$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bd266590-a1cb-38c5-b2dd-3ac211617367.roa File: bd266590-a1cb-38c5-b2dd-3ac211617367.roa (raw, json) Hash identifier: 5ou+l1VcWhg4iwKKx+dO78w7RgcRD9vz4wKNqliIt5c= Subject key identifier: 1D:44:69:17:8E:34:BA:C8:71:16:85:8D:5C:37:04:97:73:7F:8B:47 Certificate issuer: /CN=b1898100-f40c-4002-b68a-8a97b548e69d Certificate serial: 010D0C9F43285848BE863429277FC7D8FC6AE980 Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bd266590-a1cb-38c5-b2dd-3ac211617367.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 174 IP address blocks: 158.51.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:34:29:27:7f:c7:d8:fc:6a:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=54be4234-7cd8-47a7-9d02-3e17f7531447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:55:32:a8:40:a9:5b:39:d8:a7:82:e1:ad: 50:15:78:22:55:00:50:5e:8d:6b:fc:cc:f7:02:cb: fd:ba:57:91:c3:5e:48:f4:74:a0:c9:a9:b5:d4:f7: e5:80:7a:75:08:92:2e:a8:37:83:9b:ad:f4:45:c7: ef:be:75:b3:2e:53:68:17:34:c8:dc:86:e6:f8:59: da:51:91:38:a7:5c:1d:87:17:c6:38:cf:4b:c6:77: be:48:77:a6:5f:4d:6a:f1:1e:e1:5b:1f:41:c5:e5: 4a:c6:8f:37:46:28:a6:8c:af:e6:45:c5:ac:24:b3: b6:42:2d:6f:b2:7f:8b:95:9c:bb:72:29:63:44:21: 9d:11:68:32:ed:73:16:92:d8:b1:5b:7c:75:92:58: 92:07:06:14:f4:cb:82:b1:12:59:d5:57:5b:58:b5: f1:15:b3:73:4d:04:2d:ff:cf:e9:a0:60:e2:f5:e5: b7:e7:6b:a5:09:9b:85:c9:f6:cd:42:5d:c8:f7:13: 1b:47:a1:68:41:67:e6:ee:7b:8a:fe:7d:d7:3e:af: 36:99:6c:32:7f:f7:a1:5d:8a:ea:3d:9d:f9:ee:7f: 54:11:2d:3e:2b:37:3b:84:6b:7c:7a:5b:e4:6b:0e: 2f:f9:1a:be:8c:5e:c4:2d:8d:71:82:e6:e2:d4:be: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:44:69:17:8E:34:BA:C8:71:16:85:8D:5C:37:04:97:73:7F:8B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bd266590-a1cb-38c5-b2dd-3ac211617367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl X509v3 Authority Key Identifier: keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer sbgp-ipAddrBlock: critical IPv4: 158.51.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:18:21:af:5f:3c:46:1b:94:1f:18:e1:5e:dd:7f:40:c9:82: f2:08:66:48:22:06:6c:12:81:9a:c1:3d:1a:7c:a3:89:b1:95: 9c:a6:34:82:21:45:f8:4c:87:1b:5a:31:6d:fc:e1:e7:e2:d5: 17:32:97:bb:36:04:37:79:e2:e5:7a:4d:0a:7f:90:5a:c8:d3: ea:a3:97:8a:9a:98:f0:28:99:e6:8f:ae:71:a9:bf:f2:eb:5d: 30:ef:db:b7:08:46:f3:17:77:78:d4:97:de:fc:6b:2c:5b:2e: 02:ba:23:75:02:c6:69:a8:f9:fa:11:6c:ba:56:e9:2d:4b:e7: 5a:6c:eb:f8:66:1c:ab:bc:f7:c4:80:d9:39:7c:9b:e1:56:fe: 92:08:46:f6:2a:11:f2:71:02:ed:61:a0:0f:3e:f9:66:69:58: 55:36:c0:9d:4a:ff:98:15:89:b8:13:fb:a7:5d:70:ce:3a:4c: 1f:b6:db:e4:18:32:d5:6e:59:fb:23:54:a9:d4:c8:f5:64:5d: 3f:47:a6:ed:6e:bc:ee:64:48:3a:40:20:10:45:e0:86:0d:2d: 75:23:b6:77:9b:fc:8c:b6:9d:48:1b:3d:d8:e6:3b:21:b1:e2: 2f:d3:81:8e:32:c6:85:02:77:d0:da:a0:56:84:64:85:63:0f: 5c:e4:09:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjQpJ3/H2Pxq6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl NjlkMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NTRiZTQyMzQtN2NkOC00N2E3LTlkMDItM2UxN2Y3NTMxNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXxVMqhAqVs52KeC4a1QFXgiVQBQXo1r/Mz3 Asv9uleRw15I9HSgyam11PflgHp1CJIuqDeDm630RcfvvnWzLlNoFzTI3Ibm+Fna UZE4p1wdhxfGOM9Lxne+SHemX01q8R7hWx9BxeVKxo83RiimjK/mRcWsJLO2Qi1v sn+LlZy7ciljRCGdEWgy7XMWktixW3x1kliSBwYU9MuCsRJZ1VdbWLXxFbNzTQQt /8/poGDi9eW352ulCZuFyfbNQl3I9xMbR6FoQWfm7nuK/n3XPq82mWwyf/ehXYrq PZ357n9UES0+Kzc7hGt8elvkaw4v+Rq+jF7ELY1xgubi1L74KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1EaReONLrIcRaFjVw3BJdzf4tHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5 ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvYmQyNjY1OTAtYTFjYi0z OGM1LWIyZGQtM2FjMjExNjE3MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2 OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4 ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3 YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAYIa9fPEYblB8Y4V7df0DJgvIIZkgiBmwSgZrBPRp8o4mxlZymNIIh RfhMhxtaMW384efi1Rcyl7s2BDd54uV6TQp/kFrI0+qjl4qamPAomeaPrnGpv/Lr XTDv27cIRvMXd3jUl978ayxbLgK6I3UCxmmo+foRbLpW6S1L51ps6/hmHKu898SA 2Tl8m+FW/pIIRvYqEfJxAu1hoA8++WZpWFU2wJ1K/5gVibgT+6ddcM46TB+22+QY MtVuWfsjVKnUyPVkXT9Hpu1uvO5kSDpAIBBF4IYNLXUjtneb/Iy2nUgbPdjmOyGx 4i/TgY4yxoUCd9DaoFaEZIVjD1zkCZw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:26 2025 by rpki-client