFQUugkz5OJN20f8Rzzegg47ob8PFsNjdeEy5IiPveyWaUDZOUclHxxHoioeD vtsULzBznqSwox+Nuy4XOzB9cAuCqt0cUWZwpk6MkJhEs6rinENkTD2IXNAI0vmA FMTwMLFpo2L+z5p8i3kSijOsgrteBmQ1FtHzCDlG6/OMru/eWv2h5a2wODWF63hw EFTuHxy4BxcbFwBRLosOWeY1chNv3+NBuubV992kc8nBE97tBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfOPCcQfVB24FRslgUXv4tSrjnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5 ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvNjg5ZDJhOWQtNDE4ZC0z MTQzLWIyYzEtMzYyNDY0NmI2N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2 OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4 ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3 YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALnw/u91pIT5/2WRxCtzlCn3DW9hFP00n5aMBmRhn4kto691d3mAcwm KVwmYm/B2VC0+l218u7gIXQ8/oswX5pwAI9s61MtRXCy68puqJRvxhobEOsHio/4 KkcfXiQm47ZZtS80aV8HXtWX2Z+9ryIhPV/yZUwwVWIMtUWcVuK4fLFmWb8+PHwj Slq19ACgVvO/pPLFqiQ4zwI1qgILQrBcG6KjdId7eZd3U6z9LcbKe69Ps4jmZXyY iil55dD9qcb+k9ldK3G2kr3/HTSyNlLm6SshzunRfSDubS4GbHJl/nV9kUc11C5c p2EbciwYmK+GIwTcEAfUzWvHQlCjxn0= -----END CERTIFICATE-----Generated at Fri Mar 14 13:27:35 2025 by rpki-client