$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa File: c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa (raw, json) Hash identifier: KvOVqCaMhGCPLsLPSm6B7S0K/Xytwynp16iSXyTFAa8= Subject key identifier: 16:9A:5F:B2:A9:84:28:F8:4F:E2:15:3E:E3:18:DD:5A:C7:F0:A4:52 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F43285849194173FADB478F52132A8C20 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 54535 IP address blocks: 156.37.204.0/24 maxlen: 24 156.37.205.0/24 maxlen: 24 156.37.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:73:fa:db:47:8f:52:13:2a:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=19ae1c99-aeed-4300-933a-645e42f228c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:2b:2a:6e:f6:7b:fb:ae:ee:25:56:44:1e: 84:9d:69:17:10:84:9d:c0:66:b5:82:a2:14:5a:53: a2:b8:87:41:b1:cc:ca:1c:07:72:a7:01:27:dd:9a: 23:62:97:df:32:31:f0:4f:2d:cb:ba:89:6e:ca:5d: 7e:53:7c:ab:e4:78:1d:35:c5:7e:e5:23:35:1a:03: aa:a0:b4:86:bd:04:71:83:5f:f8:ff:d6:01:1e:20: 8b:82:08:52:0b:91:9d:bc:51:1d:57:6d:f0:1c:be: 79:77:ae:19:63:69:b5:ea:7c:58:8c:f1:51:60:8c: 48:9f:be:72:39:1d:38:f2:3c:b1:19:d4:e8:70:ec: fe:e2:20:9f:45:fa:a7:c6:8c:de:e7:2c:1b:39:ec: a9:3b:3c:ae:20:91:97:3d:c9:e5:60:30:83:b3:e6: 5d:23:f0:3c:35:ba:ec:13:b9:d0:cf:27:12:11:03: 8e:ee:7e:c8:56:98:3d:72:ba:cb:18:69:ab:cb:cd: 0d:16:0d:ef:20:c4:b8:be:59:cf:10:f4:7c:f4:97: 0f:db:a0:af:1b:d4:e9:92:5d:69:bd:6d:ff:dd:3b: 0a:f9:05:3d:e0:46:f1:a8:fc:90:34:3d:97:1c:16: 5d:7e:80:df:04:fd:f1:9e:0d:a5:77:40:37:99:35: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9A:5F:B2:A9:84:28:F8:4F:E2:15:3E:E3:18:DD:5A:C7:F0:A4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.204.0/23 156.37.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5d:de:e0:2e:62:98:b2:5f:2c:a4:cb:ca:09:0d:b4:02:25: 2b:2b:44:a9:c6:fd:0e:93:eb:73:96:7d:6d:71:f0:61:62:1f: 0f:86:71:e2:f1:0f:63:aa:9f:0a:ab:b2:87:b1:74:32:2b:ba: 6d:0b:24:bf:1f:76:85:d4:04:5b:f3:d9:d7:61:85:2d:99:02: af:ff:36:c8:7e:79:df:ad:15:26:78:f9:51:ed:d2:c0:25:22: fe:c1:40:e4:37:f5:01:53:80:b2:a0:83:ce:9e:df:d5:58:ce: 97:3b:09:21:6b:4e:d9:60:89:93:4a:10:e9:00:4b:d2:d1:4f: 03:73:2e:75:3b:bf:de:68:fd:ea:5c:fc:f9:4b:65:7b:b0:90: d5:b2:8b:5c:76:91:ca:fa:d5:04:e0:4b:44:13:e4:fb:11:d4: 5a:cb:86:2b:b3:ed:f6:ad:c1:98:c2:e7:52:7f:8a:2a:d7:e4: e7:be:42:2f:f4:49:67:48:94:fa:e3:1c:08:f7:ff:19:e5:9a: ac:19:5a:c4:ad:01:8c:43:39:eb:69:0e:16:d1:11:4f:c6:2e: 70:9b:e0:47:16:5e:42:5c:fe:e1:0c:a8:d5:f1:8a:92:e1:fe: 4c:03:ad:88:1c:c1:b9:42:02:52:5f:b4:aa:e8:ab:65:32:9b: 07:a2:62:c8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkZQXP620ePUhMqjCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MTlhZTFjOTktYWVlZC00MzAwLTkzM2EtNjQ1ZTQyZjIyOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPcrKm72e/uu7iVWRB6EnWkXEISdwGa1gqIU WlOiuIdBsczKHAdypwEn3ZojYpffMjHwTy3Luoluyl1+U3yr5HgdNcV+5SM1GgOq oLSGvQRxg1/4/9YBHiCLgghSC5GdvFEdV23wHL55d64ZY2m16nxYjPFRYIxIn75y OR048jyxGdTocOz+4iCfRfqnxoze5ywbOeypOzyuIJGXPcnlYDCDs+ZdI/A8Nbrs E7nQzycSEQOO7n7IVpg9crrLGGmry80NFg3vIMS4vlnPEPR89JcP26CvG9Tpkl1p vW3/3TsK+QU94EbxqPyQND2XHBZdfoDfBP3xng2ld0A3mTXKEQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBaaX7KphCj4T+IVPuMY3VrH8KRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYzdhNzhiYTAtMTA0OC0z ODVmLWEzYTktZDgyZTdiNzc1M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnCXMAwQB nCXgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF1d3uAuYpiyXyyky8oJDbQCJSsrRKnG/Q6T63OWfW1x8GFi Hw+GceLxD2OqnwqrsoexdDIrum0LJL8fdoXUBFvz2ddhhS2ZAq//Nsh+ed+tFSZ4 +VHt0sAlIv7BQOQ39QFTgLKgg86e39VYzpc7CSFrTtlgiZNKEOkAS9LRTwNzLnU7 v95o/epc/PlLZXuwkNWyi1x2kcr61QTgS0QT5PsR1FrLhiuz7fatwZjC51J/iirX 5Oe+Qi/0SWdIlPrjHAj3/xnlmqwZWsStAYxDOetpDhbREU/GLnCb4EcWXkJc/uEM qNXxipLh/kwDrYgcwblCAlJftKroq2UymweiYsg= -----END CERTIFICATE-----Generated at Mon May 5 21:46:57 2025 by rpki-client