$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa File: 03e688c7-732f-3297-8ea1-e37d0210334f.roa (raw, json) Hash identifier: SQKmhobWpE+W6CCllT3C01qK9cRFMa7ewWvn7WzGb50= Subject key identifier: 03:19:5A:CF:41:21:DC:9F:F3:96:8B:56:81:5C:BE:B6:CB:E6:ED:55 Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F43285848D2113C7448C2191664414600 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 53407 IP address blocks: 158.120.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:3c:74:48:c2:19:16:64:41:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=fe2e1c5c-8c6a-4bfd-b1ac-0e99800aa498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:ab:6a:f9:1b:c0:f4:7e:f5:f1:f9:62:9f: 91:36:83:d4:ea:b1:ce:83:51:05:02:0f:2f:68:1f: 12:e9:7a:5a:ae:81:27:ed:9c:ec:7f:48:ad:de:ff: 25:85:dc:9a:1d:49:66:43:1c:c2:e1:ae:76:a1:17: 6a:83:b7:64:37:cf:a6:b9:d5:f3:7e:8d:f2:3d:2e: ee:54:b7:1e:88:76:7d:80:8a:c2:a7:76:9d:09:b5: 43:bb:4c:80:d0:d8:27:13:fc:8c:62:ac:cf:b4:1a: f8:53:01:fc:ff:77:89:f8:20:40:86:e8:0b:66:a9: 3d:4b:8f:f4:2a:98:46:0d:82:89:e8:20:a2:30:0e: e9:a0:62:53:8a:96:b4:64:17:0c:eb:62:72:b3:24: 1f:d4:57:f0:f8:7c:9f:74:af:c6:15:43:ef:fb:56: d0:73:58:22:b5:07:d0:37:79:a7:2a:f7:fc:69:cf: be:bb:bf:07:86:03:ad:80:cc:b7:fe:2a:95:d4:aa: 7d:99:34:d2:55:0f:88:4a:54:2f:dd:1e:26:01:4c: 01:73:1f:9d:28:2e:e7:90:9b:0e:80:9e:32:88:e3: c5:18:fe:4b:df:41:c8:ad:c1:a2:13:ff:ef:1a:eb: cb:a4:e0:04:d9:95:e3:5b:8b:5b:4c:86:3c:b3:22: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:19:5A:CF:41:21:DC:9F:F3:96:8B:56:81:5C:BE:B6:CB:E6:ED:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 158.120.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e1:35:dd:5f:b6:68:56:70:22:18:1c:52:54:1c:f2:91:bf: 99:70:9a:27:32:d3:ae:c3:9f:ae:f0:08:70:5e:8c:b9:40:7c: 74:eb:c7:c7:c9:40:5b:81:0d:1f:df:16:4b:6d:d0:29:48:8c: 30:24:e6:75:0d:4b:12:f0:50:c5:9f:70:e7:c3:57:f2:ea:98: 85:f4:aa:1f:fa:d2:4e:ef:b3:d4:6a:d6:b8:43:6d:ef:9f:a7: 61:50:25:53:38:da:0e:71:0b:08:cd:4a:49:82:2f:f3:6d:dc: 44:f3:24:5e:a5:37:9c:25:6f:7c:b6:0d:7c:3f:8b:e6:bd:57: 66:8f:82:ef:f4:0d:64:d4:15:4a:01:3e:bd:de:a5:50:3e:a5: 7d:e9:5c:0e:71:9e:8c:0c:93:d6:ab:e9:01:84:41:42:9b:64: 18:8e:2f:63:11:87:92:c3:87:dd:08:4f:16:35:d2:63:0d:f7: 32:b6:48:80:e5:17:4b:be:d5:7b:84:10:bc:ec:50:fb:9e:ca: d3:8c:12:f5:ac:cf:44:a7:a4:af:8e:c3:db:1c:47:f4:e1:8d: e4:c8:ad:cd:cf:bb:27:3f:e5:12:c1:01:b2:75:08:64:88:cb: 57:d8:da:18:40:2b:04:ce:05:34:3e:39:87:3c:81:1d:af:b7: 3b:73:9b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETx0SMIZFmRBRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmUyZTFjNWMtOGM2YS00YmZkLWIxYWMtMGU5OTgwMGFhNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibOravkbwPR+9fH5Yp+RNoPU6rHOg1EFAg8v aB8S6XparoEn7Zzsf0it3v8lhdyaHUlmQxzC4a52oRdqg7dkN8+mudXzfo3yPS7u VLceiHZ9gIrCp3adCbVDu0yA0NgnE/yMYqzPtBr4UwH8/3eJ+CBAhugLZqk9S4/0 KphGDYKJ6CCiMA7poGJTipa0ZBcM62JysyQf1Ffw+HyfdK/GFUPv+1bQc1gitQfQ N3mnKvf8ac++u78HhgOtgMy3/iqV1Kp9mTTSVQ+ISlQv3R4mAUwBcx+dKC7nkJsO gJ4yiOPFGP5L30HIrcGiE//vGuvLpOAE2ZXjW4tbTIY8syJ+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMZWs9BIdyf85aLVoFcvrbL5u1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvMDNlNjg4YzctNzMyZi0z Mjk3LThlYTEtZTM3ZDAyMTAzMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnngoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7hNd1ftmhWcCIYHFJUHPKRv5lwmicy067Dn67wCHBejLlAfHTrx8fJ QFuBDR/fFktt0ClIjDAk5nUNSxLwUMWfcOfDV/LqmIX0qh/60k7vs9Rq1rhDbe+f p2FQJVM42g5xCwjNSkmCL/Nt3ETzJF6lN5wlb3y2DXw/i+a9V2aPgu/0DWTUFUoB Pr3epVA+pX3pXA5xnowMk9ar6QGEQUKbZBiOL2MRh5LDh90ITxY10mMN9zK2SIDl F0u+1XuEELzsUPueytOMEvWsz0SnpK+Ow9scR/ThjeTIrc3Puyc/5RLBAbJ1CGSI y1fY2hhAKwTOBTQ+OYc8gR2vtztzm40= -----END CERTIFICATE-----Generated at Fri Apr 4 16:03:57 2025 by rpki-client