$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa File: a31fe149-f14e-36f1-82c6-a4875e810e1b.roa (raw, json) Hash identifier: wN0Byv+de41T9GQfthN7AA5NcL3A8aYgmAwb9K/V1qY= Subject key identifier: 8B:4D:8E:B7:F0:56:9A:57:88:55:7B:17:D7:C6:B0:39:8C:36:CE:4E Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F432858491941744BAC66D4235C738500 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 54535 IP address blocks: 156.37.202.0/24 maxlen: 24 156.37.203.0/24 maxlen: 24 156.37.250.0/24 maxlen: 24 156.37.251.0/24 maxlen: 24 156.37.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:74:4b:ac:66:d4:23:5c:73:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=8dde87d6-7b54-4dd6-b624-2171d3325af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:fb:c1:7a:93:16:11:c9:d9:dc:10:a4:85: d7:df:ab:a4:fe:81:a2:67:15:db:47:7d:92:12:d3: f3:49:f3:3c:dd:5d:0f:77:dc:ef:59:23:cd:27:5d: 7f:87:23:69:18:cf:97:11:f1:54:3c:a6:ec:44:17: 7c:c4:b3:d7:13:a9:1d:2c:3e:23:85:79:51:9c:76: ce:5a:6b:98:8b:0a:00:f2:1f:d4:09:5e:f8:00:75: 75:d3:0f:6b:07:1b:a0:ca:19:a2:fa:4d:99:fc:13: 17:27:c9:db:3e:0d:f4:1b:61:b9:3f:bd:11:00:4a: 27:68:f5:05:0b:b8:80:e6:87:dd:88:12:6c:6e:17: 86:59:b3:08:b9:68:73:4a:54:b0:52:f2:01:44:a8: 4d:d9:6c:97:ac:b2:4e:88:ab:ea:dd:d5:d9:44:3b: 5a:09:0c:f8:a4:f7:b6:7d:c0:19:65:9e:af:e8:60: 9f:6c:62:07:c5:f1:9c:77:ae:e1:f9:64:97:aa:b7: c1:a6:6c:e1:1e:48:c7:d3:fd:5e:28:5c:e9:82:49: ad:43:34:c9:d2:ec:2d:2e:26:ab:aa:4b:0b:11:f8: 95:35:94:c2:41:b5:cb:86:6c:c6:2d:60:71:a3:ec: 30:2f:9f:ac:ff:7a:3d:fd:0f:9e:0e:8b:44:49:fd: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4D:8E:B7:F0:56:9A:57:88:55:7B:17:D7:C6:B0:39:8C:36:CE:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.202.0/23 156.37.250.0/23 156.37.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b1:0d:fd:0d:2d:46:04:25:4c:f4:34:be:fb:8d:04:8c:4c: 1f:0b:48:38:b6:14:eb:6b:7b:92:7d:95:83:c8:02:ca:0c:db: c5:9d:44:18:9b:64:1f:f3:c8:cf:73:7c:8c:69:9f:cf:bd:83: 6b:cc:9f:00:e1:b4:54:04:1f:1c:49:81:73:3d:dc:8b:60:74: b8:f0:40:7f:59:13:d5:3f:42:bf:84:bf:8b:cd:81:07:5f:54: 92:41:ce:68:33:81:5d:f7:85:0f:f4:d7:14:8c:0a:70:42:37: ca:eb:7e:05:95:f6:e3:d7:56:0a:69:0e:ef:d5:90:7f:3f:e5: 6d:8b:79:08:fc:0c:65:e1:60:0d:e1:1a:f5:ec:1f:95:47:f9: 93:a9:fe:c6:c9:6f:66:05:27:45:7d:8d:28:27:32:3d:a4:5d: 25:7f:4c:e0:bf:55:12:07:23:40:38:53:3c:dd:8e:a8:f1:81: 67:7d:ad:9f:ea:9f:cb:18:fe:b5:5d:1d:cf:c2:52:c0:13:3b: 9e:45:ca:49:7c:18:f3:77:30:71:3d:da:3f:ab:de:6f:b6:c5: 1d:2f:dc:aa:bf:c1:94:79:2a:88:83:19:82:ac:3a:8a:0f:fb: 27:12:c0:53:0e:29:89:d1:8b:b1:dd:a2:4a:3b:bd:ba:47:eb: 64:74:6c:e5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkZQXRLrGbUI1xzhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk OGRkZTg3ZDYtN2I1NC00ZGQ2LWI2MjQtMjE3MWQzMzI1YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkr7wXqTFhHJ2dwQpIXX36uk/oGiZxXbR32S EtPzSfM83V0Pd9zvWSPNJ11/hyNpGM+XEfFUPKbsRBd8xLPXE6kdLD4jhXlRnHbO WmuYiwoA8h/UCV74AHV10w9rBxugyhmi+k2Z/BMXJ8nbPg30G2G5P70RAEonaPUF C7iA5ofdiBJsbheGWbMIuWhzSlSwUvIBRKhN2WyXrLJOiKvq3dXZRDtaCQz4pPe2 fcAZZZ6v6GCfbGIHxfGcd67h+WSXqrfBpmzhHkjH0/1eKFzpgkmtQzTJ0uwtLiar qksLEfiVNZTCQbXLhmzGLWBxo+wwL5+s/3o9/Q+eDotESf2+TwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFItNjrfwVppXiFV7F9fGsDmMNs5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYTMxZmUxNDktZjE0ZS0z NmYxLTgyYzYtYTQ4NzVlODEwZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnCXKAwQB nCX6AwQAnCX9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHexDf0NLUYEJUz0NL77jQSMTB8LSDi2FOtre5J9 lYPIAsoM28WdRBibZB/zyM9zfIxpn8+9g2vMnwDhtFQEHxxJgXM93ItgdLjwQH9Z E9U/Qr+Ev4vNgQdfVJJBzmgzgV33hQ/01xSMCnBCN8rrfgWV9uPXVgppDu/VkH8/ 5W2LeQj8DGXhYA3hGvXsH5VH+ZOp/sbJb2YFJ0V9jSgnMj2kXSV/TOC/VRIHI0A4 UzzdjqjxgWd9rZ/qn8sY/rVdHc/CUsATO55Fykl8GPN3MHE92j+r3m+2xR0v3Kq/ wZR5KoiDGYKsOooP+ycSwFMOKYnRi7Hdoko7vbpH62R0bOU= -----END CERTIFICATE-----Generated at Sat Apr 12 01:38:53 2025 by rpki-client