$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa File: ca317456-25af-3fdb-a49a-8f45c170696c.roa (raw, json) Hash identifier: vz1ID+kH+UKyWe4m7Lj+JNmvamSzclssOz6t/iqbLl8= Subject key identifier: FD:90:32:21:6D:50:33:D4:4E:A4:40:70:62:BA:68:CF:14:56:03:7A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47E32958EB427C3ED65C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 162.156.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7e:32:95:8e:b4:27:c3:ed:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=cf4f5fc5-4659-4d69-b1c1-deaaa9b386b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:51:90:f9:e3:e7:96:90:90:1c:c5:f7:9b: d9:1c:c0:89:be:4c:9e:dc:8f:f7:7c:f3:f3:bc:02: 67:99:58:41:cb:7e:46:a6:c1:21:fb:8b:35:6c:7e: 3f:30:ec:d0:c3:a1:4b:d3:17:b0:aa:97:be:22:d6: 40:99:2e:25:0d:e9:ed:5b:69:4b:3b:92:df:76:24: d0:fb:14:61:c5:35:d6:9a:6a:c1:e4:24:a7:9b:97: e2:66:b1:2f:e4:93:cc:a8:02:1c:0f:6f:f8:a1:22: 53:73:08:75:39:45:75:72:70:0e:17:32:92:d9:34: 68:95:59:19:61:64:7b:b0:91:03:1b:3c:82:5c:53: 9f:d2:6c:f3:e4:f1:98:92:17:2e:06:54:39:82:aa: 22:f5:e7:95:dc:ad:0c:6d:e1:80:1b:61:57:ad:5c: d9:6d:a3:4e:b1:de:82:ea:51:ab:ac:86:79:fe:4a: 4e:fb:36:e4:e7:78:f2:45:1e:cb:0c:38:1f:90:05: bb:0a:4b:e0:20:af:01:3e:ae:ea:82:8d:9c:b1:ea: ed:b3:dc:cf:d6:d6:9f:90:9d:9b:bb:07:73:23:7a: e5:53:8e:5b:4f:a7:ce:b7:bf:11:d1:12:77:0e:94: bd:5c:62:cd:94:8e:ca:85:db:27:ff:c8:1c:00:a3: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:90:32:21:6D:50:33:D4:4E:A4:40:70:62:BA:68:CF:14:56:03:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 162.156.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ca:db:02:67:ca:3c:f9:5e:1c:d1:fa:00:8c:9a:90:65:e1: aa:cc:8b:a4:6d:80:2b:85:4e:c3:13:10:6f:91:33:fc:20:0e: f2:61:3b:1a:2e:62:b3:65:45:7a:d2:9a:58:bc:99:13:10:b4: c7:4b:5f:03:12:9b:48:7d:b3:a2:ab:e3:93:ee:7b:51:07:10: bd:7c:3f:a9:73:f2:db:7a:94:e5:d1:ad:ec:e5:fc:41:89:9c: 54:20:9b:4c:fa:5c:65:86:7c:04:77:fe:d4:31:35:49:99:27: f9:48:67:a3:7c:7c:0d:a0:a6:1c:50:dd:d4:70:31:25:43:6a: b4:7a:04:5e:96:d0:04:54:6e:0b:94:61:e0:e1:29:e4:a8:52: 71:ad:99:bc:47:80:ac:17:90:b0:c0:3c:2d:c6:10:d9:90:56: e7:c7:26:17:4e:7d:1b:38:58:a6:40:e1:60:d8:8c:ae:31:d2: b2:e6:8e:3e:b2:6d:e5:3c:cb:c6:68:d6:73:cd:13:13:9d:b7: ce:ae:7f:f0:70:36:27:c7:e3:bc:16:22:9b:c5:37:3b:d9:f4: e1:d3:19:ef:90:58:7a:2d:ce:dc:e1:2c:44:a6:d2:2c:16:6f: 79:be:33:c0:59:4e:eb:4e:f8:f0:d6:73:2b:0a:58:65:f2:19: c8:35:a6:b7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9H4ylY60J8PtZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2Y0ZjVmYzUtNDY1OS00ZDY5LWIxYzEtZGVhYWE5YjM4NmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthVRkPnj55aQkBzF95vZHMCJvkye3I/3fPPz vAJnmVhBy35GpsEh+4s1bH4/MOzQw6FL0xewqpe+ItZAmS4lDentW2lLO5LfdiTQ +xRhxTXWmmrB5CSnm5fiZrEv5JPMqAIcD2/4oSJTcwh1OUV1cnAOFzKS2TRolVkZ YWR7sJEDGzyCXFOf0mzz5PGYkhcuBlQ5gqoi9eeV3K0MbeGAG2FXrVzZbaNOsd6C 6lGrrIZ5/kpO+zbk53jyRR7LDDgfkAW7CkvgIK8BPq7qgo2cserts9zP1tafkJ2b uwdzI3rlU45bT6fOt78R0RJ3DpS9XGLNlI7Khdsn/8gcAKNNwwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP2QMiFtUDPUTqRAcGK6aM8UVgN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2EzMTc0NTYtMjVhZi0z ZmRiLWE0OWEtOGY0NWMxNzA2OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAopwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOsrbAmfKPPleHNH6AIyakGXhqsyLpG2AK4VOwxMQb5Ez/CAO8mE7Gi5i s2VFetKaWLyZExC0x0tfAxKbSH2zoqvjk+57UQcQvXw/qXPy23qU5dGt7OX8QYmc VCCbTPpcZYZ8BHf+1DE1SZkn+Uhno3x8DaCmHFDd1HAxJUNqtHoEXpbQBFRuC5Rh 4OEp5KhSca2ZvEeArBeQsMA8LcYQ2ZBW58cmF059GzhYpkDhYNiMrjHSsuaOPrJt 5TzLxmjWc80TE523zq5/8HA2J8fjvBYim8U3O9n04dMZ75BYei3O3OEsRKbSLBZv eb4zwFlO60748NZzKwpYZfIZyDWmtw== -----END CERTIFICATE-----Generated at Sat May 10 07:02:59 2025 by rpki-client