$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa File: b295a349-2235-38dd-8685-35ebc511f0f7.roa (raw, json) Hash identifier: RSZSSigfp+y5QqQnqRLN7lYXfcodOXDoMFnJaSYJNN8= Subject key identifier: 2F:F1:25:96:75:63:7A:8D:F6:2D:38:38:66:DC:DC:AE:40:E6:28:FB Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584949FE89977884376D2F183820 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 23528 IP address blocks: 156.70.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:89:97:78:84:37:6d:2f:18:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=34d4414f-45b2-4941-86b2-a317c7f15dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:db:48:83:ec:a3:b9:53:61:58:22:98:d3: a4:96:a3:89:e2:59:19:00:04:c9:c3:31:4f:00:c5: d2:ef:15:f9:9f:ac:3a:c7:18:f6:f8:97:54:96:08: f8:78:d6:c9:c1:9f:9e:d3:4b:50:bd:fa:a2:e6:5a: 99:ad:d1:31:b6:15:3b:e7:ab:07:ce:be:c9:c9:d8: c6:2e:f3:77:f5:e6:96:3f:45:9b:e1:ba:35:d2:ad: a4:c2:d1:ff:72:42:da:cc:10:9f:14:ab:f1:ae:99: 1a:6b:3a:72:de:23:03:68:f9:21:9e:e3:e4:a3:54: a9:bf:9a:24:01:27:15:75:ab:5c:b6:ab:24:45:69: 54:82:58:ae:65:93:8a:b0:7a:bd:af:18:dd:4d:3d: 53:db:7f:fc:d6:e3:54:1d:cb:a3:2e:1b:73:ac:50: 2a:8c:15:b2:ae:ba:06:72:01:05:37:5b:45:7d:e1: a2:a1:6e:61:cc:0f:5c:6b:9b:08:db:89:e9:9f:e4: 3c:8d:83:09:1c:c1:40:be:0d:79:6d:50:02:45:a4: eb:aa:77:0d:6a:ef:fd:97:45:ed:4c:56:73:2a:5e: 17:65:7d:0d:a8:6a:44:e6:38:1a:bf:88:bf:0f:10: 21:c7:10:02:bc:98:fa:93:e4:df:f6:8d:a1:be:73: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F1:25:96:75:63:7A:8D:F6:2D:38:38:66:DC:DC:AE:40:E6:28:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 156.70.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9b:6f:a7:e1:1b:58:b2:44:75:48:cd:99:a2:6c:1c:43:fa: 3c:ff:7f:9e:ee:7f:59:2a:1c:1c:a4:1e:58:1d:c4:d7:4a:f7: 56:dc:12:ac:7e:1b:9a:88:c8:88:ca:c5:c0:de:0d:f7:cb:42: 6d:89:e7:d9:36:a0:d3:08:0e:c1:53:30:73:85:39:9a:39:95: 0f:67:8a:f8:f0:b7:19:eb:de:7f:9c:ad:ed:03:dd:51:86:3d: ee:bb:9c:25:ef:8b:25:37:fa:0b:60:26:02:5f:f6:9e:5e:1a: 52:98:25:b6:27:c5:0f:03:f7:24:90:07:af:4c:27:76:a6:4d: e6:05:0d:40:48:6a:10:a5:99:3f:7d:1e:37:44:1c:b5:f7:3c: 7c:f2:37:87:63:dd:b9:26:9e:16:d8:87:33:a1:45:c7:ae:94: 86:b4:89:2e:1a:3b:14:8e:de:63:14:a2:6c:10:04:d0:24:1b: 7b:64:92:e5:81:f4:f5:7d:48:c6:96:5d:9b:84:af:0e:7c:e6: e6:d5:00:e6:41:b1:0c:14:86:df:f7:86:4b:f4:bd:ed:85:aa: 60:59:b8:77:47:be:45:9f:82:0c:7b:80:a0:dc:82:26:7b:ad: b6:ff:8e:56:cc:f4:87:c7:42:29:a5:ef:58:87:b2:33:a6:ee: 2e:95:75:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/omXeIQ3bS8YOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MzRkNDQxNGYtNDViMi00OTQxLTg2YjItYTMxN2M3ZjE1ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCrbSIPso7lTYVgimNOklqOJ4lkZAATJwzFP AMXS7xX5n6w6xxj2+JdUlgj4eNbJwZ+e00tQvfqi5lqZrdExthU756sHzr7JydjG LvN39eaWP0Wb4bo10q2kwtH/ckLazBCfFKvxrpkaazpy3iMDaPkhnuPko1Spv5ok AScVdatctqskRWlUgliuZZOKsHq9rxjdTT1T23/81uNUHcujLhtzrFAqjBWyrroG cgEFN1tFfeGioW5hzA9ca5sI24npn+Q8jYMJHMFAvg15bVACRaTrqncNau/9l0Xt TFZzKl4XZX0NqGpE5jgav4i/DxAhxxACvJj6k+Tf9o2hvnMguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/xJZZ1Y3qN9i04OGbc3K5A5ij7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvYjI5NWEzNDktMjIzNS0z OGRkLTg2ODUtMzVlYmM1MTFmMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2bb6fhG1iyRHVIzZmibBxD+jz/f57uf1kqHBykHlgdxNdK91bcEqx+ G5qIyIjKxcDeDffLQm2J59k2oNMIDsFTMHOFOZo5lQ9nivjwtxnr3n+cre0D3VGG Pe67nCXviyU3+gtgJgJf9p5eGlKYJbYnxQ8D9ySQB69MJ3amTeYFDUBIahClmT99 HjdEHLX3PHzyN4dj3bkmnhbYhzOhRceulIa0iS4aOxSO3mMUomwQBNAkG3tkkuWB 9PV9SMaWXZuErw585ubVAOZBsQwUht/3hkv0ve2FqmBZuHdHvkWfggx7gKDcgiZ7 rbb/jlbM9IfHQiml71iHsjOm7i6VdXs= -----END CERTIFICATE-----Generated at Sun May 11 16:43:29 2025 by rpki-client