$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/474bf5e8-02f9-3a1d-86f3-5269932a485c.roa File: 474bf5e8-02f9-3a1d-86f3-5269932a485c.roa (raw, json) Hash identifier: K8fKsaHIG44OiUMFxzD5U6CFb8wJ2SBHtaqKZIUS5CY= Subject key identifier: 5D:43:6E:24:B6:03:7D:54:3B:2E:7B:D3:14:E9:04:37:9B:2B:06:8D Certificate issuer: /CN=fc1f6698-8c5a-433a-85f7-479fcb609e9a Certificate serial: 010D0C9F432858489075F20793A6285E76BB9158 Authority key identifier: 57:12:47:53:58:1F:4A:20:E2:DD:8B:A4:AB:9E:7C:AE:85:EF:3D:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/474bf5e8-02f9-3a1d-86f3-5269932a485c.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397601 IP address blocks: 147.160.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f2:07:93:a6:28:5e:76:bb:91:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1f6698-8c5a-433a-85f7-479fcb609e9a Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=aba47156-bb43-490d-b186-8a1ba0138665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:79:57:81:90:4a:1a:51:40:eb:8e:32:cc: c0:f2:f1:41:50:2e:b2:29:b9:50:4a:ec:df:ae:50: d0:6e:34:aa:9f:40:39:dd:c7:19:ee:99:ee:e0:c6: be:eb:9f:5a:ac:87:7b:49:dd:58:44:97:66:cf:70: ed:c7:88:11:94:c2:d7:9e:36:80:a1:e2:9c:86:65: f2:db:59:d4:94:b7:ef:77:f1:48:80:50:09:a4:dd: 6f:76:83:ed:2e:b5:83:7d:48:b7:6f:7c:05:b4:a8: 67:47:52:4d:45:ee:f0:72:57:10:d0:31:d4:fb:c6: 27:04:f1:09:bc:6b:0f:80:72:a4:b4:81:29:7f:43: dc:80:6e:59:f5:b2:c3:72:47:42:51:97:7d:12:a0: 35:b5:7b:79:6a:52:2e:23:ef:ec:86:76:c9:2e:7a: 48:e7:5b:ff:35:b4:25:e7:b7:8a:ef:3c:f9:ce:7a: ca:ee:a5:8d:ae:56:d6:3e:49:46:67:c8:3d:9a:7b: 3b:14:43:80:30:85:a7:06:5a:cc:86:cd:eb:e5:9c: 60:bb:ca:dc:8c:81:ac:df:b6:e4:16:7e:c1:c4:4f: 48:dd:e6:16:8f:21:8a:77:95:74:f7:f8:c7:9c:b6: 38:5d:0c:55:e5:c9:ca:31:a1:51:4f:20:12:6d:f3: 39:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:6E:24:B6:03:7D:54:3B:2E:7B:D3:14:E9:04:37:9B:2B:06:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/474bf5e8-02f9-3a1d-86f3-5269932a485c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.crl X509v3 Authority Key Identifier: keyid:57:12:47:53:58:1F:4A:20:E2:DD:8B:A4:AB:9E:7C:AE:85:EF:3D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer sbgp-ipAddrBlock: critical IPv4: 147.160.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:7a:d4:f5:b2:0f:dd:18:d1:1b:cb:a4:83:76:2e:36:b8:ec: a0:7d:e8:e0:ef:a4:cd:32:dc:73:f7:7e:95:84:c9:1e:c9:0a: 12:aa:ab:b0:4f:cb:4b:22:ec:c7:d0:b4:67:77:23:c9:6e:2a: 0b:0c:d3:e1:32:06:b4:31:4e:ce:b9:e3:59:29:e9:cb:46:ed: 4c:dd:c6:81:ea:e3:46:7b:4a:1f:63:68:6f:99:6d:1a:76:63: 7b:c1:f1:a6:62:0d:52:2e:98:d4:e1:4c:05:62:90:15:d7:2a: c3:a7:fa:61:95:9c:ca:16:ab:40:f4:c2:23:8e:db:b9:ef:22: d1:41:a1:43:37:2f:47:5b:6d:30:29:a6:49:64:af:bd:17:5b: 86:d8:b8:bc:08:17:16:31:44:a7:2e:53:e3:8d:f9:3c:68:ea: 10:4e:ee:ba:69:48:34:9b:f7:de:9f:14:71:2e:89:c6:f7:2f: 50:70:d8:5c:ab:c4:71:d9:db:11:40:d1:ba:ba:a1:65:cb:03: 45:59:43:75:fa:c7:81:bc:47:a4:a3:ac:8c:bb:1a:a3:24:5e: c3:f6:9b:c0:48:bf:8e:e6:c1:dd:f3:bf:a4:00:85:a7:cf:6b: b5:38:01:dc:bf:a5:dd:ba:0b:43:bd:c9:02:bb:d6:83:33:23: 4a:9b:7a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfIHk6YoXna7kVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZjY2OTgtOGM1YS00MzNhLTg1ZjctNDc5ZmNiNjA5 ZTlhMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk YWJhNDcxNTYtYmI0My00OTBkLWIxODYtOGExYmEwMTM4NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoZ5V4GQShpRQOuOMszA8vFBUC6yKblQSuzf rlDQbjSqn0A53ccZ7pnu4Ma+659arId7Sd1YRJdmz3Dtx4gRlMLXnjaAoeKchmXy 21nUlLfvd/FIgFAJpN1vdoPtLrWDfUi3b3wFtKhnR1JNRe7wclcQ0DHU+8YnBPEJ vGsPgHKktIEpf0PcgG5Z9bLDckdCUZd9EqA1tXt5alIuI+/shnbJLnpI51v/NbQl 57eK7zz5znrK7qWNrlbWPklGZ8g9mns7FEOAMIWnBlrMhs3r5Zxgu8rcjIGs37bk Fn7BxE9I3eYWjyGKd5V09/jHnLY4XQxV5cnKMaFRTyASbfM5MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1DbiS2A31UOy570xTpBDebKwaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm NjY5OC04YzVhLTQzM2EtODVmNy00NzlmY2I2MDllOWEvNDc0YmY1ZTgtMDJmOS0z YTFkLTg2ZjMtNTI2OTkzMmE0ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZjY2OTgtOGM1YS00MzNhLTg1 ZjctNDc5ZmNiNjA5ZTlhL2ZjMWY2Njk4LThjNWEtNDMzYS04NWY3LTQ3OWZjYjYw OWU5YS5jcmwwHwYDVR0jBBgwFoAUVxJHU1gfSiDi3Yukq558roXvPacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmNjY5OC04YzVhLTQzM2EtODVmNy00Nzlm Y2I2MDllOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk6CYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV61PWyD90Y0RvLpIN2Lja47KB96ODvpM0y3HP3fpWEyR7JChKqq7BP y0si7MfQtGd3I8luKgsM0+EyBrQxTs6541kp6ctG7UzdxoHq40Z7Sh9jaG+ZbRp2 Y3vB8aZiDVIumNThTAVikBXXKsOn+mGVnMoWq0D0wiOO27nvItFBoUM3L0dbbTAp pklkr70XW4bYuLwIFxYxRKcuU+ON+Txo6hBO7rppSDSb996fFHEuicb3L1Bw2Fyr xHHZ2xFA0bq6oWXLA0VZQ3X6x4G8R6SjrIy7GqMkXsP2m8BIv47mwd3zv6QAhafP a7U4Ady/pd26C0O9yQK71oMzI0qbeiY= -----END CERTIFICATE-----Generated at Fri Mar 14 09:51:34 2025 by rpki-client