$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa File: ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa (raw, json) Hash identifier: oHu9ODRhtRfMZ6MCBrNiEKXRWPAl0w1e92Q45PKFGmo= Subject key identifier: DA:41:DB:D1:EE:D0:5D:FB:E5:FE:B3:81:BD:3F:0E:F6:5E:1E:80:9D Certificate issuer: /CN=12fa7453-6b85-412b-b280-7c71eec6c46b Certificate serial: 010D0C9F4328584964843822C327F99D0961CC00 Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 394356 IP address blocks: 158.51.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:38:22:c3:27:f9:9d:09:61:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=5c5e8bb9-086e-4610-b98e-ae2d86f95ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:21:3d:bb:ef:e5:d2:8a:37:dc:38:26:09: d9:4b:f3:15:88:26:6f:6e:dd:19:9f:c0:7f:0f:9c: ad:fe:3d:e2:32:3d:ed:75:30:7e:3c:83:e1:e0:f3: 9f:16:09:38:e0:b6:7e:74:78:c9:a0:7b:d6:2b:5a: 94:b2:70:d9:85:02:12:1d:db:74:a4:32:c3:ac:5b: c4:b5:46:4e:7d:f5:a3:b6:7e:ab:16:4b:7a:c0:c9: 37:1f:b6:3b:89:ba:46:fe:2f:64:6e:16:76:93:01: 4a:4a:9b:2d:fb:81:98:90:52:2d:6d:29:ff:5a:18: cd:c4:d9:8f:2c:9c:87:5c:b5:1c:88:67:89:64:5e: f2:65:f6:36:87:32:b0:43:86:9e:b6:a3:8f:a1:39: 5e:c6:67:55:4b:91:d4:65:17:a7:72:ed:4c:ae:65: 8c:b7:e2:84:27:21:3b:0e:46:a6:32:e9:2a:ec:87: f0:3b:65:c0:24:c3:f8:9f:39:0d:2f:b8:0f:e6:86: c2:37:4d:2f:e8:f2:de:88:77:79:e8:9f:45:f2:b2: fa:a2:77:64:70:66:9b:c6:dd:69:2c:16:1c:bd:6c: 4d:9e:e3:92:a8:5e:49:dd:64:6f:25:3b:d5:0c:12: 71:6b:58:20:79:55:e2:af:15:66:66:26:91:4e:68: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:41:DB:D1:EE:D0:5D:FB:E5:FE:B3:81:BD:3F:0E:F6:5E:1E:80:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl X509v3 Authority Key Identifier: keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer sbgp-ipAddrBlock: critical IPv4: 158.51.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7e:57:85:6a:65:d1:a2:a4:b9:10:be:14:f7:ce:8a:0a:be: a9:26:78:18:a0:9c:a1:43:d8:f4:81:c1:87:91:19:f0:ff:42: 5e:d3:e0:98:92:3e:47:12:11:9b:f7:30:cb:e3:07:3f:5b:42: 8c:eb:71:7c:ac:29:b0:c0:30:eb:80:fd:95:63:28:fb:7e:e3: 38:98:f2:99:a4:62:fb:18:e8:f2:71:0f:0c:02:4f:d8:44:a4: e7:89:14:9c:3e:ec:e9:e2:ce:07:33:a3:60:29:67:a0:6e:17: 80:e0:c3:d2:47:1d:2d:88:3c:1d:e4:ea:5b:9f:57:b7:b4:84: bc:c5:c3:20:4d:e8:d3:fa:a5:81:10:f4:e0:85:d4:8e:4f:cd: 3d:7b:2d:ce:05:19:bc:e2:1f:5d:cf:b8:89:b8:5f:39:ae:9a: b3:57:77:e4:67:23:27:bf:49:60:c3:16:e6:c2:93:bc:68:f4: 6d:51:42:fe:d3:a0:86:12:e0:d4:a8:92:f5:18:9a:f3:fe:2f: 04:38:46:b8:d0:4c:ad:96:20:fb:18:ac:b4:0d:1d:5f:e6:9b: 1c:00:f4:08:c4:55:09:93:ce:f6:7b:7b:7c:22:8c:94:38:83: e6:d8:86:0a:44:05:a3:39:48:86:e6:c7:40:18:de:e1:20:a3: 54:30:90:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhDgiwyf5nQlhzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJmYTc0NTMtNmI4NS00MTJiLWIyODAtN2M3MWVlYzZj NDZiMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NWM1ZThiYjktMDg2ZS00NjEwLWI5OGUtYWUyZDg2Zjk1ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzighPbvv5dKKN9w4JgnZS/MViCZvbt0Zn8B/ D5yt/j3iMj3tdTB+PIPh4POfFgk44LZ+dHjJoHvWK1qUsnDZhQISHdt0pDLDrFvE tUZOffWjtn6rFkt6wMk3H7Y7ibpG/i9kbhZ2kwFKSpst+4GYkFItbSn/WhjNxNmP LJyHXLUciGeJZF7yZfY2hzKwQ4aetqOPoTlexmdVS5HUZRencu1MrmWMt+KEJyE7 DkamMukq7IfwO2XAJMP4nzkNL7gP5obCN00v6PLeiHd56J9F8rL6ondkcGabxt1p LBYcvWxNnuOSqF5J3WRvJTvVDBJxa1ggeVXirxVmZiaRTmgj7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpB29Hu0F375f6zgb0/DvZeHoCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMmZh NzQ1My02Yjg1LTQxMmItYjI4MC03YzcxZWVjNmM0NmIvZmZhMjgwYTQtZDBkZS0z NzkxLThmZGMtNjBkNTNlZmE2ZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTJmYTc0NTMtNmI4NS00MTJiLWIy ODAtN2M3MWVlYzZjNDZiLzEyZmE3NDUzLTZiODUtNDEyYi1iMjgwLTdjNzFlZWM2 YzQ2Yi5jcmwwHwYDVR0jBBgwFoAUalK3AKb6f222PMyXY6B/GDHvGhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMmZhNzQ1My02Yjg1LTQxMmItYjI4MC03Yzcx ZWVjNmM0NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt+V4VqZdGipLkQvhT3zooKvqkmeBignKFD2PSBwYeRGfD/Ql7T4JiS PkcSEZv3MMvjBz9bQozrcXysKbDAMOuA/ZVjKPt+4ziY8pmkYvsY6PJxDwwCT9hE pOeJFJw+7Onizgczo2ApZ6BuF4Dgw9JHHS2IPB3k6lufV7e0hLzFwyBN6NP6pYEQ 9OCF1I5PzT17Lc4FGbziH13PuIm4XzmumrNXd+RnIye/SWDDFubCk7xo9G1RQv7T oIYS4NSokvUYmvP+LwQ4RrjQTK2WIPsYrLQNHV/mmxwA9AjEVQmTzvZ7e3wijJQ4 g+bYhgpEBaM5SIbmx0AY3uEgo1QwkNM= -----END CERTIFICATE-----Generated at Mon May 5 12:49:47 2025 by rpki-client