$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa File: 146ef9ae-f845-3565-9b2c-e21a984d126d.roa (raw, json) Hash identifier: 1qnzvyCgQ3rQUrt6iLl+RPzVwSiug2L0mRZzzCiLSf8= Subject key identifier: 03:D3:E7:26:C6:9A:89:2C:BF:0E:E4:F2:43:12:B2:3F:F8:87:3E:DD Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F43285849B14A0693781D98870C9FC560 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 53407 IP address blocks: 158.120.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:06:93:78:1d:98:87:0c:9f:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=61c21d4f-5ee4-4055-a0d9-87421bdd554a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:d1:f0:1a:6a:49:44:7e:f9:28:63:45:c5: 24:6e:eb:f6:2a:4d:00:d8:1d:94:63:8c:01:79:d8: 15:a8:51:06:b0:0c:20:f7:3d:81:6d:00:83:13:b8: 32:67:9f:bc:0f:c9:17:26:be:4e:5c:1e:5c:85:0a: a3:fc:ea:ba:39:5b:81:d6:32:2d:19:31:bb:2c:98: 91:c8:f4:0d:13:92:20:10:c5:04:8d:72:f2:3f:de: 88:c5:78:8b:13:14:3b:15:dd:d4:5e:45:db:4e:3e: 6d:5a:12:fc:8f:01:10:5e:5c:6f:bf:a8:c4:0e:c1: c5:91:0f:52:a7:48:ba:5a:22:50:9c:7f:f3:03:89: 7b:fb:3b:08:c0:38:21:1d:d6:65:2a:a4:cb:24:5f: 9b:d0:9c:47:e6:cb:d0:75:6a:8c:0a:36:19:c6:86: 48:74:57:b3:25:79:c1:1d:75:93:ad:d7:25:75:b1: f6:8f:b8:6c:d4:0f:17:69:52:0f:54:1e:55:f7:c0: 0a:64:38:e1:c4:1f:f7:f3:e5:e1:1a:47:a7:7a:ad: 84:e7:8d:e0:04:08:87:d7:40:ba:f3:9d:df:44:3b: 13:ea:34:3e:bb:f6:e4:9c:1c:61:64:48:eb:74:b9: ef:57:b6:74:be:24:3f:19:99:a8:a8:30:85:2e:be: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D3:E7:26:C6:9A:89:2C:BF:0E:E4:F2:43:12:B2:3F:F8:87:3E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 158.120.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:57:2e:05:a4:48:13:53:16:31:4d:5c:7f:af:49:1b:40:57: 14:bd:19:b7:f2:5e:a2:d4:96:ec:e1:ba:bd:87:50:b5:7d:35: 7b:36:0f:03:8a:3f:99:d3:c7:c3:af:74:52:be:37:57:6c:5f: bc:93:95:bf:d3:2a:ae:ac:28:d9:28:12:b6:57:bc:5f:92:49: 1b:9e:f0:77:c8:bc:84:31:e3:38:58:7f:3a:f7:ed:91:d3:72: 7c:f9:a3:09:1e:b3:f8:e6:c2:d0:4a:63:6f:47:33:f4:37:d2: c6:a8:b6:0d:3b:f7:db:43:3b:6c:cc:f4:57:d1:0f:e9:76:f1: 6b:16:7c:b0:43:eb:12:ce:19:2a:4c:04:9d:f2:71:dc:7e:0e: 34:9d:4f:ee:e5:06:8c:ba:66:9e:17:e8:62:c2:e9:0a:b8:91: 54:2d:b6:6c:a3:2d:01:d0:a5:a7:12:6e:f1:d5:47:9c:d2:7e: 7d:b7:bc:14:fc:d9:28:35:db:ec:f5:2b:da:92:37:99:b8:09: 85:51:a7:20:8c:00:72:1f:60:f6:e6:ac:75:ec:29:2e:a5:49: 34:3a:94:2e:00:d7:fc:70:d8:87:66:29:38:1c:c4:26:3f:49: 7c:47:3c:71:46:dd:5f:72:b2:bd:25:51:7f:61:3f:51:c7:2c: 87:4f:e0:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgaTeB2YhwyfxWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjFjMjFkNGYtNWVlNC00MDU1LWEwZDktODc0MjFiZGQ1NTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qTR8BpqSUR++ShjRcUkbuv2Kk0A2B2UY4wB edgVqFEGsAwg9z2BbQCDE7gyZ5+8D8kXJr5OXB5chQqj/Oq6OVuB1jItGTG7LJiR yPQNE5IgEMUEjXLyP96IxXiLExQ7Fd3UXkXbTj5tWhL8jwEQXlxvv6jEDsHFkQ9S p0i6WiJQnH/zA4l7+zsIwDghHdZlKqTLJF+b0JxH5svQdWqMCjYZxoZIdFezJXnB HXWTrdcldbH2j7hs1A8XaVIPVB5V98AKZDjhxB/38+XhGkeneq2E543gBAiH10C6 853fRDsT6jQ+u/bknBxhZEjrdLnvV7Z0viQ/GZmoqDCFLr7sEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPT5ybGmoksvw7k8kMSsj/4hz7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvMTQ2ZWY5YWUtZjg0NS0z NTY1LTliMmMtZTIxYTk4NGQxMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5XLgWkSBNTFjFNXH+vSRtAVxS9GbfyXqLUluzhur2HULV9NXs2DwOK P5nTx8OvdFK+N1dsX7yTlb/TKq6sKNkoErZXvF+SSRue8HfIvIQx4zhYfzr37ZHT cnz5owkes/jmwtBKY29HM/Q30saotg0799tDO2zM9FfRD+l28WsWfLBD6xLOGSpM BJ3ycdx+DjSdT+7lBoy6Zp4X6GLC6Qq4kVQttmyjLQHQpacSbvHVR5zSfn23vBT8 2Sg12+z1K9qSN5m4CYVRpyCMAHIfYPbmrHXsKS6lSTQ6lC4A1/xw2IdmKTgcxCY/ SXxHPHFG3V9ysr0lUX9hP1HHLIdP4OQ= -----END CERTIFICATE-----Generated at Thu May 8 12:08:09 2025 by rpki-client