$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa File: d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa (raw, json) Hash identifier: XYrObM7Ta/HVkO8qF1T1cRL3BLhiC0n0N28mbcUjWV4= Subject key identifier: 2D:C5:98:92:43:3F:44:75:43:A1:33:ED:C4:21:04:95:04:96:CA:65 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F432858490B4C19F767F39E0A89FE47EC Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 155.63.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:19:f7:67:f3:9e:0a:89:fe:47:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=e795a40f-3b6a-4e96-8752-5a6935e5f6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:1f:ab:01:49:70:75:e0:98:da:30:b1:c7: 4e:3c:8c:87:99:31:59:f1:12:5e:fb:b3:3a:91:8e: 92:11:59:47:c0:dc:c0:d2:f3:77:2b:aa:2f:35:21: 32:f5:e2:77:e0:82:19:7b:0a:6e:89:9c:86:76:3b: fc:7f:dd:cf:99:62:4f:3e:65:e4:7e:02:b7:41:55: 8f:bd:2c:3f:bb:6a:43:8f:ff:e2:5d:80:99:bc:14: 33:45:42:bd:74:c1:5f:66:69:d6:f5:25:da:17:a3: 47:09:68:07:4e:bf:ca:9b:fa:4e:23:94:ef:88:8e: f6:da:48:56:75:a6:5a:78:e7:12:65:4f:75:28:c6: 0f:60:80:3b:15:a3:50:e3:e8:6f:d9:4c:d3:69:e5: 81:15:9a:03:9c:fc:0b:e3:6d:bc:58:13:da:58:fb: 54:b0:a4:68:33:70:7e:3a:46:54:5e:1e:8b:58:ed: 86:64:51:6c:1b:d8:c8:73:f5:a2:d4:fa:13:6f:d4: 51:24:7c:22:07:a1:19:44:b8:d9:4f:7d:08:c3:6c: 7f:55:04:2b:8d:da:3e:30:6f:c9:f7:7e:b4:fc:90: d1:b4:89:39:52:a2:23:67:89:c5:a4:0b:15:00:6a: dd:41:b8:6c:1e:dd:b0:e6:88:93:a4:ad:ac:26:92: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C5:98:92:43:3F:44:75:43:A1:33:ED:C4:21:04:95:04:96:CA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:45:a5:1b:dd:fe:07:75:67:09:e4:9b:bd:6c:5d:1f:87:db: 48:87:c2:0f:b4:7a:7e:28:46:b9:80:0a:e9:66:43:71:f6:cf: 1b:ce:0b:35:c2:ba:18:95:5e:6d:e3:28:50:48:ea:c7:8c:20: 88:f4:0a:b4:58:26:5b:5d:f6:6b:e9:a2:f8:1f:88:ed:02:f6: b0:e7:38:7c:2e:70:bd:ec:23:26:84:cb:2f:b7:7b:8a:b1:51: b7:3d:2b:5c:bf:35:89:df:d4:61:b8:34:a9:e1:c0:5b:38:47: 73:34:25:ec:d8:42:b9:03:bb:c7:ee:ec:9a:93:17:62:b0:63: 39:f1:61:6f:36:1b:56:92:68:30:57:06:d9:80:66:0f:e7:da: 2e:ec:47:76:71:79:a2:1c:f5:78:1e:7c:67:e9:f4:4f:d7:b5: 57:7a:2f:4a:95:19:93:12:7e:78:af:f0:55:03:a1:5e:61:55: 16:fd:66:1b:15:45:51:8a:cc:eb:5a:52:62:84:c5:1e:03:0a: 40:c3:1c:ec:c7:6a:fe:39:1e:2f:25:ca:d1:2a:7a:23:80:ee: 48:a5:eb:d4:20:15:7c:e7:52:3d:c6:d8:f7:0d:71:7b:a8:71: 55:11:af:32:00:06:25:f5:a1:20:63:1d:23:ac:d0:eb:05:a3: 6b:30:3c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBn3Z/OeCon+R+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTc5NWE0MGYtM2I2YS00ZTk2LTg3NTItNWE2OTM1ZTVmNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6EfqwFJcHXgmNowscdOPIyHmTFZ8RJe+7M6 kY6SEVlHwNzA0vN3K6ovNSEy9eJ34IIZewpuiZyGdjv8f93PmWJPPmXkfgK3QVWP vSw/u2pDj//iXYCZvBQzRUK9dMFfZmnW9SXaF6NHCWgHTr/Km/pOI5TviI722khW daZaeOcSZU91KMYPYIA7FaNQ4+hv2UzTaeWBFZoDnPwL4228WBPaWPtUsKRoM3B+ OkZUXh6LWO2GZFFsG9jIc/Wi1PoTb9RRJHwiB6EZRLjZT30Iw2x/VQQrjdo+MG/J 9360/JDRtIk5UqIjZ4nFpAsVAGrdQbhsHt2w5oiTpK2sJpJbSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3FmJJDP0R1Q6Ez7cQhBJUElsplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvZDlkOThhYWEtZTU2YS0z ZjIyLWE0NDktM2FkOGNhOWRkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARFpRvd/gd1Zwnkm71sXR+H20iHwg+0en4oRrmACulmQ3H2zxvOCzXC uhiVXm3jKFBI6seMIIj0CrRYJltd9mvpovgfiO0C9rDnOHwucL3sIyaEyy+3e4qx Ubc9K1y/NYnf1GG4NKnhwFs4R3M0JezYQrkDu8fu7JqTF2KwYznxYW82G1aSaDBX BtmAZg/n2i7sR3ZxeaIc9XgefGfp9E/XtVd6L0qVGZMSfniv8FUDoV5hVRb9ZhsV RVGKzOtaUmKExR4DCkDDHOzHav45Hi8lytEqeiOA7kil69QgFXznUj3G2PcNcXuo cVURrzIABiX1oSBjHSOs0OsFo2swPNQ= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:49 2025 by rpki-client