$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa File: 3581304a-962f-3365-9bef-ffc42b70f1cf.roa (raw, json) Hash identifier: 8Hgxg6sh7pd2GKUY708X8+qIDsXK6pNK1a4HA+N9w70= Subject key identifier: 40:46:80:AF:3D:62:67:18:E7:7C:04:2E:01:CB:B1:92:6F:08:B5:12 Certificate issuer: /CN=b7f47051-24e9-4c6d-a7f1-2165292c5530 Certificate serial: 010D0C9F43285849D462A3B70178B4A770009000 Authority key identifier: 6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa Signing time: Mon 12 May 2025 14:43:56 +0000 ROA not before: Mon 12 May 2025 14:43:56 +0000 ROA not after: Sun 10 Aug 2025 14:43:56 +0000 asID: 19050 IP address blocks: 156.40.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:62:a3:b7:01:78:b4:a7:70:00:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f47051-24e9-4c6d-a7f1-2165292c5530 Validity Not Before: May 12 14:43:56 2025 GMT Not After : Aug 10 14:43:56 2025 GMT Subject: CN=c68ed60d-f6da-44b3-a49f-60526d810eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:ef:ae:0c:b2:00:50:95:34:6a:2b:a0:bc: 42:d8:57:e8:88:db:fa:4c:7c:d2:9c:17:2d:0c:2c: 65:47:40:5a:ab:5d:95:71:ac:01:37:ad:9f:9c:29: 52:d9:d6:aa:17:fd:29:9b:56:ba:e0:66:fa:2a:eb: 26:5f:c8:b1:b4:08:ee:98:74:19:b9:c2:d2:ce:2a: d4:a7:3d:3c:5a:52:91:44:d7:1c:c8:54:ba:f1:2b: 88:0f:68:57:ad:64:1f:c4:59:a1:7e:a1:4d:25:3e: b7:e6:57:bb:d0:29:89:39:52:d9:dd:27:26:ec:5a: 54:23:5a:6f:63:f2:89:e8:b7:2e:c4:b6:d3:40:6d: 65:ea:bf:31:97:35:59:af:cf:b4:61:f0:4c:40:51: e0:cc:eb:a4:9a:99:3e:9b:15:75:f9:c1:f0:73:b3: 8b:43:db:fd:27:30:5b:a1:59:66:03:df:d2:77:56: 6a:be:a5:1b:84:7b:cd:75:79:ff:90:12:55:d7:4b: 14:ea:27:bf:12:dd:3d:3f:c9:e7:39:99:93:87:1d: c1:2f:2d:db:0e:5b:05:2c:c1:09:bd:0e:5f:71:12: b3:f7:b2:67:38:8c:f1:c4:8c:ad:37:e6:44:18:fa: 99:3e:ec:b0:77:4d:f4:e4:21:95:5d:ca:c9:a0:1c: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:46:80:AF:3D:62:67:18:E7:7C:04:2E:01:CB:B1:92:6F:08:B5:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl X509v3 Authority Key Identifier: keyid:6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer sbgp-ipAddrBlock: critical IPv4: 156.40.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:81:59:51:97:5e:33:8f:d9:3f:1d:12:82:f3:84:2a:a4:db: b5:12:bc:3d:86:cb:27:95:c9:ea:b4:24:3e:ee:74:9b:91:34: a4:26:d8:cf:3d:1b:d9:06:59:c7:28:6a:80:1b:58:5a:3d:fc: 61:bc:0f:bc:cd:76:e5:93:38:e3:8d:44:d8:da:dd:81:07:bb: 20:5c:ed:d6:ab:b8:ee:33:fc:b4:6b:ff:45:43:77:73:d0:1e: 12:d4:2e:4a:7f:96:d1:6d:53:fe:05:7e:ca:68:bd:87:af:a6: 96:e0:09:45:2f:69:0b:70:0c:50:1d:35:a9:11:4c:2e:39:25: 9c:10:fc:32:11:74:ba:64:f6:2b:fd:c9:28:35:ea:46:70:27: af:7a:9d:bf:b9:e0:2c:88:f2:73:68:2a:71:cf:59:2b:98:7c: 3b:bf:d7:73:5d:c7:13:be:bb:11:51:5a:9b:45:8c:7b:a3:9d: 32:18:16:24:96:cb:7a:1a:2c:ba:2b:a5:6e:ce:34:33:fb:a3: 23:74:4c:7d:68:3b:a1:06:b9:53:68:8d:77:9b:94:0d:ac:07: be:82:57:84:b9:3d:f9:ea:59:c6:1e:40:c3:04:2d:d1:59:89: 2d:f0:5e:78:08:b0:9d:08:cd:42:01:8c:49:33:48:86:dd:15: cf:f9:fb:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUYqO3AXi0p3AAkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdmNDcwNTEtMjRlOS00YzZkLWE3ZjEtMjE2NTI5MmM1 NTMwMB4XDTI1MDUxMjE0NDM1NloXDTI1MDgxMDE0NDM1NlowLzEtMCsGA1UEAxMk YzY4ZWQ2MGQtZjZkYS00NGIzLWE0OWYtNjA1MjZkODEwZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpzvrgyyAFCVNGoroLxC2FfoiNv6THzSnBct DCxlR0Baq12VcawBN62fnClS2daqF/0pm1a64Gb6KusmX8ixtAjumHQZucLSzirU pz08WlKRRNccyFS68SuID2hXrWQfxFmhfqFNJT635le70CmJOVLZ3Scm7FpUI1pv Y/KJ6LcuxLbTQG1l6r8xlzVZr8+0YfBMQFHgzOukmpk+mxV1+cHwc7OLQ9v9JzBb oVlmA9/Sd1ZqvqUbhHvNdXn/kBJV10sU6ie/Et09P8nnOZmThx3BLy3bDlsFLMEJ vQ5fcRKz97JnOIzxxIytN+ZEGPqZPuywd0305CGVXcrJoByI1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBGgK89YmcY53wELgHLsZJvCLUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iN2Y0 NzA1MS0yNGU5LTRjNmQtYTdmMS0yMTY1MjkyYzU1MzAvMzU4MTMwNGEtOTYyZi0z MzY1LTliZWYtZmZjNDJiNzBmMWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjdmNDcwNTEtMjRlOS00YzZkLWE3 ZjEtMjE2NTI5MmM1NTMwL2I3ZjQ3MDUxLTI0ZTktNGM2ZC1hN2YxLTIxNjUyOTJj NTUzMC5jcmwwHwYDVR0jBBgwFoAUb2chWIkPmgmxclYLeTq51x3dPP0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iN2Y0NzA1MS0yNGU5LTRjNmQtYTdmMS0yMTY1 MjkyYzU1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnChfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+BWVGXXjOP2T8dEoLzhCqk27USvD2GyyeVyeq0JD7udJuRNKQm2M89 G9kGWccoaoAbWFo9/GG8D7zNduWTOOONRNja3YEHuyBc7daruO4z/LRr/0VDd3PQ HhLULkp/ltFtU/4FfspovYevppbgCUUvaQtwDFAdNakRTC45JZwQ/DIRdLpk9iv9 ySg16kZwJ696nb+54CyI8nNoKnHPWSuYfDu/13NdxxO+uxFRWptFjHujnTIYFiSW y3oaLLorpW7ONDP7oyN0TH1oO6EGuVNojXeblA2sB76CV4S5PfnqWcYeQMMELdFZ iS3wXngIsJ0IzUIBjEkzSIbdFc/5+xE= -----END CERTIFICATE-----Generated at Wed May 14 01:39:51 2025 by rpki-client