$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa File: fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa (raw, json) Hash identifier: CcaEEiUNz9M+a0xvTEtxP9UdiUjyem+smjIdIeu3ZnQ= Subject key identifier: 01:2A:C9:7B:5E:A9:D0:AF:80:42:78:C6:0A:9F:75:DD:D9:E7:81:3B Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858494733E03B159003B6B1354780 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 31898 IP address blocks: 158.120.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e0:3b:15:90:03:b6:b1:35:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=ecc6a394-2192-4b33-9c0f-e54b852ab4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8f:25:62:87:74:56:41:5f:b9:2f:2a:72:c4: ba:f7:47:24:b8:a3:a5:2f:db:36:82:2c:a1:bc:0f: 31:fb:d5:6e:84:d3:0b:50:9c:1c:82:ac:0f:e4:96: a2:ab:62:23:73:b4:ea:63:54:01:16:ee:c6:4c:39: b1:78:0f:01:0d:9a:02:56:c3:50:ce:99:39:9e:b6: c3:65:56:62:4b:f6:e3:37:69:b2:b1:0e:b7:bb:b1: 43:5f:22:d9:1f:b7:22:75:9f:ec:d1:b9:57:4b:67: 6a:fb:38:7c:c7:07:81:cf:78:ac:51:bf:d9:d5:b4: 7b:9b:34:e5:98:79:fa:a6:c9:09:13:fa:2b:08:47: 3f:a2:75:84:e4:f6:29:0f:e2:57:1d:2e:8c:c9:98: 78:09:d0:9f:90:5c:b4:54:b1:0e:84:68:19:ef:21: 18:0c:50:48:55:29:55:12:91:c4:61:4a:4e:82:8c: 1a:c7:8f:a4:39:9d:1b:ee:43:46:68:5b:e7:96:a0: c1:89:9e:c9:f9:2f:86:ef:7b:13:ea:f6:52:66:6d: 95:6c:a2:da:4b:33:de:42:e8:29:d3:96:f9:ef:69: e5:91:12:20:12:71:f5:83:70:31:a7:d9:dc:c8:10: 9c:c3:72:92:63:6b:e1:d8:3c:ec:eb:13:e2:cf:f2: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2A:C9:7B:5E:A9:D0:AF:80:42:78:C6:0A:9F:75:DD:D9:E7:81:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:15:ba:14:bb:f6:42:8a:27:0f:04:6f:b8:a4:78:00:fd:6b: dd:ae:33:4c:43:6a:a9:98:fd:71:b7:bd:03:2e:23:33:b6:f9: 0a:03:a1:6c:4c:37:a3:7d:53:ef:15:dc:32:b6:8c:1e:37:ed: 43:68:63:e6:df:c2:fb:72:90:57:d6:a4:c4:50:5a:8e:0a:95: 19:a3:30:18:d4:8f:ca:0d:fc:93:d8:35:8d:13:c3:f9:0e:13: ce:7b:2f:a0:b3:a6:00:90:14:37:89:90:a7:28:b9:ef:59:ec: 81:92:2b:87:d9:d6:a6:6e:50:fa:7e:1d:e6:ee:9e:73:a8:16: d8:3c:73:aa:81:e6:cf:4f:98:40:0f:9f:07:9a:d2:14:e1:e8: df:06:40:62:d5:75:3c:db:55:63:4f:26:3d:ff:dd:ee:a6:30: d6:79:af:24:fe:61:d7:fb:b8:7e:32:40:0c:8a:29:b6:0e:c9: 81:7d:1a:66:f0:72:68:25:54:49:c1:b4:cd:a8:62:7c:c0:82: 28:b5:70:0d:4a:93:de:7f:0f:d7:22:62:54:27:ec:ca:34:61: 78:59:f6:00:c9:92:e3:bf:67:e5:2b:dd:27:e6:1f:a6:f1:45: d3:d0:60:c8:68:4f:9f:b9:56:ed:0d:dc:2b:eb:98:f5:16:46: 7f:10:55:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+A7FZADtrE1R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZWNjNmEzOTQtMjE5Mi00YjMzLTljMGYtZTU0Yjg1MmFiNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho8lYod0VkFfuS8qcsS690ckuKOlL9s2giyh vA8x+9VuhNMLUJwcgqwP5Jaiq2Ijc7TqY1QBFu7GTDmxeA8BDZoCVsNQzpk5nrbD ZVZiS/bjN2mysQ63u7FDXyLZH7cidZ/s0blXS2dq+zh8xweBz3isUb/Z1bR7mzTl mHn6pskJE/orCEc/onWE5PYpD+JXHS6MyZh4CdCfkFy0VLEOhGgZ7yEYDFBIVSlV EpHEYUpOgowax4+kOZ0b7kNGaFvnlqDBiZ7J+S+G73sT6vZSZm2VbKLaSzPeQugp 05b572nlkRIgEnH1g3Axp9ncyBCcw3KSY2vh2Dzs6xPiz/IZYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEqyXteqdCvgEJ4xgqfdd3Z54E7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmFmZDhjYTktYjg0NS0z ODA0LThkNDItMmYxMTdhYTY4ZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYVuhS79kKKJw8Eb7ikeAD9a92uM0xDaqmY/XG3vQMuIzO2+QoDoWxM N6N9U+8V3DK2jB437UNoY+bfwvtykFfWpMRQWo4KlRmjMBjUj8oN/JPYNY0Tw/kO E857L6CzpgCQFDeJkKcoue9Z7IGSK4fZ1qZuUPp+HebunnOoFtg8c6qB5s9PmEAP nwea0hTh6N8GQGLVdTzbVWNPJj3/3e6mMNZ5ryT+Ydf7uH4yQAyKKbYOyYF9Gmbw cmglVEnBtM2oYnzAgii1cA1Kk95/D9ciYlQn7Mo0YXhZ9gDJkuO/Z+Ur3SfmH6bx RdPQYMhoT5+5Vu0N3CvrmPUWRn8QVcs= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:48 2025 by rpki-client