$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa File: f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa (raw, json) Hash identifier: ARCk6fssDEaGbzNkj5N+04zTjAbSvQFTfOtqMO/PZqo= Subject key identifier: 3D:D8:14:8B:6B:87:16:A9:B6:2E:50:C1:F7:C9:5B:A8:DB:58:91:EB Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F432858491AA6CEE8CED63DCD1822CF40 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 5744 IP address blocks: 151.207.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:ce:e8:ce:d6:3d:cd:18:22:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=d15cf814-8d61-4b14-b396-67ea8881d94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7a:17:62:a1:13:d0:46:a3:34:13:b8:69:9e: 94:af:ec:8d:a5:72:11:9a:b1:a3:2a:5e:76:bb:8f: 6a:88:77:51:1b:ef:d8:df:a4:b3:e5:9c:62:1a:4d: ca:9f:0b:82:75:0e:63:cf:2f:ac:1c:ff:65:39:98: 23:36:04:eb:4c:c2:a0:16:f5:ec:a8:6a:5f:d8:47: 78:14:c3:cf:ea:c1:75:e5:0b:6a:e5:20:76:eb:0f: 44:69:92:25:24:27:1f:ab:5c:69:80:f6:cd:d0:c8: 9a:02:0e:da:66:20:ef:24:b0:6f:e8:6f:56:7d:19: a7:e6:2f:b7:9d:6e:2b:13:4c:7a:be:b4:5f:71:9e: 4c:6b:75:70:1f:14:a8:75:7e:95:a0:dc:3a:13:97: cf:4c:61:d8:2f:eb:63:44:9e:f0:f7:e0:74:9b:ed: 18:fc:75:2a:13:c0:4d:0f:7f:f0:52:54:7c:0a:fe: ea:06:2b:58:93:c7:49:70:71:80:01:2e:d3:a6:08: 87:1d:ab:5e:17:65:b2:4a:21:18:06:b7:15:aa:08: 23:a5:fb:c8:4c:b6:26:32:09:b7:2d:55:bb:b2:a4: 72:c8:26:6e:66:d2:8c:2b:78:a3:ff:b9:88:16:ba: a8:b9:2a:6c:b9:03:02:e2:4a:ca:f4:8e:d9:1a:7f: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D8:14:8B:6B:87:16:A9:B6:2E:50:C1:F7:C9:5B:A8:DB:58:91:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ac:7b:0f:90:d7:14:df:b8:4a:30:6b:a4:b7:3a:39:7d:7f: 18:ba:43:70:e5:77:a4:2c:f1:28:44:36:5a:f6:ae:3e:ce:22: 7a:ef:0b:af:37:68:28:20:8d:3d:0b:71:6d:64:ec:83:c9:8f: 8a:5b:1c:12:f4:14:51:9d:a4:c0:d6:b2:86:19:c7:20:73:d8: 1c:a5:ab:50:18:65:e6:73:62:11:18:cb:70:98:87:cb:56:36: 44:73:7c:13:be:d3:6f:02:63:42:68:ea:ff:ee:f7:cc:47:5a: ca:be:68:af:ea:cd:1c:09:0a:61:cf:49:81:c0:4e:3d:5b:f8: 85:d2:78:13:59:c4:db:9b:6e:2d:be:20:c2:15:cb:2d:41:41: b1:ef:7f:63:33:d2:da:db:8e:75:50:da:42:83:3d:9f:d7:04: e3:44:eb:e0:32:6c:90:2a:e5:94:82:30:52:f5:c5:33:83:52: 25:2d:c9:cd:0f:81:46:91:c0:75:36:a0:4c:96:87:32:29:14: 09:ad:91:35:59:03:d5:d2:26:47:af:93:b1:3d:ef:ec:fd:dd: d5:4c:51:7f:2a:8b:1c:81:f9:c4:17:4a:f2:1e:23:ad:dc:1a: e9:d0:22:0d:1e:58:e5:b4:48:a2:bd:10:56:aa:e9:2b:1b:79: e4:ce:f4:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaps7oztY9zRgiz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZDE1Y2Y4MTQtOGQ2MS00YjE0LWIzOTYtNjdlYTg4ODFkOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHoXYqET0EajNBO4aZ6Ur+yNpXIRmrGjKl52 u49qiHdRG+/Y36Sz5ZxiGk3KnwuCdQ5jzy+sHP9lOZgjNgTrTMKgFvXsqGpf2Ed4 FMPP6sF15Qtq5SB26w9EaZIlJCcfq1xpgPbN0MiaAg7aZiDvJLBv6G9WfRmn5i+3 nW4rE0x6vrRfcZ5Ma3VwHxSodX6VoNw6E5fPTGHYL+tjRJ7w9+B0m+0Y/HUqE8BN D3/wUlR8Cv7qBitYk8dJcHGAAS7TpgiHHateF2WySiEYBrcVqggjpfvITLYmMgm3 LVW7sqRyyCZuZtKMK3ij/7mIFrqouSpsuQMC4krK9I7ZGn8ElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3YFItrhxapti5QwffJW6jbWJHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZjc3YTUxYTEtZWMwMy0z ZTgyLWIzYmItYzk1ZTI2NWIzNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl8/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACsew+Q1xTfuEowa6S3Ojl9fxi6Q3Dld6Qs8ShENlr2rj7OInrvC683 aCggjT0LcW1k7IPJj4pbHBL0FFGdpMDWsoYZxyBz2Bylq1AYZeZzYhEYy3CYh8tW NkRzfBO+028CY0Jo6v/u98xHWsq+aK/qzRwJCmHPSYHATj1b+IXSeBNZxNubbi2+ IMIVyy1BQbHvf2Mz0trbjnVQ2kKDPZ/XBONE6+AybJAq5ZSCMFL1xTODUiUtyc0P gUaRwHU2oEyWhzIpFAmtkTVZA9XSJkevk7E97+z93dVMUX8qixyB+cQXSvIeI63c GunQIg0eWOW0SKK9EFaq6SsbeeTO9B0= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:22 2025 by rpki-client