$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa File: 4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa (raw, json) Hash identifier: OgwujK+8YZYtjBntZzRWE2Y2ObF0bzVRd0CnpI4gb3w= Subject key identifier: D8:32:9A:F6:FF:3F:B4:5D:F7:2B:2A:A0:FB:18:86:16:3B:B8:11:6B Certificate issuer: /CN=05a654f5-4306-42f8-a547-0a21265d5db2 Certificate serial: 010D0C9F43285848E59BB5454F3F4A16D10C7B80 Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 158.26.56.0/21 maxlen: 24 158.26.168.0/21 maxlen: 24 158.26.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b5:45:4f:3f:4a:16:d1:0c:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=a280a74a-9c5a-4230-83c9-90f7eb4a7d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b3:63:39:ee:9c:e3:6b:ff:7e:e8:9d:bf:03: 88:c9:c6:02:a0:9f:ca:ca:c2:b3:94:69:31:14:04: 33:a4:9e:61:d6:c3:61:ca:9b:0e:80:6e:a4:d1:a1: 8c:e6:13:cf:eb:c5:8a:9f:d1:04:41:b1:5c:bc:72: d6:78:7e:f1:83:48:04:ea:f2:fc:2d:50:54:6d:51: 8b:c4:9f:c3:ef:14:12:69:21:76:6c:5b:e6:e4:81: 46:e1:a1:56:8d:c1:80:15:d5:c4:6c:21:d4:98:80: 8f:71:26:c6:69:5e:1b:da:ce:e8:1f:44:96:e5:97: bd:d2:ea:0a:34:a3:bd:12:93:9b:da:26:e2:92:b5: 2e:f8:ac:da:a6:3e:b4:2c:da:51:0f:fd:f9:10:9a: 49:e1:07:72:66:8f:bb:f4:13:00:e6:bd:1d:9e:c2: 65:69:57:f5:e5:bf:bb:c4:03:26:c6:30:07:01:12: ee:6f:9c:6b:14:bf:f2:89:19:d9:48:be:4f:2d:87: 3c:ec:1c:c1:97:18:65:8d:99:de:b3:a7:b8:3a:7f: 45:4a:cf:60:33:2e:b4:3c:9d:13:43:53:39:62:a7: c1:6b:4c:0c:4a:bb:c8:a6:7c:13:83:02:d0:76:0a: 7c:e3:96:11:e6:63:ca:99:ee:4e:04:f1:34:b3:26: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:32:9A:F6:FF:3F:B4:5D:F7:2B:2A:A0:FB:18:86:16:3B:B8:11:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl X509v3 Authority Key Identifier: keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer sbgp-ipAddrBlock: critical IPv4: 158.26.56.0/21 158.26.168.0/21 158.26.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0c:8a:13:a4:2d:61:ec:61:8d:3e:66:91:c0:fd:55:76:47: cd:2d:e7:30:61:be:8e:91:0f:ce:df:d6:47:8c:6f:aa:55:2e: 3e:ff:fe:aa:f9:eb:61:c8:35:74:1b:10:ff:29:24:92:a5:80: 8c:b4:c3:24:01:4b:3b:83:44:80:6e:39:0f:2d:ca:b6:d1:55: cf:fd:24:ec:63:ae:eb:ea:f3:86:12:5a:b2:6a:76:e9:9e:a8: 4b:7a:68:6d:20:f7:82:7f:30:ba:c1:f0:d4:0c:6a:aa:89:a0: 3e:5e:62:e0:15:db:ab:c3:10:83:59:c0:83:b8:f9:e6:fa:45: 74:04:1a:1e:3f:51:20:49:41:a5:29:c5:9e:4e:bf:fd:98:58: d1:67:04:9a:db:9d:96:76:07:1e:da:5f:1c:53:58:bc:5f:8f: f9:05:03:c4:f7:7b:5a:46:9b:d0:6a:34:48:ce:31:f0:17:c7: 69:5d:a6:3e:8c:42:44:28:bb:32:5a:de:8c:0b:bc:d1:3f:4d: a5:ca:cc:f9:b6:fa:24:dc:b0:99:fe:e8:08:31:f0:ad:50:eb: 68:0d:ee:3c:7d:62:95:e1:c6:da:98:2a:b7:15:7a:17:c1:e7: dc:db:06:be:82:fd:3b:d8:5c:18:ba:8d:d3:83:ff:11:f5:40: 29:d5:2b:fb -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjlm7VFTz9KFtEMe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1 ZGIyMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YTI4MGE3NGEtOWM1YS00MjMwLTgzYzktOTBmN2ViNGE3ZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrNjOe6c42v/fuidvwOIycYCoJ/KysKzlGkx FAQzpJ5h1sNhypsOgG6k0aGM5hPP68WKn9EEQbFcvHLWeH7xg0gE6vL8LVBUbVGL xJ/D7xQSaSF2bFvm5IFG4aFWjcGAFdXEbCHUmICPcSbGaV4b2s7oH0SW5Ze90uoK NKO9EpOb2ibikrUu+Kzapj60LNpRD/35EJpJ4QdyZo+79BMA5r0dnsJlaVf15b+7 xAMmxjAHARLub5xrFL/yiRnZSL5PLYc87BzBlxhljZnes6e4On9FSs9gMy60PJ0T Q1M5YqfBa0wMSrvIpnwTgwLQdgp845YR5mPKme5OBPE0sybZ3wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNgymvb/P7Rd9ysqoPsYhhY7uBFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2 NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvNGVkMzJiMDUtOGMyNC0z MmIyLThjMmItM2YwMTRiYzljMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDVhNjU0ZjUtNDMwNi00MmY4LWE1 NDctMGEyMTI2NWQ1ZGIyLzA1YTY1NGY1LTQzMDYtNDJmOC1hNTQ3LTBhMjEyNjVk NWRiMi5jcmwwHwYDVR0jBBgwFoAUcqZ1c3d2/kvn4Dnlhd2Pwvp/3WMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIx MjY1ZDVkYjIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDnho4AwQD nhqoAwQDnhrYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEgMihOkLWHsYY0+ZpHA/VV2R80t5zBhvo6RD87f 1keMb6pVLj7//qr562HINXQbEP8pJJKlgIy0wyQBSzuDRIBuOQ8tyrbRVc/9JOxj ruvq84YSWrJqdumeqEt6aG0g94J/MLrB8NQMaqqJoD5eYuAV26vDEINZwIO4+eb6 RXQEGh4/USBJQaUpxZ5Ov/2YWNFnBJrbnZZ2Bx7aXxxTWLxfj/kFA8T3e1pGm9Bq NEjOMfAXx2ldpj6MQkQouzJa3owLvNE/TaXKzPm2+iTcsJn+6Agx8K1Q62gN7jx9 YpXhxtqYKrcVehfB59zbBr6C/TvYXBi6jdOD/xH1QCnVK/s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:54 2025 by rpki-client