$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa File: 571768c7-1a06-3657-84a4-df54cd111858.roa (raw, json) Hash identifier: +voXRzX2HdVmLB4TMZKmD+W/lGWNJbWhnaa+VAdo/2A= Subject key identifier: 04:07:40:10:F1:B4:B4:96:C5:BF:00:18:7B:62:4C:D9:C7:91:4A:2E Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584919417466376734AB3CBDECC0 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 54535 IP address blocks: 156.53.198.0/24 maxlen: 24 156.53.199.0/24 maxlen: 24 156.53.224.0/23 maxlen: 23 156.53.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:74:66:37:67:34:ab:3c:bd:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=40d46ab2-1860-4620-8421-ac291f07bc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:33:57:f0:1e:04:66:b4:ff:15:bb:ba:ed: 55:cb:31:bb:b1:66:cb:3c:2a:c8:83:fb:ee:9b:35: cf:b2:55:aa:8a:8f:2b:30:c4:24:23:34:71:bd:10: ec:d0:0a:d1:15:ec:8f:ce:ab:1b:7c:32:e5:53:1a: 05:bc:19:c7:67:c1:6d:c9:82:f4:6c:52:7e:19:57: 7c:e4:ad:c7:fb:6f:67:ec:bb:3e:16:95:14:11:29: 1f:af:fb:c9:7e:2d:cf:ad:55:15:14:0f:27:8f:fc: b7:8c:38:c1:81:a8:e5:f3:24:51:f0:28:7d:8a:74: c5:6b:42:f4:66:21:6f:26:9c:66:48:6c:c5:2a:89: 26:3a:21:bd:7a:16:08:ab:18:46:5f:30:7a:1d:47: 14:70:57:2d:7c:bc:59:2c:5b:8b:17:5c:24:b3:36: d1:22:d5:4c:1f:48:f1:aa:57:25:e7:5f:10:2d:39: ef:29:c1:d7:50:46:13:38:d4:17:b4:9c:e4:cf:d5: 3e:0a:32:6e:31:a0:89:94:d4:9f:3e:98:ec:3d:bb: 01:3a:6e:6d:90:1d:b0:19:0b:20:dd:7b:a4:f9:f6: 5e:ce:bf:e0:1f:f9:36:74:b4:cd:d0:a0:f4:fb:41: 87:35:1b:06:a2:30:3b:94:61:b1:af:7a:c3:31:04: 55:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:07:40:10:F1:B4:B4:96:C5:BF:00:18:7B:62:4C:D9:C7:91:4A:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.198.0/23 156.53.224.0/23 156.53.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:be:bd:88:2f:36:c0:62:f1:5e:55:f5:92:4a:c3:40:59:19: 70:bc:e5:f4:99:a6:25:a7:0c:e7:b5:f2:9a:ee:b3:62:49:c5: bf:03:09:a9:f1:59:39:7a:a4:03:86:2c:c0:5d:0f:fd:e7:d6: 3d:03:2d:75:ea:cf:df:95:f5:0f:57:1e:f2:02:68:9d:da:73: a6:e8:15:80:07:6b:ac:46:f5:06:a6:60:e9:0c:50:67:24:2d: ed:5c:a1:68:ba:f7:00:2f:53:5d:d1:0b:aa:43:6b:b4:35:45: 6b:50:69:ad:96:fc:d8:53:da:63:6d:92:c2:46:66:11:b3:12: 4c:80:f9:ad:5c:4a:e6:77:c9:13:b5:72:17:88:07:9c:62:7f: a0:6f:5f:56:f2:e7:16:19:d2:75:ba:c1:fa:05:df:44:b2:23: e1:fd:9a:45:b6:18:7a:58:cf:3c:1e:9c:ae:63:79:49:78:44: 2b:70:cb:a6:2c:3c:ac:92:ad:08:60:78:ed:ff:d9:db:66:45: 35:c8:50:5f:67:12:8c:0d:0b:83:27:69:ca:e6:96:89:7e:16: 34:69:6b:3e:49:e8:b6:52:e4:39:10:53:38:39:90:fe:7e:68: 42:03:ae:0a:db:2e:ed:3e:dd:b7:b8:6d:92:9a:f7:e7:9e:82: 07:af:66:0d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkZQXRmN2c0qzy97MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NDBkNDZhYjItMTg2MC00NjIwLTg0MjEtYWMyOTFmMDdiYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhMzV/AeBGa0/xW7uu1VyzG7sWbLPCrIg/vu mzXPslWqio8rMMQkIzRxvRDs0ArRFeyPzqsbfDLlUxoFvBnHZ8FtyYL0bFJ+GVd8 5K3H+29n7Ls+FpUUESkfr/vJfi3PrVUVFA8nj/y3jDjBgajl8yRR8Ch9inTFa0L0 ZiFvJpxmSGzFKokmOiG9ehYIqxhGXzB6HUcUcFctfLxZLFuLF1wkszbRItVMH0jx qlcl518QLTnvKcHXUEYTONQXtJzkz9U+CjJuMaCJlNSfPpjsPbsBOm5tkB2wGQsg 3Xuk+fZezr/gH/k2dLTN0KD0+0GHNRsGojA7lGGxr3rDMQRVnwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAQHQBDxtLSWxb8AGHtiTNnHkUouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvNTcxNzY4YzctMWEwNi0z NjU3LTg0YTQtZGY1NGNkMTExODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnDXGAwQB nDXgAwQCnDXwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA6+vYgvNsBi8V5V9ZJKw0BZGXC85fSZpiWnDOe1 8prus2JJxb8DCanxWTl6pAOGLMBdD/3n1j0DLXXqz9+V9Q9XHvICaJ3ac6boFYAH a6xG9QamYOkMUGckLe1coWi69wAvU13RC6pDa7Q1RWtQaa2W/NhT2mNtksJGZhGz EkyA+a1cSuZ3yRO1cheIB5xif6BvX1by5xYZ0nW6wfoF30SyI+H9mkW2GHpYzzwe nK5jeUl4RCtwy6YsPKySrQhgeO3/2dtmRTXIUF9nEowNC4Mnacrmlol+FjRpaz5J 6LZS5DkQUzg5kP5+aEIDrgrbLu0+3be4bZKa9+eeggevZg0= -----END CERTIFICATE-----Generated at Sat Apr 12 01:41:22 2025 by rpki-client