$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa File: 03e688c7-732f-3297-8ea1-e37d0210334f.roa (raw, json) Hash identifier: 2agEWzd0TULsYos2A3dEfjwbfzQAEoY7mKVcPc1XmdQ= Subject key identifier: 14:42:83:CB:FA:64:16:CE:B2:27:74:64:F3:98:3D:76:FE:40:74:52 Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F43285849B14A06A07E9E61A19E3CBA40 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 53407 IP address blocks: 158.120.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:06:a0:7e:9e:61:a1:9e:3c:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7d8a0b98-f901-45ad-b0f0-b7964f3b93f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:30:46:81:4f:be:27:94:77:49:39:f0:0c:2e: 3f:9c:91:41:69:63:c1:31:da:78:84:74:26:dd:11: 6f:d9:22:e5:fc:89:00:9d:bf:27:35:c3:42:59:c2: 1b:dc:11:a8:d4:6e:73:05:cb:f9:6f:68:ce:3c:7d: 73:af:47:36:85:43:62:89:27:95:92:7c:c8:5d:ad: a0:4f:d3:ad:9f:42:01:12:77:54:6d:39:12:97:88: 10:ff:18:4a:a0:ab:db:9d:1d:ce:0a:f8:c7:0e:66: c1:ff:85:cd:fd:1d:b6:9d:e8:95:25:23:8a:b0:aa: 7a:5f:4c:1e:2f:bb:38:72:9a:e5:fe:4b:c8:b8:aa: cd:76:d1:00:47:2b:7b:73:c0:8f:c3:43:db:9d:57: 51:8b:60:a0:9a:4a:b8:95:04:ea:93:68:d1:9e:35: 07:68:c4:ee:16:a5:c8:82:b4:db:8e:ad:d4:93:8f: ca:5a:81:1e:bc:2e:04:a9:45:65:49:3a:36:6e:06: 90:fe:1d:2b:68:d4:d8:e2:33:5c:c1:dd:c1:06:e6: 67:3d:67:1e:f3:e1:38:51:d3:8c:a6:73:65:0d:3c: 69:1a:74:03:71:16:4f:1c:b5:2d:65:39:b4:f5:46: 79:f4:78:a3:fa:d3:dd:d4:ae:e0:b1:ac:79:7c:5b: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:42:83:CB:FA:64:16:CE:B2:27:74:64:F3:98:3D:76:FE:40:74:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 158.120.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:47:20:33:2c:a2:7d:b0:d7:eb:0a:5b:7e:a2:30:19:99:ca: 7c:e4:77:bc:9e:e8:67:17:8f:c1:bd:a7:29:0e:cf:16:71:d3: 1a:08:3a:9c:ac:7e:51:17:56:c9:f3:a2:ac:cc:fa:75:42:58: 53:f0:ff:05:ca:21:da:29:36:ae:ab:a7:cb:b3:31:23:09:cb: 33:1c:94:5a:14:8a:0b:a5:06:ca:7f:b3:d7:d8:7f:69:44:ad: 14:b5:32:16:17:6c:21:c7:0b:74:21:4f:aa:e7:79:86:17:44: 23:74:b0:e4:96:28:e0:24:a8:db:b3:d9:4f:2c:ba:b9:7f:71: f3:f9:77:30:00:f8:97:c7:6a:c7:40:54:b3:1c:f5:e3:21:ab: b7:61:fd:75:da:5a:78:85:29:75:f1:6f:e4:8c:8f:89:4e:78: 65:48:79:d2:9a:0c:1a:38:4f:8e:7e:a8:10:69:ff:a7:77:6b: 08:1a:0c:ae:b4:94:eb:1f:c0:1d:78:74:64:c5:cd:ef:90:92: 98:93:3e:28:f1:7e:62:e7:16:cf:f4:14:49:63:ed:75:85:79: a7:22:39:5b:77:4c:c8:ea:56:8e:88:eb:05:6a:75:8e:2d:3e: 63:89:fa:2a:e3:67:47:5d:35:8d:50:65:14:83:76:58:fc:f3: 37:32:58:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgagfp5hoZ48ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2Q4YTBiOTgtZjkwMS00NWFkLWIwZjAtYjc5NjRmM2I5M2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzBGgU++J5R3STnwDC4/nJFBaWPBMdp4hHQm 3RFv2SLl/IkAnb8nNcNCWcIb3BGo1G5zBcv5b2jOPH1zr0c2hUNiiSeVknzIXa2g T9Otn0IBEndUbTkSl4gQ/xhKoKvbnR3OCvjHDmbB/4XN/R22neiVJSOKsKp6X0we L7s4cprl/kvIuKrNdtEARyt7c8CPw0PbnVdRi2Cgmkq4lQTqk2jRnjUHaMTuFqXI grTbjq3Uk4/KWoEevC4EqUVlSTo2bgaQ/h0raNTY4jNcwd3BBuZnPWce8+E4UdOM pnNlDTxpGnQDcRZPHLUtZTm09UZ59Hij+tPd1K7gsax5fFti5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRCg8v6ZBbOsid0ZPOYPXb+QHRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvMDNlNjg4YzctNzMyZi0z Mjk3LThlYTEtZTM3ZDAyMTAzMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnngoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdHIDMson2w1+sKW36iMBmZynzkd7ye6GcXj8G9pykOzxZx0xoIOpys flEXVsnzoqzM+nVCWFPw/wXKIdopNq6rp8uzMSMJyzMclFoUigulBsp/s9fYf2lE rRS1MhYXbCHHC3QhT6rneYYXRCN0sOSWKOAkqNuz2U8surl/cfP5dzAA+JfHasdA VLMc9eMhq7dh/XXaWniFKXXxb+SMj4lOeGVIedKaDBo4T45+qBBp/6d3awgaDK60 lOsfwB14dGTFze+QkpiTPijxfmLnFs/0FElj7XWFeaciOVt3TMjqVo6I6wVqdY4t PmOJ+irjZ0ddNY1QZRSDdlj88zcyWEs= -----END CERTIFICATE-----Generated at Tue May 6 11:01:04 2025 by rpki-client