$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7156c90-1f2f-3e1d-a0d9-8d6377c008a6.roa File: d7156c90-1f2f-3e1d-a0d9-8d6377c008a6.roa (raw, json) Hash identifier: bTsGNdtsZrdEMjuKrqwfiC5xo/5nhaLx/Bu8IbrATR0= Subject key identifier: B3:FF:37:92:76:DE:D8:F9:8C:A6:D7:77:27:DD:EB:15:AE:4D:63:12 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F43285848F22BE6768D0B824457A93100 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7156c90-1f2f-3e1d-a0d9-8d6377c008a6.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 54113 IP address blocks: 157.52.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e6:76:8d:0b:82:44:57:a9:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=119a4ca9-b029-42f9-83e8-054148a71d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:07:8d:de:62:6b:e6:ca:1e:65:bd:00:e5: 35:83:ad:3c:26:34:29:11:83:38:3e:0e:46:32:67: 96:2e:4d:35:97:01:6d:f4:1e:38:69:c5:d9:d2:01: 48:c4:df:fb:05:31:ee:37:bf:32:2f:86:57:27:30: 2d:82:7d:43:09:ba:f1:3a:78:5b:c2:3b:2e:88:85: c3:eb:6f:dc:66:c8:0f:74:c6:fc:9c:ab:50:cb:46: fd:c1:53:5e:86:42:9e:31:6c:33:37:68:ff:58:98: 8e:73:31:4b:22:ba:ba:2a:d4:9c:57:b6:d4:29:b7: a4:f0:08:2e:98:72:0a:6d:43:1a:35:a3:c6:9b:8f: f8:a8:0e:d2:ba:8d:ba:30:62:06:43:65:cd:79:63: da:1f:7d:80:a6:0d:82:01:74:7e:eb:e6:72:08:15: 30:61:92:3a:90:30:7c:c4:8e:a3:16:30:ab:75:4b: f8:15:9d:85:49:8e:93:9a:dc:db:df:54:63:1c:ad: 8f:a3:9e:f6:68:43:69:cf:8a:76:0f:d2:00:c8:7c: bf:ea:ba:d2:d1:49:28:7f:97:5f:3a:97:29:d6:b7: 01:d8:9c:a8:3c:37:fc:6a:ea:f4:c5:eb:1c:19:4d: f4:16:5c:94:a0:7b:92:23:a4:10:c2:f8:4b:af:0d: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FF:37:92:76:DE:D8:F9:8C:A6:D7:77:27:DD:EB:15:AE:4D:63:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7156c90-1f2f-3e1d-a0d9-8d6377c008a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 157.52.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:08:1c:09:72:4d:e9:d3:d6:68:f9:65:fe:f4:c3:2c:ed:77: bc:3c:ab:63:30:e1:b3:67:dd:4c:db:13:b1:e5:d5:cf:8e:4c: d4:04:0d:b5:62:61:78:87:39:bd:04:48:a2:fc:93:0b:8f:c9: 4e:64:94:92:aa:05:9b:ac:86:af:39:5a:7d:ab:8e:4e:86:7e: 07:c2:56:4a:fa:2b:41:25:16:28:c9:74:11:06:0d:76:63:ac: 6d:1c:7e:e3:a0:03:73:2d:86:4a:79:d3:a4:e7:47:9f:af:c6: 41:03:fb:db:04:3b:7f:19:71:d2:4e:1a:d4:1b:b1:d7:fb:f8: c5:25:09:16:40:ae:b9:11:11:53:c2:f0:ce:14:d4:49:70:b7: 96:cf:7c:8b:80:e7:3f:ae:54:6b:99:51:62:42:89:a7:67:01: 4a:0e:ca:d7:7f:f4:e8:76:0f:e2:7c:d1:43:80:43:3c:e0:c2: 78:54:96:a4:bb:a7:98:b9:2b:51:51:55:4e:d6:51:4b:9a:b6: 17:bb:ac:86:41:28:34:f0:a9:77:0c:05:ec:78:6c:b8:0c:e4: 90:63:b0:24:84:bb:9d:86:ba:34:e3:ba:17:2a:bc:1e:f5:4b: d9:07:44:a7:67:1a:cf:63:06:0e:38:13:a9:be:d4:f6:1e:66: 8f:86:79:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+Z2jQuCRFepMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MTE5YTRjYTktYjAyOS00MmY5LTgzZTgtMDU0MTQ4YTcxZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjwHjd5ia+bKHmW9AOU1g608JjQpEYM4Pg5G MmeWLk01lwFt9B44acXZ0gFIxN/7BTHuN78yL4ZXJzAtgn1DCbrxOnhbwjsuiIXD 62/cZsgPdMb8nKtQy0b9wVNehkKeMWwzN2j/WJiOczFLIrq6KtScV7bUKbek8Agu mHIKbUMaNaPGm4/4qA7Suo26MGIGQ2XNeWPaH32Apg2CAXR+6+ZyCBUwYZI6kDB8 xI6jFjCrdUv4FZ2FSY6Tmtzb31RjHK2Po572aENpz4p2D9IAyHy/6rrS0Ukof5df Opcp1rcB2JyoPDf8aur0xescGU30FlyUoHuSI6QQwvhLrw1zdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP/N5J23tj5jKbXdyfd6xWuTWMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDcxNTZjOTAtMWYyZi0z ZTFkLWEwZDktOGQ2Mzc3YzAwOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEIHAlyTenT1mj5Zf70wyztd7w8q2Mw4bNn3UzbE7Hl1c+OTNQEDbVi YXiHOb0ESKL8kwuPyU5klJKqBZushq85Wn2rjk6GfgfCVkr6K0ElFijJdBEGDXZj rG0cfuOgA3Mthkp506TnR5+vxkED+9sEO38ZcdJOGtQbsdf7+MUlCRZArrkREVPC 8M4U1Elwt5bPfIuA5z+uVGuZUWJCiadnAUoOytd/9Oh2D+J80UOAQzzgwnhUlqS7 p5i5K1FRVU7WUUuathe7rIZBKDTwqXcMBex4bLgM5JBjsCSEu52GujTjuhcqvB71 S9kHRKdnGs9jBg44E6m+1PYeZo+GeZ8= -----END CERTIFICATE-----Generated at Thu Apr 3 02:56:49 2025 by rpki-client