$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa File: 26cfd816-2d86-3517-87c3-b35ccc8a1995.roa (raw, json) Hash identifier: GyNQ2Zw9HuKY5cgRof1k66OcJrh9qTpxGBEv6JtB8ck= Subject key identifier: 2E:79:24:E5:1D:2E:14:10:A7:59:CE:A7:6B:41:83:2D:7B:BC:29:A7 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F432858491941741601E7BF22DB6DC180 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 54535 IP address blocks: 156.37.200.0/24 maxlen: 24 156.37.201.0/24 maxlen: 24 156.37.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:74:16:01:e7:bf:22:db:6d:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=4baff05f-e912-4d0c-a3dc-f903b97615a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:57:98:8f:dc:70:71:0c:f6:63:fb:4c:30:23: d7:89:51:4d:04:c6:f3:4c:7a:42:4f:54:8d:95:8f: 83:78:07:09:9d:10:d9:6d:c2:ae:f2:0f:56:b3:03: 9e:5f:85:26:4f:89:36:06:5c:e7:64:c7:32:53:a1: ea:c7:58:7f:70:dd:b3:e6:59:6e:14:6f:5f:18:3c: 25:37:e4:c0:a5:14:0f:05:ef:9a:25:65:5d:64:4a: 1d:f1:88:7a:98:53:32:c4:0b:40:1b:5a:8f:2d:00: f2:4a:cd:4c:0b:43:f5:67:f4:cc:34:a6:b2:cf:48: 47:c5:aa:32:f4:94:ec:6a:9b:64:e8:df:fb:91:ec: cd:37:23:bc:f6:50:d8:6b:92:ba:4c:13:8f:f0:75: 12:3d:db:90:da:27:37:44:ed:8d:54:75:9d:0e:54: bd:69:88:0e:86:a3:b0:ba:a4:f1:55:32:4f:74:98: 76:2c:4b:c4:5b:6c:ad:ce:30:01:c5:9e:6c:4c:f7: 1a:c0:96:35:52:94:83:50:00:96:7d:4e:2c:5d:0c: 98:ed:7d:ff:b5:2b:a1:f5:76:df:d9:29:bf:c1:78: 9d:7b:8e:9a:6d:04:5d:16:89:79:0a:47:59:92:30: d6:44:17:9a:18:8d:43:ae:b3:f0:3c:4b:47:20:f7: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:79:24:E5:1D:2E:14:10:A7:59:CE:A7:6B:41:83:2D:7B:BC:29:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.200.0/23 156.37.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:92:06:bc:5f:68:87:b1:49:e8:89:c9:21:69:3e:60:f5:71: e1:1f:40:8d:3d:d4:c2:d4:b7:fc:ad:56:bf:29:9e:f7:7b:91: a8:ba:a8:9e:6a:51:0c:ed:49:57:02:ce:44:39:c6:d8:e2:bb: 9f:2f:39:ad:2e:23:ba:f7:e7:86:e3:8f:e8:91:25:00:1b:50: 58:b3:1f:9e:7d:fe:a9:c2:53:5d:69:b7:c0:52:21:a8:f2:98: d1:16:0b:4c:9a:9c:ee:07:0e:1d:21:d4:0b:43:ff:12:68:c4: 3e:e0:a9:38:13:72:a1:84:d5:b7:c6:12:75:db:d9:9d:7b:f5: f1:6e:1a:d1:57:98:2c:81:fd:77:53:6b:ad:c4:0e:aa:70:93: db:b6:68:f4:5e:24:d6:1b:19:bc:9e:09:a9:ec:1a:0d:ec:ec: b3:b9:11:bf:ce:f5:c6:04:0f:9a:46:e8:82:66:2d:09:7a:58: b4:b6:31:95:ea:70:3e:b3:f5:c3:f9:94:8b:54:03:95:6c:0e: cd:b8:ff:3b:cc:d5:cb:8e:9a:3c:c4:ad:af:d2:db:8a:be:22: c3:c0:c9:72:51:31:35:06:0d:4d:d2:c1:23:24:72:64:c9:ac: 7c:f3:c2:83:19:d3:84:83:0b:0a:09:d7:e6:eb:3b:1c:0f:42: 8d:d9:00:01 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkZQXQWAee/ItttwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NGJhZmYwNWYtZTkxMi00ZDBjLWEzZGMtZjkwM2I5NzYxNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVeYj9xwcQz2Y/tMMCPXiVFNBMbzTHpCT1SN lY+DeAcJnRDZbcKu8g9WswOeX4UmT4k2BlznZMcyU6Hqx1h/cN2z5lluFG9fGDwl N+TApRQPBe+aJWVdZEod8Yh6mFMyxAtAG1qPLQDySs1MC0P1Z/TMNKayz0hHxaoy 9JTsaptk6N/7kezNNyO89lDYa5K6TBOP8HUSPduQ2ic3RO2NVHWdDlS9aYgOhqOw uqTxVTJPdJh2LEvEW2ytzjABxZ5sTPcawJY1UpSDUACWfU4sXQyY7X3/tSuh9Xbf 2Sm/wXide46abQRdFol5CkdZkjDWRBeaGI1DrrPwPEtHIPcgqQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC55JOUdLhQQp1nOp2tBgy17vCmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvMjZjZmQ4MTYtMmQ4Ni0z NTE3LTg3YzMtYjM1Y2NjOGExOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnCXIAwQB nCXoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAqSBrxfaIexSeiJySFpPmD1ceEfQI091MLUt/ytVr8pnvd7 kai6qJ5qUQztSVcCzkQ5xtjiu58vOa0uI7r354bjj+iRJQAbUFizH559/qnCU11p t8BSIajymNEWC0yanO4HDh0h1AtD/xJoxD7gqTgTcqGE1bfGEnXb2Z179fFuGtFX mCyB/XdTa63EDqpwk9u2aPReJNYbGbyeCansGg3s7LO5Eb/O9cYED5pG6IJmLQl6 WLS2MZXqcD6z9cP5lItUA5VsDs24/zvM1cuOmjzEra/S24q+IsPAyXJRMTUGDU3S wSMkcmTJrHzzwoMZ04SDCwoJ1+brOxwPQo3ZAAE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:43 2025 by rpki-client