$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa File: c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa (raw, json) Hash identifier: RYjzn8Zs3libPXIUNsjmOjdKIqEE6YQrZyPduvu9d4g= Subject key identifier: AD:F0:1E:0F:56:A2:E0:B0:78:75:A8:3C:C1:EC:55:95:30:3D:64:05 Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d Certificate serial: 010D0C9F43285848A830ABA50A455BEA71E68200 Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 11602 IP address blocks: 151.159.0.0/17 maxlen: 24 151.159.128.0/18 maxlen: 24 151.159.192.0/20 maxlen: 24 151.159.208.0/21 maxlen: 24 151.159.216.0/22 maxlen: 24 151.159.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ab:a5:0a:45:5b:ea:71:e6:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=74704598-8a65-47f4-9f7d-b779f3501efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:72:66:4b:f0:c9:6c:da:32:f7:77:40:18:83: 4a:9b:43:13:d8:b4:a9:50:3e:b1:be:da:74:1a:71: e1:8d:44:54:ab:70:bb:dc:57:95:38:b0:4c:cc:dc: 91:b2:06:76:41:73:de:fd:9f:86:bd:b5:d3:5d:f9: 24:3f:7c:5f:56:f3:07:f0:11:a0:22:19:7d:5d:2a: 40:fc:27:03:1b:96:75:90:3c:a8:3f:e1:fc:2e:20: 20:cc:f5:dd:89:f4:d1:ac:62:e8:b0:73:78:72:d2: cb:c9:c5:71:1c:52:69:7d:eb:54:2e:58:15:c6:e2: 48:79:8b:4a:ef:19:83:14:3f:7c:65:ce:c9:a0:61: 26:0f:85:8e:47:73:73:78:aa:35:d4:d7:57:1d:fd: dd:5f:76:b9:16:37:7c:6d:8e:a9:51:ef:55:95:6d: c2:c0:ad:fd:f0:e5:7c:b3:b3:a5:85:b3:25:0f:49: e7:a6:83:9c:57:eb:cd:92:f9:5e:3f:92:f3:98:c1: c9:b5:d4:67:ca:3a:49:f7:ed:73:6d:1c:30:9e:10: 6b:09:70:c3:19:c9:7c:78:9a:ca:de:04:2e:47:d0: 3a:04:60:32:28:3e:f6:0a:43:0a:05:b2:91:97:ed: 48:1d:f3:31:a2:b2:a4:2d:68:e0:47:c8:8b:79:6d: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F0:1E:0F:56:A2:E0:B0:78:75:A8:3C:C1:EC:55:95:30:3D:64:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl X509v3 Authority Key Identifier: keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer sbgp-ipAddrBlock: critical IPv4: 151.159.0.0-151.159.219.255 151.159.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:a3:cd:59:e8:c0:08:22:2a:2d:b9:68:31:21:4a:d2:d3:e8: b7:14:c5:f6:24:d1:1e:1d:4d:d8:83:05:c5:b8:7f:f8:45:56: 3d:54:6a:2a:5b:0c:05:5a:f3:1d:87:1a:ae:26:47:17:c9:f5: 48:e1:36:20:c1:26:da:40:bb:49:67:93:43:3c:04:ec:b5:80: 4e:92:18:e4:21:fb:74:5a:09:df:03:4d:21:62:2a:05:87:16: 50:49:78:85:2a:2c:d4:d2:72:aa:3c:0f:d7:12:4e:7c:34:4c: 03:54:a8:30:1e:31:a6:2f:04:f1:f2:bd:13:f4:2c:50:f4:e3: 22:08:e0:a1:44:dd:26:a8:9b:22:79:c2:3e:1b:d3:2c:f8:e2: 60:72:45:a2:7e:2e:c6:c2:4f:31:8b:6e:a1:12:e0:de:7b:93: 63:2c:fa:b1:06:1a:a8:55:5e:f3:99:09:25:4c:f3:8c:78:29: bb:c2:76:03:30:a2:6d:ff:7e:16:b9:cc:99:2c:7f:30:5b:73: 8a:12:b6:f0:93:4c:bc:c6:3b:3a:58:40:14:45:65:df:19:08: 00:99:ed:9c:12:59:b9:a5:e9:b7:d3:d6:b0:db:b3:af:f1:bb: 7b:b1:8d:78:65:a8:9c:30:e2:1d:ca:9b:3d:71:c9:ba:68:81: 30:9c:71:fe -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEioMKulCkVb6nHmggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc2N2RjZWQtNGU4OS00OTY1LWI4ZGUtNTBlNDIxMjAx YjRkMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NzQ3MDQ1OTgtOGE2NS00N2Y0LTlmN2QtYjc3OWYzNTAxZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnJmS/DJbNoy93dAGINKm0MT2LSpUD6xvtp0 GnHhjURUq3C73FeVOLBMzNyRsgZ2QXPe/Z+GvbXTXfkkP3xfVvMH8BGgIhl9XSpA /CcDG5Z1kDyoP+H8LiAgzPXdifTRrGLosHN4ctLLycVxHFJpfetULlgVxuJIeYtK 7xmDFD98Zc7JoGEmD4WOR3NzeKo11NdXHf3dX3a5Fjd8bY6pUe9VlW3CwK398OV8 s7OlhbMlD0nnpoOcV+vNkvleP5LzmMHJtdRnyjpJ9+1zbRwwnhBrCXDDGcl8eJrK 3gQuR9A6BGAyKD72CkMKBbKRl+1IHfMxorKkLWjgR8iLeW2pGwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK3wHg9WouCweHWoPMHsVZUwPWQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3 ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0MjEyMDFiNGQvYzRmMGU1MzctY2ZkZC0z NDM3LWI1YWQtZjYxM2EyNTliMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc2N2RjZWQtNGU4OS00OTY1LWI4 ZGUtNTBlNDIxMjAxYjRkLzM3NjdkY2VkLTRlODktNDk2NS1iOGRlLTUwZTQyMTIw MWI0ZC5jcmwwHwYDVR0jBBgwFoAUSSpaeqWs/SJY9eRGkJ0Fcu2mgMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0 MjEyMDFiNGQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwCXnwME Apef2AMEBJef8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQDHo81Z6MAIIiotuWgxIUrS0+i3FMX2JNEeHU3Y gwXFuH/4RVY9VGoqWwwFWvMdhxquJkcXyfVI4TYgwSbaQLtJZ5NDPATstYBOkhjk Ift0WgnfA00hYioFhxZQSXiFKizU0nKqPA/XEk58NEwDVKgwHjGmLwTx8r0T9CxQ 9OMiCOChRN0mqJsiecI+G9Ms+OJgckWifi7Gwk8xi26hEuDee5NjLPqxBhqoVV7z mQklTPOMeCm7wnYDMKJt/34WucyZLH8wW3OKErbwk0y8xjs6WEAURWXfGQgAme2c Elm5pem309aw27Ov8bt7sY14ZaicMOIdyps9ccm6aIEwnHH+ -----END CERTIFICATE-----Generated at Sat Apr 12 00:57:36 2025 by rpki-client