$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa File: 6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa (raw, json) Hash identifier: I76kNvf/CTw5sfcK32ZfXEt21CL81yEDrS7UPtaj+tE= Subject key identifier: 57:64:B7:56:66:27:45:70:81:CF:2D:5D:EB:68:DE:46:8C:9E:DD:F9 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F43285848C2B653B4593C1DADAFB38120 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 63293 IP address blocks: 157.240.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:53:b4:59:3c:1d:ad:af:b3:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=6d9efd63-8e56-4e25-b62d-ece52541d758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:48:8c:d8:e3:e5:c2:67:8c:12:58:6e:b6: 6a:e3:60:10:ae:5f:b8:32:2b:15:f2:34:f0:f9:f4: 7e:69:c3:ae:a0:9b:8f:4b:a7:b7:14:23:f3:47:10: 46:6c:4a:7f:12:cf:9d:fe:ad:e5:0e:2d:01:b9:4b: dc:3e:59:31:4c:d0:db:ab:06:35:cf:fd:51:45:26: f9:a6:9a:fd:4a:b6:31:8f:62:0d:8e:c4:8e:9b:6d: d8:40:d1:e6:e7:32:0a:36:4a:9b:bf:b7:43:ef:99: 53:b5:04:ff:95:f5:09:19:57:ad:b3:4a:aa:04:e4: 2c:67:66:ed:29:44:3c:18:d6:f8:a6:0c:7b:e2:ce: 4b:ae:79:ce:85:23:01:11:c2:a3:58:e9:88:db:07: 1e:9d:d8:93:42:f4:cf:52:55:3b:72:22:49:02:11: db:38:38:03:a4:5b:55:b1:fe:9a:fe:df:0d:d0:9d: 29:fa:8f:0d:b3:e6:7c:7a:5b:dd:ab:91:ab:b1:52: e4:1d:81:77:8a:af:a5:67:3a:08:1e:d0:7d:3d:a2: b4:fd:aa:98:8d:9b:3c:77:d4:2a:81:c0:85:b4:97: 38:c9:0d:fb:41:b5:5b:4a:91:a3:f4:da:c9:d6:dd: 45:83:24:48:5a:d6:30:86:43:93:c2:f9:5c:be:dd: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:64:B7:56:66:27:45:70:81:CF:2D:5D:EB:68:DE:46:8C:9E:DD:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:be:b7:48:2f:7d:fc:80:3a:88:cc:06:7a:8d:5b:52:eb:72: 32:c9:34:d7:39:32:75:71:5f:06:0c:d6:f2:61:06:dc:06:7d: 0a:02:a6:8a:76:7b:b5:d8:e9:4c:e8:12:4d:b5:45:61:c1:e3: f1:6f:11:90:d1:dd:66:a5:27:4b:98:94:6a:47:71:91:48:58: e7:ff:00:24:c9:b7:5d:f1:e9:d2:0d:32:05:b3:7b:bd:e5:e1: 06:13:ce:02:a1:a8:ad:59:29:41:51:c9:84:09:b6:11:6f:47: 8e:2f:09:d7:af:fe:20:23:a5:11:ae:18:07:50:5f:d3:01:31: c9:39:32:6a:10:8e:67:07:5a:1e:0e:9a:50:0e:49:54:f4:d3: c5:29:6a:11:bd:72:49:75:85:eb:f9:99:56:c9:06:a8:06:bc: c4:57:8b:6d:da:ff:6c:83:3e:b6:9b:91:95:c7:48:13:27:8c: 81:bd:4e:0a:7f:7d:58:ae:d0:1d:41:6e:ed:07:2f:a5:fa:ce: c7:7e:33:1d:8a:f2:89:d3:33:c9:44:d7:a0:f4:88:2f:15:52: f5:9c:16:30:5e:96:14:f8:f8:3e:b7:09:f5:14:82:d7:3d:dc: b7:01:70:e6:05:44:bb:42:24:48:d0:a9:b4:de:56:07:cd:1a: e6:dd:d0:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtlO0WTwdra+zgSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk NmQ5ZWZkNjMtOGU1Ni00ZTI1LWI2MmQtZWNlNTI1NDFkNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgZIjNjj5cJnjBJYbrZq42AQrl+4MisV8jTw +fR+acOuoJuPS6e3FCPzRxBGbEp/Es+d/q3lDi0BuUvcPlkxTNDbqwY1z/1RRSb5 ppr9SrYxj2INjsSOm23YQNHm5zIKNkqbv7dD75lTtQT/lfUJGVets0qqBOQsZ2bt KUQ8GNb4pgx74s5LrnnOhSMBEcKjWOmI2wcendiTQvTPUlU7ciJJAhHbODgDpFtV sf6a/t8N0J0p+o8Ns+Z8elvdq5GrsVLkHYF3iq+lZzoIHtB9PaK0/aqYjZs8d9Qq gcCFtJc4yQ37QbVbSpGj9NrJ1t1FgyRIWtYwhkOTwvlcvt3dEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdkt1ZmJ0Vwgc8tXeto3kaMnt35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNmYxOGZlZDktNzIwNi0z Yjk4LWEyMTUtNGE2ZmQ0ZmM4M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy+t0gvffyAOojMBnqNW1LrcjLJNNc5MnVxXwYM1vJhBtwGfQoCpop2 e7XY6UzoEk21RWHB4/FvEZDR3WalJ0uYlGpHcZFIWOf/ACTJt13x6dINMgWze73l 4QYTzgKhqK1ZKUFRyYQJthFvR44vCdev/iAjpRGuGAdQX9MBMck5MmoQjmcHWh4O mlAOSVT008UpahG9ckl1hev5mVbJBqgGvMRXi23a/2yDPrabkZXHSBMnjIG9Tgp/ fViu0B1Bbu0HL6X6zsd+Mx2K8onTM8lE16D0iC8VUvWcFjBelhT4+D63CfUUgtc9 3LcBcOYFRLtCJEjQqbTeVgfNGubd0DU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:56 2025 by rpki-client