$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa File: cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa (raw, json) Hash identifier: iM275VXlQXhEdwuqipXuscWLsEU+LS6ADILluYUV17Y= Subject key identifier: EE:C0:C5:C4:71:23:85:F0:B1:61:DD:65:18:E9:A1:2A:72:82:10:1F Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F43285849393E7206B1F8C830456CB580 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 14618 IP address blocks: 164.153.128.0/24 maxlen: 32 164.153.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:72:06:b1:f8:c8:30:45:6c:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=b2e1674a-5183-4b64-a414-6ee059962e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:7a:20:5b:57:1e:06:b4:9d:48:06:51:f7: 12:68:1d:e7:29:61:ce:3a:e9:11:51:ba:1b:e6:49: 53:d7:2a:fb:1a:67:57:d8:8b:b2:83:b6:71:25:ef: c2:de:3b:6f:a7:02:8e:1c:ef:5b:4f:89:9a:bf:46: a7:05:43:d8:3d:ed:af:53:f9:4f:47:80:45:c7:24: e1:6a:29:99:4c:33:4a:76:80:af:8b:2f:ec:25:a5: 3f:95:e5:32:a3:56:d7:de:ac:a7:29:61:5a:dd:54: 02:a1:f4:cb:e5:1a:f3:4f:f3:e4:8a:f2:2c:ce:38: bd:29:19:df:74:e1:2b:85:9a:b3:6a:12:85:17:d0: 56:13:3f:01:b1:5e:5c:a5:3f:02:24:be:59:41:ae: 1e:e5:9c:13:06:2e:bd:23:20:fb:e3:5c:f1:ea:bb: d7:fd:e8:be:3e:75:04:2d:55:58:88:e1:8f:f8:de: 2b:7c:f0:a2:2a:69:c8:b9:93:91:ec:66:aa:49:f7: 30:b0:85:20:41:db:f6:31:2f:76:2a:1b:cf:8d:57: ab:16:28:13:e3:d5:6d:b7:c4:a8:d0:34:76:08:ca: 60:a9:f9:14:52:fb:30:a6:c3:6b:c6:96:72:7e:c7: dc:1f:87:2c:c9:fa:15:70:71:f8:59:d8:85:5e:29: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C0:C5:C4:71:23:85:F0:B1:61:DD:65:18:E9:A1:2A:72:82:10:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:67:21:b0:52:eb:bc:db:8a:1d:05:08:1b:ab:26:ab:d8:0c: 2e:f3:a7:63:41:ae:3b:df:92:44:6b:80:fb:ae:38:39:71:d3: 4d:21:90:0b:f2:4e:b2:6e:0d:33:de:b6:39:09:45:83:da:b2: f8:9e:69:b9:af:4f:01:0c:f3:39:8e:92:6d:b7:b0:a3:99:cf: 29:de:0c:7e:08:f5:aa:1f:75:57:ad:4d:14:14:2f:3e:6d:6d: d0:79:f3:88:29:22:84:8a:1f:2f:d4:1a:42:70:63:15:d3:6e: 5e:d2:ef:65:f1:09:96:32:ce:aa:f8:c9:e4:b6:2c:ed:07:2a: ba:69:00:9a:8d:34:16:8d:b3:51:7c:54:da:51:a3:d0:c2:bb: f4:31:c3:22:4a:0d:66:8f:0c:2d:ab:27:1d:22:1b:aa:8a:f1: c4:92:bb:9c:32:e7:87:ca:da:81:2d:ee:29:bd:fa:25:f5:6c: 72:c3:d9:06:0b:fc:a3:7f:34:89:7d:46:b1:bb:db:c2:00:fc: 50:c6:a7:10:ea:96:af:b4:c9:08:d8:8d:c6:14:e4:a5:33:c5: 05:1c:0f:04:19:71:36:e0:7d:64:e3:a0:a4:fd:e3:f4:23:f4: 21:52:cd:88:ab:b5:4e:2b:fe:28:e1:75:2e:4a:62:da:b1:9c: 22:db:cb:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnIGsfjIMEVstYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk YjJlMTY3NGEtNTE4My00YjY0LWE0MTQtNmVlMDU5OTYyZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZJ6IFtXHga0nUgGUfcSaB3nKWHOOukRUbob 5klT1yr7GmdX2Iuyg7ZxJe/C3jtvpwKOHO9bT4mav0anBUPYPe2vU/lPR4BFxyTh aimZTDNKdoCviy/sJaU/leUyo1bX3qynKWFa3VQCofTL5RrzT/PkivIszji9KRnf dOErhZqzahKFF9BWEz8BsV5cpT8CJL5ZQa4e5ZwTBi69IyD741zx6rvX/ei+PnUE LVVYiOGP+N4rfPCiKmnIuZOR7GaqSfcwsIUgQdv2MS92KhvPjVerFigT49Vtt8So 0DR2CMpgqfkUUvswpsNrxpZyfsfcH4csyfoVcHH4WdiFXiknuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7AxcRxI4XwsWHdZRjpoSpyghAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvY2QyOGYxZDUtY2JiNi0z YWI2LWI3M2EtNDM0ZDUwNWNiMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxnIbBS67zbih0FCBurJqvYDC7zp2NBrjvfkkRrgPuuODlx000hkAvy TrJuDTPetjkJRYPasvieabmvTwEM8zmOkm23sKOZzyneDH4I9aofdVetTRQULz5t bdB584gpIoSKHy/UGkJwYxXTbl7S72XxCZYyzqr4yeS2LO0HKrppAJqNNBaNs1F8 VNpRo9DCu/QxwyJKDWaPDC2rJx0iG6qK8cSSu5wy54fK2oEt7im9+iX1bHLD2QYL /KN/NIl9RrG728IA/FDGpxDqlq+0yQjYjcYU5KUzxQUcDwQZcTbgfWTjoKT94/Qj 9CFSzYirtU4r/ijhdS5KYtqxnCLby08= -----END CERTIFICATE-----Generated at Fri Apr 4 23:29:09 2025 by rpki-client