$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/79094ddb-1fdf-3853-a937-907b531c18c8.roa File: 79094ddb-1fdf-3853-a937-907b531c18c8.roa (raw, json) Hash identifier: xK090Zs+I+wfUbV9+Kl/Gwccz83WnjBvm3d0NB9Q4n4= Subject key identifier: 58:2B:FE:56:6C:A2:9A:29:83:86:01:81:D6:9F:79:F0:85:6A:10:85 Certificate issuer: /CN=a02fffee-5e21-4885-baa1-1caf716c51aa Certificate serial: 010D0C9F43285848A830AE64AE399FCCFB461280 Authority key identifier: 44:DA:48:0F:C9:8E:A2:3D:8E:09:E2:75:CD:96:AD:7C:C6:9B:89:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/79094ddb-1fdf-3853-a937-907b531c18c8.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 398801 IP address blocks: 155.254.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/a02fffee-5e21-4885-baa1-1caf716c51aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/a02fffee-5e21-4885-baa1-1caf716c51aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ae:64:ae:39:9f:cc:fb:46:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a02fffee-5e21-4885-baa1-1caf716c51aa Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=13c4fe2c-c547-40dc-a4af-5e5bf8a18705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:ee:64:2e:2b:8e:62:45:60:7c:7e:44:34: 7c:77:9f:66:61:30:6c:cc:af:36:be:c3:06:ba:55: ee:3d:94:c8:67:0c:e9:43:6a:c8:d3:d9:02:d5:3f: 97:5d:76:f6:43:96:21:9c:d6:eb:ed:94:96:3d:09: ee:f4:2a:c4:99:b6:06:4b:d6:5d:35:d5:a5:a0:bd: 27:57:85:5b:a9:3a:f9:69:ec:ae:f6:9d:0d:b6:b8: 36:54:2d:10:a8:85:f4:51:5d:e0:11:b4:a1:cc:a5: 0f:f2:f5:bf:98:47:89:f2:44:ba:af:9e:29:91:a6: 8a:0a:b7:89:77:d3:1a:cd:59:0a:bc:21:42:24:7f: b8:28:a3:b6:40:c8:45:5e:5f:84:f3:97:fd:ce:88: 1e:4d:4f:2e:b8:af:db:64:e9:de:8b:65:ee:08:08: 6d:e0:5a:15:54:88:a0:76:43:80:2a:4d:f3:80:a7: 43:f6:37:6a:ed:48:bc:d4:0b:d8:b6:0c:25:8c:93: 69:20:f0:7d:6d:07:71:4b:04:ba:61:12:3d:e1:3d: 77:e9:08:e9:fc:2c:39:da:4f:d1:47:d5:37:1e:55: 96:e6:38:35:e3:78:dd:08:6d:62:68:be:9e:26:65: c6:7e:e4:b1:7f:2a:7e:05:63:59:56:82:77:06:5e: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2B:FE:56:6C:A2:9A:29:83:86:01:81:D6:9F:79:F0:85:6A:10:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/79094ddb-1fdf-3853-a937-907b531c18c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/a02fffee-5e21-4885-baa1-1caf716c51aa.crl X509v3 Authority Key Identifier: keyid:44:DA:48:0F:C9:8E:A2:3D:8E:09:E2:75:CD:96:AD:7C:C6:9B:89:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa.cer sbgp-ipAddrBlock: critical IPv4: 155.254.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:90:6a:3e:c5:66:af:2d:93:94:6c:17:4e:04:06:d7:c1:29: 35:c2:a1:bf:c4:f2:94:c0:21:a5:8b:05:ac:d5:af:24:49:11: 53:38:b0:c8:50:0f:a9:70:72:39:aa:f8:28:3f:2e:8c:ba:de: 3d:24:96:76:ab:d2:90:2e:5e:1f:54:94:08:bb:fc:9b:71:7d: a0:61:7d:75:3b:08:02:56:fa:55:b6:46:f8:5f:99:c0:05:87: 93:d3:d1:38:3a:01:8c:4c:58:9b:cf:32:5a:9c:bf:d7:91:55: 40:8d:f0:ae:71:11:e4:2d:c6:e5:36:9a:02:b3:83:f2:5e:e6: e9:6d:4b:b8:30:5a:d6:b7:93:f4:2d:db:77:46:d1:6c:79:ce: c6:3e:f0:91:a2:c2:7c:d1:78:13:52:ec:f6:14:12:6e:14:29: 5b:1e:01:c9:36:10:0f:5e:66:e4:9e:77:ec:f8:64:d0:9d:9b: 1f:8a:56:35:82:95:6e:e5:85:aa:0c:04:54:c8:88:2a:43:74: 81:4e:fc:82:53:90:f7:03:c9:02:9b:40:6a:39:c4:b6:1a:4c: 97:96:fc:77:da:4a:6b:16:cd:19:71:86:ea:44:41:b3:44:74: bc:19:83:2b:a3:04:da:c6:bf:36:e9:14:44:56:8d:78:e6:73: ca:41:65:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMK5krjmfzPtGEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAyZmZmZWUtNWUyMS00ODg1LWJhYTEtMWNhZjcxNmM1 MWFhMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MTNjNGZlMmMtYzU0Ny00MGRjLWE0YWYtNWU1YmY4YTE4NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EjuZC4rjmJFYHx+RDR8d59mYTBszK82vsMG ulXuPZTIZwzpQ2rI09kC1T+XXXb2Q5YhnNbr7ZSWPQnu9CrEmbYGS9ZdNdWloL0n V4VbqTr5aeyu9p0Ntrg2VC0QqIX0UV3gEbShzKUP8vW/mEeJ8kS6r54pkaaKCreJ d9MazVkKvCFCJH+4KKO2QMhFXl+E85f9zogeTU8uuK/bZOnei2XuCAht4FoVVIig dkOAKk3zgKdD9jdq7Ui81AvYtgwljJNpIPB9bQdxSwS6YRI94T136Qjp/Cw52k/R R9U3HlWW5jg143jdCG1iaL6eJmXGfuSxfyp+BWNZVoJ3Bl6nJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgr/lZsopopg4YBgdafefCFahCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMDJm ZmZlZS01ZTIxLTQ4ODUtYmFhMS0xY2FmNzE2YzUxYWEvNzkwOTRkZGItMWZkZi0z ODUzLWE5MzctOTA3YjUzMWMxOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTAyZmZmZWUtNWUyMS00ODg1LWJh YTEtMWNhZjcxNmM1MWFhL2EwMmZmZmVlLTVlMjEtNDg4NS1iYWExLTFjYWY3MTZj NTFhYS5jcmwwHwYDVR0jBBgwFoAURNpID8mOoj2OCeJ1zZatfMabidkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMDJmZmZlZS01ZTIxLTQ4ODUtYmFhMS0xY2Fm NzE2YzUxYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm/7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGQaj7FZq8tk5RsF04EBtfBKTXCob/E8pTAIaWLBazVryRJEVM4sMhQ D6lwcjmq+Cg/Loy63j0klnar0pAuXh9UlAi7/JtxfaBhfXU7CAJW+lW2RvhfmcAF h5PT0Tg6AYxMWJvPMlqcv9eRVUCN8K5xEeQtxuU2mgKzg/Je5ultS7gwWta3k/Qt 23dG0Wx5zsY+8JGiwnzReBNS7PYUEm4UKVseAck2EA9eZuSed+z4ZNCdmx+KVjWC lW7lhaoMBFTIiCpDdIFO/IJTkPcDyQKbQGo5xLYaTJeW/HfaSmsWzRlxhupEQbNE dLwZgyujBNrGvzbpFERWjXjmc8pBZUw= -----END CERTIFICATE-----Generated at Fri Apr 11 22:55:29 2025 by rpki-client