$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/ac35c2b5-65fd-34d7-8216-230376162d02.roa File: ac35c2b5-65fd-34d7-8216-230376162d02.roa (raw, json) Hash identifier: gK0ApkbsXvPyU5sa7tQMN3+dSsOphTrP5mePjA2eJGs= Subject key identifier: 57:04:C5:EC:1C:51:42:6D:AE:83:18:68:84:CF:32:1E:38:4D:61:46 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F432858490B4C19E95787ACA62B01FE80 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/ac35c2b5-65fd-34d7-8216-230376162d02.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 21971 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:19:e9:57:87:ac:a6:2b:01:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=fad55ab9-349a-4895-a5f0-100edbdce824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4f:ae:1a:d7:6c:c3:bb:87:2f:ed:09:2e:ee: 0b:5b:9e:51:1d:50:bb:4a:59:19:bf:45:38:2d:ce: 91:0d:cd:0a:7a:bd:06:dc:14:33:ba:41:53:99:2f: 0d:3b:95:4e:4b:74:ce:1d:bd:6b:48:f1:b4:be:56: 81:ec:0c:76:18:58:5d:13:e5:93:42:1b:9c:83:09: 2a:81:0e:fe:ac:dc:6a:60:2c:19:61:48:d3:a2:01: 4d:e9:16:37:57:65:e1:55:26:54:5d:f8:4f:ad:2c: c2:56:1b:8d:f6:da:be:b8:5f:70:6d:82:c7:e2:50: 5e:84:35:16:7e:e8:8d:7e:3a:37:b9:bf:43:3a:38: 28:c0:47:25:e5:51:41:ce:0f:d1:c6:9b:24:22:89: c5:5f:fa:48:92:b6:a5:58:bc:38:bc:12:36:e6:13: ef:ca:7e:53:97:37:4e:0a:ec:6d:a0:5f:a8:ad:a2: 90:32:9c:7d:51:b2:74:e4:7a:f2:8c:54:f7:08:ec: 07:72:24:36:3d:35:a4:4c:aa:70:49:8f:37:f7:9d: 92:61:03:fd:c0:61:b8:d6:56:c1:46:c8:dd:cc:4a: 29:d4:6b:75:e5:cf:62:c1:75:2c:87:3b:8b:c4:f1: 47:1a:e1:5d:6c:2a:dc:d4:cf:af:91:91:eb:47:d3: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:04:C5:EC:1C:51:42:6D:AE:83:18:68:84:CF:32:1E:38:4D:61:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/ac35c2b5-65fd-34d7-8216-230376162d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b5:1a:0a:8c:87:f6:87:b5:e0:c0:3c:6c:43:3b:c6:0d:59: 30:e9:e4:82:fa:71:99:a0:78:bc:15:c5:3d:47:18:d8:ca:e3: be:4f:f0:f1:36:e3:3b:b4:71:ca:23:18:a7:27:67:05:9a:dd: b4:1d:21:49:b2:cf:41:ee:40:36:1a:2a:fb:2f:21:3a:cb:fc: 43:a0:4a:25:73:c2:05:8a:f9:bb:47:5a:54:21:70:b2:a1:65: 49:9b:c7:8a:fc:03:d5:7e:7c:d2:e6:fe:86:0f:59:bd:47:ee: bb:33:ca:78:a5:f2:c1:28:74:1b:54:27:b4:4d:56:16:f0:b1: d1:aa:a7:84:23:72:6d:a6:c0:c6:e0:58:73:49:77:6d:1e:eb: bc:67:be:81:82:2e:a0:10:50:9f:0d:ce:6f:56:21:99:77:1a: fa:87:f7:0e:1a:a8:68:31:75:86:ec:5a:d5:26:69:a2:59:db: d7:49:ae:91:b1:86:fb:28:70:45:fa:16:53:24:ce:27:67:0d: 61:89:6a:0e:df:cf:17:d7:ca:04:d9:e6:78:c2:69:58:f1:42: 11:be:fd:19:c6:5e:37:9c:71:6d:b7:5d:a0:1f:b0:47:e6:7d: f9:d9:c4:1b:ab:f9:d4:d2:d4:81:96:7a:18:41:18:0b:ac:2d: 35:99:ea:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBnpV4espisB/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZmFkNTVhYjktMzQ5YS00ODk1LWE1ZjAtMTAwZWRiZGNlODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE+uGtdsw7uHL+0JLu4LW55RHVC7SlkZv0U4 Lc6RDc0Ker0G3BQzukFTmS8NO5VOS3TOHb1rSPG0vlaB7Ax2GFhdE+WTQhucgwkq gQ7+rNxqYCwZYUjTogFN6RY3V2XhVSZUXfhPrSzCVhuN9tq+uF9wbYLH4lBehDUW fuiNfjo3ub9DOjgowEcl5VFBzg/RxpskIonFX/pIkralWLw4vBI25hPvyn5TlzdO CuxtoF+oraKQMpx9UbJ05HryjFT3COwHciQ2PTWkTKpwSY83952SYQP9wGG41lbB RsjdzEop1Gt15c9iwXUshzuLxPFHGuFdbCrc1M+vkZHrR9OdkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcExewcUUJtroMYaITPMh44TWFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvYWMzNWMyYjUtNjVmZC0z NGQ3LTgyMTYtMjMwMzc2MTYyZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ21GgqMh/aHteDAPGxDO8YNWTDp5IL6cZmgeLwVxT1HGNjK475P8PE2 4zu0ccojGKcnZwWa3bQdIUmyz0HuQDYaKvsvITrL/EOgSiVzwgWK+btHWlQhcLKh ZUmbx4r8A9V+fNLm/oYPWb1H7rszynil8sEodBtUJ7RNVhbwsdGqp4Qjcm2mwMbg WHNJd20e67xnvoGCLqAQUJ8Nzm9WIZl3GvqH9w4aqGgxdYbsWtUmaaJZ29dJrpGx hvsocEX6FlMkzidnDWGJag7fzxfXygTZ5njCaVjxQhG+/RnGXjeccW23XaAfsEfm ffnZxBur+dTS1IGWehhBGAusLTWZ6rQ= -----END CERTIFICATE-----Generated at Fri Mar 14 08:44:54 2025 by rpki-client