$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa File: f7201aa5-0964-32a1-94a5-9389429ccd8f.roa (raw, json) Hash identifier: 7eCXyus2CyLLg3pZmIMEgitnWZGrlutfAkcrKWLAyfI= Subject key identifier: 3D:64:D5:0E:48:08:36:D9:90:42:A7:D1:14:91:5F:35:F6:17:9B:2B Certificate issuer: /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6 Certificate serial: 010D0C9F4328584949FE93B1537984C840B62600 Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 398655 IP address blocks: 158.83.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:93:b1:53:79:84:c8:40:b6:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=673a3dd6-a4f9-4216-ae8c-3b8bbfb0de34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:48:00:e3:80:fc:e2:e1:a4:bc:bc:2b:9b:9b: cf:61:c3:ad:1f:a3:63:8b:70:ba:d0:fe:4b:a8:1a: 1e:f6:9f:68:f5:2c:48:24:39:95:db:5a:6d:e2:28: ed:fb:81:c7:f4:4f:8d:bc:ae:56:85:ea:7e:e7:e6: 44:6f:15:87:7f:a5:0c:38:6b:c5:6e:1d:5a:d2:81: 69:41:6d:28:fd:bf:dc:b5:ad:8d:64:30:fb:40:90: 73:aa:c0:71:26:d6:7e:83:31:3f:34:19:4f:82:e4: 8a:f0:75:d9:5c:3b:62:ee:45:e7:ce:0f:6d:80:77: 14:67:17:a4:fd:0c:69:39:82:aa:2d:f6:84:32:a2: c4:ca:9c:3b:e5:60:30:02:3e:eb:b4:16:81:96:eb: f8:fa:b6:b6:f4:7e:75:6e:e4:69:d2:22:75:5f:42: ac:81:55:80:25:ac:6b:31:72:0e:b0:d0:44:8f:dd: cb:91:fa:92:89:0b:07:06:7c:70:01:f7:77:0c:d2: a6:f1:14:ba:36:e4:f0:7e:77:05:c4:04:c4:12:3e: a7:f0:43:fe:35:90:03:82:da:d3:f0:39:ba:80:ce: ea:e1:8a:98:dc:61:d5:2d:c3:5b:e2:5e:2c:ec:d6: cc:4e:9b:be:44:c4:9b:19:9e:1b:df:72:dc:8a:5f: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:64:D5:0E:48:08:36:D9:90:42:A7:D1:14:91:5F:35:F6:17:9B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl X509v3 Authority Key Identifier: keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer sbgp-ipAddrBlock: critical IPv4: 158.83.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1d:1d:57:dd:a7:0f:6f:89:98:ce:65:87:eb:95:94:57:15: 6f:c5:87:9e:9c:cb:b7:70:da:6f:39:9d:dd:21:04:1d:be:57: bf:c5:5d:99:0c:d5:9d:ac:c6:69:6e:a9:2b:74:a7:c5:60:60: b1:51:29:83:5c:1a:88:61:28:2a:b2:98:d3:d2:28:c7:1b:46: 90:41:a7:b9:5b:73:65:6e:03:01:82:55:83:a5:db:0a:02:28: 21:30:54:bd:87:04:1b:09:a2:fb:c0:90:53:0e:88:0b:dd:d2: 26:b2:e0:43:76:78:57:e9:70:cd:92:07:2c:5a:ee:8b:b5:0d: 15:e1:69:5a:d7:1b:58:c8:1e:84:e2:6e:8a:45:6d:84:bc:c1: 9a:b0:1e:9d:11:d6:8b:83:9e:c3:71:7f:3b:b2:c2:94:23:1b: 1c:96:2e:ab:ac:0f:03:7d:c4:96:16:23:dd:f7:bb:65:ab:02: 61:7f:dd:59:35:52:f3:12:15:5e:22:36:2b:b7:fe:bd:6a:91: 47:5f:26:7a:de:95:82:ee:4c:60:32:e5:0a:0a:ce:d7:22:ed: be:ef:94:29:10:97:fb:aa:8c:94:4a:57:0a:53:1c:f5:5b:1e: 7d:dd:1c:da:d4:61:c4:9d:23:12:5d:97:cf:c5:41:77:a4:e4: 7a:6b:a3:88 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElJ/pOxU3mEyEC2JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFhMmQ0YjEtZGQ2My00ZWEzLTg3NjItNzBkNjI4MzQ3 Y2E2MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NjczYTNkZDYtYTRmOS00MjE2LWFlOGMtM2I4YmJmYjBkZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkgA44D84uGkvLwrm5vPYcOtH6Nji3C60P5L qBoe9p9o9SxIJDmV21pt4ijt+4HH9E+NvK5Whep+5+ZEbxWHf6UMOGvFbh1a0oFp QW0o/b/cta2NZDD7QJBzqsBxJtZ+gzE/NBlPguSK8HXZXDti7kXnzg9tgHcUZxek /QxpOYKqLfaEMqLEypw75WAwAj7rtBaBluv4+ra29H51buRp0iJ1X0KsgVWAJaxr MXIOsNBEj93LkfqSiQsHBnxwAfd3DNKm8RS6NuTwfncFxATEEj6n8EP+NZADgtrT 8Dm6gM7q4YqY3GHVLcNb4l4s7NbMTpu+RMSbGZ4b33Lcil+eLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD1k1Q5ICDbZkEKn0RSRXzX2F5srMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEy ZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2MjgzNDdjYTYvZjcyMDFhYTUtMDk2NC0z MmExLTk0YTUtOTM4OTQyOWNjZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDFhMmQ0YjEtZGQ2My00ZWEzLTg3 NjItNzBkNjI4MzQ3Y2E2L2QxYTJkNGIxLWRkNjMtNGVhMy04NzYyLTcwZDYyODM0 N2NhNi5jcmwwHwYDVR0jBBgwFoAUs6z+T9Sr8E7RB6JfLC/S0EMX/vswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEyZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2 MjgzNDdjYTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnlMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOR0dV92nD2+JmM5lh+uVlFcVb8WHnpzLt3Dabzmd3SEEHb5Xv8VdmQzV nazGaW6pK3SnxWBgsVEpg1waiGEoKrKY09IoxxtGkEGnuVtzZW4DAYJVg6XbCgIo ITBUvYcEGwmi+8CQUw6IC93SJrLgQ3Z4V+lwzZIHLFrui7UNFeFpWtcbWMgehOJu ikVthLzBmrAenRHWi4Oew3F/O7LClCMbHJYuq6wPA33ElhYj3fe7ZasCYX/dWTVS 8xIVXiI2K7f+vWqRR18met6Vgu5MYDLlCgrO1yLtvu+UKRCX+6qMlEpXClMc9Vse fd0c2tRhxJ0jEl2Xz8VBd6TkemujiA== -----END CERTIFICATE-----Generated at Fri Apr 4 19:07:05 2025 by rpki-client