$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/8c461faa-10b4-3e1f-a382-73d4ee9fd1d0.roa File: 8c461faa-10b4-3e1f-a382-73d4ee9fd1d0.roa (raw, json) Hash identifier: BA9FOkEzpEtoJAE18rKwY+qEd4krD/6MEscRVCqLNNU= Subject key identifier: 42:81:D5:31:AC:96:F2:2C:C1:76:D6:B8:74:16:46:89:E3:AF:FA:74 Certificate issuer: /CN=5d69368b-4714-4878-9f6c-905e98da853c Certificate serial: 010D0C9F43285848F65BE27F427D25E2A85B6D80 Authority key identifier: 3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/8c461faa-10b4-3e1f-a382-73d4ee9fd1d0.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 158.51.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e2:7f:42:7d:25:e2:a8:5b:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d69368b-4714-4878-9f6c-905e98da853c Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=6ebf1ee0-fb60-45d8-9f50-f37204cf1126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:d0:6d:52:c0:6c:17:52:fe:27:d4:59:f3: 4d:67:e2:c7:d3:d9:08:27:96:11:6e:c5:ca:84:91: 65:79:fc:a2:93:6f:7d:60:73:64:d9:1b:6e:15:5a: 50:af:a2:ca:0e:1d:2c:44:7a:19:98:ab:c9:92:fc: 99:ca:df:55:d9:b5:a8:9d:26:6a:26:8b:80:ec:25: 0d:5f:da:ff:e0:99:7c:60:36:a4:57:93:29:82:d0: 1a:8b:bd:ae:3d:84:61:7b:01:7e:e9:c9:5c:d6:bc: 0b:1f:ef:bf:88:8e:f8:bf:ea:5a:47:0f:fd:b1:dd: a1:d7:4a:3f:0f:30:a3:ae:16:f9:ee:72:e4:4f:d8: 03:56:da:6a:5d:18:52:dc:16:97:57:33:14:64:c1: d2:c2:d3:20:ee:2e:91:f2:ff:58:4b:20:a3:2d:a2: 6e:d7:61:60:90:ac:41:a2:34:ee:3c:6d:95:30:e8: a6:e3:42:37:55:eb:d2:92:ee:33:69:e3:56:6f:59: 8e:b2:0f:cc:15:59:4e:66:0e:c0:43:40:62:e7:b0: 19:41:ee:41:00:ee:f7:a8:04:e4:22:a8:fd:76:0a: a0:83:c2:c7:7c:3f:33:50:08:6e:fc:ad:fe:16:40: 0b:e7:e1:60:53:3d:34:d5:4b:0b:3d:b4:a3:d2:5f: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:81:D5:31:AC:96:F2:2C:C1:76:D6:B8:74:16:46:89:E3:AF:FA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/8c461faa-10b4-3e1f-a382-73d4ee9fd1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl X509v3 Authority Key Identifier: keyid:3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:aa:02:43:f4:2f:f8:11:ed:d4:7a:53:df:a9:d4:3b:60:46: 0d:dd:68:16:83:ae:72:62:73:67:4a:f3:e0:2d:2b:9e:09:64: df:76:78:cd:86:72:95:b0:c8:2d:31:00:8c:1d:7e:49:8a:5e: 91:b5:dc:cd:76:2c:52:b0:30:87:f2:16:20:99:f1:6a:8f:65: 32:af:36:6f:74:f1:85:70:33:f1:d7:cf:39:4c:e7:cc:53:9a: 5d:e6:12:9d:88:41:60:67:3e:e8:40:32:25:80:ef:7c:82:74: 69:8d:9b:c7:29:b5:07:f5:44:01:69:d2:b1:75:a9:de:24:62: 3d:f1:9d:d6:c5:fc:d4:e0:d4:be:a1:54:4d:0a:ac:84:7b:d6: 70:c7:66:3e:73:8e:e4:a0:50:d6:f6:24:f1:43:4b:82:cf:f1: dd:8d:3a:df:8a:9c:a4:5c:71:ec:85:ae:27:cb:df:56:78:fa: 8e:39:82:ed:bc:9f:27:4a:f9:5b:6b:34:ce:aa:64:53:a4:ee: a3:30:f2:29:c0:75:fb:20:55:9f:6c:5f:fe:a3:c0:13:af:8a: 15:af:3b:1d:c7:07:6b:58:dc:db:aa:81:86:d3:4b:70:28:c6: d8:97:8a:9e:aa:2d:9d:8f:a6:25:e7:37:71:6d:a8:d6:e4:8d: 88:c5:72:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+J/Qn0l4qhbbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2OTM2OGItNDcxNC00ODc4LTlmNmMtOTA1ZTk4ZGE4 NTNjMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NmViZjFlZTAtZmI2MC00NWQ4LTlmNTAtZjM3MjA0Y2YxMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/bQbVLAbBdS/ifUWfNNZ+LH09kIJ5YRbsXK hJFlefyik299YHNk2RtuFVpQr6LKDh0sRHoZmKvJkvyZyt9V2bWonSZqJouA7CUN X9r/4Jl8YDakV5MpgtAai72uPYRhewF+6clc1rwLH++/iI74v+paRw/9sd2h10o/ DzCjrhb57nLkT9gDVtpqXRhS3BaXVzMUZMHSwtMg7i6R8v9YSyCjLaJu12FgkKxB ojTuPG2VMOim40I3VevSku4zaeNWb1mOsg/MFVlOZg7AQ0Bi57AZQe5BAO73qATk Iqj9dgqgg8LHfD8zUAhu/K3+FkAL5+FgUz001UsLPbSj0l+gnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKB1TGslvIswXbWuHQWRonjr/p0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDY5 MzY4Yi00NzE0LTQ4NzgtOWY2Yy05MDVlOThkYTg1M2MvOGM0NjFmYWEtMTBiNC0z ZTFmLWEzODItNzNkNGVlOWZkMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ2OTM2OGItNDcxNC00ODc4LTlm NmMtOTA1ZTk4ZGE4NTNjLzVkNjkzNjhiLTQ3MTQtNDg3OC05ZjZjLTkwNWU5OGRh ODUzYy5jcmwwHwYDVR0jBBgwFoAUP1ZZ03gYZzqwB8v9v+oD7Ueps3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDY5MzY4Yi00NzE0LTQ4NzgtOWY2Yy05MDVl OThkYTg1M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKqAkP0L/gR7dR6U9+p1DtgRg3daBaDrnJic2dK8+AtK54JZN92eM2G cpWwyC0xAIwdfkmKXpG13M12LFKwMIfyFiCZ8WqPZTKvNm908YVwM/HXzzlM58xT ml3mEp2IQWBnPuhAMiWA73yCdGmNm8cptQf1RAFp0rF1qd4kYj3xndbF/NTg1L6h VE0KrIR71nDHZj5zjuSgUNb2JPFDS4LP8d2NOt+KnKRcceyFrifL31Z4+o45gu28 nydK+VtrNM6qZFOk7qMw8inAdfsgVZ9sX/6jwBOvihWvOx3HB2tY3NuqgYbTS3Ao xtiXip6qLZ2PpiXnN3FtqNbkjYjFcjA= -----END CERTIFICATE-----Generated at Fri Mar 14 13:47:40 2025 by rpki-client