$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa File: fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa (raw, json) Hash identifier: IuPmZd0mpxwRP2uzmBfBp/Lmh5EA52nWXiDRG1IuUdc= Subject key identifier: 41:C0:A8:E7:EA:34:B8:E6:E6:63:77:0C:90:A9:70:76:12:AB:5B:61 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285849AA4F572F1131B3291D719600 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:57:2f:11:31:b3:29:1d:71:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=c4677e36-966c-4c3a-a250-a793345aae6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:a8:e3:98:21:35:2a:3b:13:91:d6:67:7d: f8:ba:9b:f5:59:31:70:ed:03:4d:82:70:26:67:d3: da:0e:01:c8:18:f2:d3:4e:eb:b3:5b:7b:7b:85:f0: b7:23:19:6b:35:a8:99:78:32:1b:ef:c6:a7:9b:2b: 34:4a:67:75:39:c4:27:3b:54:ba:82:5b:2a:ee:c7: 8f:d2:38:9b:43:f4:c5:1c:21:2f:ae:6b:07:c8:54: 89:33:25:5e:18:0b:18:16:e8:22:2b:e1:e0:79:6c: 15:a1:7c:2c:b4:28:b6:2e:80:6f:ee:8c:ce:d3:a6: e3:21:44:c0:e5:95:25:77:20:90:90:08:b8:ea:a3: 1c:ca:a6:e7:7c:41:65:73:c1:5c:03:28:31:63:94: 09:a4:7e:a6:af:39:fa:06:de:2d:ff:ed:29:c9:b2: 9b:61:0f:da:d5:71:d0:1a:56:44:fa:d2:a0:40:f2: be:19:19:ef:8e:72:a0:f1:dc:48:60:5a:65:d0:cf: 0a:c2:d4:9f:29:53:ee:75:b5:8a:52:4b:eb:2f:96: 0f:a3:32:33:49:47:ca:9f:77:12:db:f6:72:8a:ad: 4d:16:1b:7b:6a:b3:31:e5:00:47:83:2c:66:41:c9: 45:e1:50:e1:c2:61:e1:e6:c0:23:f7:d9:0a:4f:59: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:A8:E7:EA:34:B8:E6:E6:63:77:0C:90:A9:70:76:12:AB:5B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b4:71:ce:48:17:ea:28:ce:f9:b3:79:01:f1:69:e8:74:11: c4:2f:98:e5:e7:b0:48:53:e7:73:d4:00:a9:1a:bd:4d:2b:c4: 4c:a5:5b:ad:bb:76:19:fc:a9:23:8e:4f:e6:fc:9b:d7:a2:c7: 2b:14:a1:f0:11:a4:c0:89:52:d7:63:7d:40:4f:21:fc:6c:53: d9:a2:e9:ea:cf:29:60:fc:bb:d7:ce:85:76:44:a9:22:8e:7b: 6e:77:e0:60:14:1f:c4:8c:e4:0b:2b:3e:36:ab:e3:b2:09:d3: bd:4b:84:4e:b1:0b:37:d9:ff:83:30:3a:51:3c:bf:55:0d:2f: 65:f2:0f:65:64:5a:7f:72:c3:69:71:af:f7:d4:d5:c1:4f:a4: 66:a3:34:f5:b8:d7:c6:dc:58:f9:27:e4:5f:0f:cf:d6:ce:0d: 97:56:90:d4:a4:38:3a:d9:64:75:d7:e2:78:24:0f:4d:3b:0b: 60:55:bf:29:e0:1a:e1:dc:59:53:ba:6f:b8:1e:c5:4a:e0:98: 99:89:75:98:1f:6a:25:81:7b:ae:2f:8a:20:9f:b9:61:6f:57: 3f:e1:fd:0b:8f:b9:c3:23:74:68:70:0a:a2:d3:8c:e9:f3:f3: 2d:4b:f2:55:2d:5a:47:e7:b0:b2:c3:11:cf:ff:f8:3b:e5:8b: 14:17:58:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT1cvETGzKR1xlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YzQ2NzdlMzYtOTY2Yy00YzNhLWEyNTAtYTc5MzM0NWFhZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP6o45ghNSo7E5HWZ334upv1WTFw7QNNgnAm Z9PaDgHIGPLTTuuzW3t7hfC3IxlrNaiZeDIb78anmys0Smd1OcQnO1S6glsq7seP 0jibQ/TFHCEvrmsHyFSJMyVeGAsYFugiK+HgeWwVoXwstCi2LoBv7ozO06bjIUTA 5ZUldyCQkAi46qMcyqbnfEFlc8FcAygxY5QJpH6mrzn6Bt4t/+0pybKbYQ/a1XHQ GlZE+tKgQPK+GRnvjnKg8dxIYFpl0M8KwtSfKVPudbWKUkvrL5YPozIzSUfKn3cS 2/Zyiq1NFht7arMx5QBHgyxmQclF4VDhwmHh5sAj99kKT1mWbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHAqOfqNLjm5mN3DJCpcHYSq1thMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZmIyMTkxZDgtNzRhMi0z MGNiLWJmZmYtYzc5NGE2ZGNhYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG0cc5IF+oozvmzeQHxaeh0EcQvmOXnsEhT53PUAKkavU0rxEylW627 dhn8qSOOT+b8m9eixysUofARpMCJUtdjfUBPIfxsU9mi6erPKWD8u9fOhXZEqSKO e2534GAUH8SM5AsrPjar47IJ071LhE6xCzfZ/4MwOlE8v1UNL2XyD2VkWn9yw2lx r/fU1cFPpGajNPW418bcWPkn5F8Pz9bODZdWkNSkODrZZHXX4ngkD007C2BVvyng GuHcWVO6b7gexUrgmJmJdZgfaiWBe64viiCfuWFvVz/h/QuPucMjdGhwCqLTjOnz 8y1L8lUtWkfnsLLDEc//+DvlixQXWAE= -----END CERTIFICATE-----Generated at Mon May 5 20:39:15 2025 by rpki-client