$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa File: 5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa (raw, json) Hash identifier: pvkj0A+AiRkHz1xKtJCgkQfS/zG1SbapGL0eIHvLUVk= Subject key identifier: 60:D1:56:58:93:05:79:A9:D1:99:F5:C4:83:2A:B4:B6:7C:A7:E4:BB Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F43285848FD56B3EDECF7A13C6CBF9CC0 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 21766 IP address blocks: 152.97.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b3:ed:ec:f7:a1:3c:6c:bf:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=80278ce7-dff6-4148-bbbd-7a288614ff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:10:84:ad:81:66:2f:5d:62:a3:3f:c9:a8: 0f:54:50:35:d8:43:9a:95:f1:2d:6f:25:09:c4:af: 61:cd:27:a7:40:a3:7c:6c:58:0e:7e:00:34:ef:eb: 1c:62:f8:fe:f3:b2:be:bf:b4:4f:89:ce:d8:fa:94: 27:fd:cf:9e:0c:a8:d2:c1:66:62:5b:b2:29:98:5d: 5b:bb:d7:49:7b:3a:d9:49:77:7a:17:01:76:fd:31: c1:9b:27:52:19:08:1e:28:3f:94:a7:68:55:d4:b3: 4f:36:03:61:af:4c:ed:e6:61:3f:f1:db:20:d5:c4: da:82:b2:38:76:e5:7a:ef:54:bb:ad:13:b9:79:05: e3:40:4a:af:ff:e0:a9:d8:1d:99:08:7f:64:89:13: e5:f6:c0:96:78:3c:cd:6e:65:29:82:38:a3:70:c1: 1a:4f:41:3d:d3:2e:bd:85:5c:e4:db:e7:2a:24:95: c7:e3:8b:2c:00:ed:3f:62:f2:85:ac:1e:92:ae:13: ff:09:a9:63:b6:ca:09:db:7c:a6:79:59:9d:f4:92: f8:c2:d2:04:94:b4:d6:a0:9e:51:fd:f9:cd:a7:73: 3d:6b:0e:95:04:bc:3e:45:a4:7b:7f:4c:c0:af:bc: c4:90:d2:ef:13:7a:81:77:db:86:42:ad:90:dd:2a: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:56:58:93:05:79:A9:D1:99:F5:C4:83:2A:B4:B6:7C:A7:E4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:91:54:8c:da:1b:4c:48:c1:57:ef:f0:f7:c8:db:79:78:1b: 64:0e:2a:36:cb:c1:3d:f0:5b:8b:73:e7:0f:6e:4b:b8:df:1a: ef:1c:b8:5e:1e:cf:1f:a5:0c:98:c2:1c:9f:ef:f8:ea:dc:b7: bd:fa:ea:03:ee:63:f5:b6:99:15:03:d7:85:2e:13:7c:e7:06: ed:c3:0a:12:07:16:92:e0:22:97:49:b5:e2:e0:af:5c:8d:5c: 3d:17:fa:9f:bc:06:49:18:e1:d0:2a:51:9a:c3:db:5d:37:e9: 15:a7:f3:d8:c5:0a:77:28:5e:4b:05:d4:9d:9c:7b:cb:27:5c: 6b:d3:65:3e:3f:9c:ed:98:d8:f0:cc:11:b3:e8:f2:eb:e2:00: fb:76:fa:41:e1:c4:6f:32:ef:65:d0:3a:e6:9f:e4:6e:49:9b: 47:0b:d8:6f:cf:12:58:46:91:ea:ee:78:c8:80:f4:fb:87:0f: 91:20:d1:a1:51:1c:86:de:5f:dc:66:48:ef:51:4e:d3:e9:cd: 75:15:72:4a:3e:f1:56:8f:14:ce:60:1a:ad:31:b7:ca:9c:9d: cc:40:14:24:ef:b0:87:80:da:19:7c:5f:80:89:21:74:d2:96: a4:5c:68:48:ca:84:77:0d:40:ed:08:69:59:06:ba:8d:75:d7: a8:0f:bc:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrPt7PehPGy/nMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODAyNzhjZTctZGZmNi00MTQ4LWJiYmQtN2EyODg2MTRmZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokkQhK2BZi9dYqM/yagPVFA12EOalfEtbyUJ xK9hzSenQKN8bFgOfgA07+scYvj+87K+v7RPic7Y+pQn/c+eDKjSwWZiW7IpmF1b u9dJezrZSXd6FwF2/THBmydSGQgeKD+Up2hV1LNPNgNhr0zt5mE/8dsg1cTagrI4 duV671S7rRO5eQXjQEqv/+Cp2B2ZCH9kiRPl9sCWeDzNbmUpgjijcMEaT0E90y69 hVzk2+cqJJXH44ssAO0/YvKFrB6SrhP/CaljtsoJ23ymeVmd9JL4wtIElLTWoJ5R /fnNp3M9aw6VBLw+RaR7f0zAr7zEkNLvE3qBd9uGQq2Q3SomHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDRVliTBXmp0Zn1xIMqtLZ8p+S7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWI1MWE3MTAtZDkwMy0z YTlmLTk4YTItMWYyOWRhMDZlYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmGGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWRVIzaG0xIwVfv8PfI23l4G2QOKjbLwT3wW4tz5w9uS7jfGu8cuF4e zx+lDJjCHJ/v+Orct7366gPuY/W2mRUD14UuE3znBu3DChIHFpLgIpdJteLgr1yN XD0X+p+8BkkY4dAqUZrD21036RWn89jFCncoXksF1J2ce8snXGvTZT4/nO2Y2PDM EbPo8uviAPt2+kHhxG8y72XQOuaf5G5Jm0cL2G/PElhGkerueMiA9PuHD5Eg0aFR HIbeX9xmSO9RTtPpzXUVcko+8VaPFM5gGq0xt8qcncxAFCTvsIeA2hl8X4CJIXTS lqRcaEjKhHcNQO0IaVkGuo1116gPvL0= -----END CERTIFICATE-----Generated at Tue Apr 15 04:59:34 2025 by rpki-client