$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa File: 7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa (raw, json) Hash identifier: w/5epgB5L+z75PypY4MLpXfbRiSdPTuEd5X27n9ToK4= Subject key identifier: EA:A0:A5:3A:74:99:F6:14:06:7D:38:79:38:F1:83:D3:43:C4:88:96 Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F43285849244E85C10FB68A62CAEDA0E0 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 1448 IP address blocks: 156.146.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:85:c1:0f:b6:8a:62:ca:ed:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=433a10d9-619c-4a20-80a9-e403554f984d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:1c:46:f3:9c:03:30:9c:6f:87:d5:29:b4: 7a:44:7a:07:a4:ed:c7:b4:39:13:5b:f9:05:18:fc: 6a:28:0f:be:23:42:c8:40:17:05:93:39:78:1c:56: c0:4d:5a:dc:5d:09:65:0d:02:0c:15:da:f4:2f:2b: fa:40:1a:ae:10:74:ca:60:17:64:e0:33:0a:20:99: 21:39:2c:97:9e:a3:39:97:1a:aa:da:f5:45:2a:f1: ec:c2:08:30:2f:a2:57:4e:8b:e5:6a:18:db:b0:aa: 67:a6:d7:ff:c1:a2:c0:9a:5d:c6:d7:05:fa:c9:20: 24:2b:9a:a6:2e:97:0a:b4:62:1e:63:3e:fa:8f:bb: 66:af:e2:de:ad:2b:4d:cb:f2:4e:44:3a:86:26:34: 99:4a:d7:e2:8b:23:ae:48:ff:f6:67:8e:aa:34:da: f7:61:6d:e6:fe:8b:fe:29:86:c8:41:30:13:cf:a3: d4:df:c1:cd:e0:10:b9:95:2c:3a:d4:0f:b5:9c:b2: 6d:78:ab:20:eb:a6:80:78:70:0d:36:20:e9:70:1b: 36:e3:15:70:1c:97:ac:d3:13:4d:d6:fa:4f:ce:0d: 6a:8d:43:cd:b0:a4:a8:b3:a7:53:3e:9c:c1:ae:f4: 43:79:42:d9:20:66:45:e4:04:77:c7:ed:a0:0f:9d: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A0:A5:3A:74:99:F6:14:06:7D:38:79:38:F1:83:D3:43:C4:88:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:a3:92:f5:f6:c0:16:e1:c5:ec:67:80:c7:7c:29:3b:3c:d5: 8a:4d:45:7e:f6:3e:08:6b:14:e2:01:ed:39:28:c5:29:33:30: d6:c8:bd:1c:9e:84:c6:31:53:7f:40:52:e3:4f:09:b0:2f:b0: fb:d4:b8:45:0a:54:76:9f:93:97:4b:ba:99:d0:51:82:3f:42: 42:78:5b:05:40:7d:52:61:bb:bb:b9:06:a2:82:d6:f5:b3:1f: d4:19:5f:bf:32:d3:d7:3c:8f:eb:d4:43:1f:55:17:4e:71:45: dc:f2:7b:0a:0b:04:e6:53:12:3e:12:8b:91:35:ab:45:84:1f: 72:93:b2:4f:c5:0e:70:a5:bb:64:d8:7d:fc:29:e7:5b:da:f9: 63:b9:35:32:19:d4:0b:b8:94:68:b2:35:dc:7b:8a:ea:de:8a: a5:d4:29:90:53:e1:42:0c:2e:15:b0:a5:e5:33:26:a0:f2:a6: 4a:32:c0:a7:b5:dd:18:b4:99:06:c9:2c:ec:e3:ff:b2:84:58: 77:e6:19:fd:1e:51:72:45:cf:a7:19:b0:b8:0a:53:51:77:89: cb:ec:07:32:56:7a:8c:4c:92:89:d9:a4:b0:2d:48:da:9a:ea: 51:dc:fa:5c:98:99:0e:4f:21:ee:12:25:d2:8d:1b:09:90:71: 40:1e:53:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToXBD7aKYsrtoOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NDMzYTEwZDktNjE5Yy00YTIwLTgwYTktZTQwMzU1NGY5ODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX8cRvOcAzCcb4fVKbR6RHoHpO3HtDkTW/kF GPxqKA++I0LIQBcFkzl4HFbATVrcXQllDQIMFdr0Lyv6QBquEHTKYBdk4DMKIJkh OSyXnqM5lxqq2vVFKvHswggwL6JXTovlahjbsKpnptf/waLAml3G1wX6ySAkK5qm LpcKtGIeYz76j7tmr+LerStNy/JORDqGJjSZStfiiyOuSP/2Z46qNNr3YW3m/ov+ KYbIQTATz6PU38HN4BC5lSw61A+1nLJteKsg66aAeHANNiDpcBs24xVwHJes0xNN 1vpPzg1qjUPNsKSos6dTPpzBrvRDeULZIGZF5AR3x+2gD51Y5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqgpTp0mfYUBn04eTjxg9NDxIiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvN2UwYzEzNmYtNThlZS0z ZTc3LWJmZTEtNDMzY2RlMTVhZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKujkvX2wBbhxexngMd8KTs81YpNRX72PghrFOIB7TkoxSkzMNbIvRye hMYxU39AUuNPCbAvsPvUuEUKVHafk5dLupnQUYI/QkJ4WwVAfVJhu7u5BqKC1vWz H9QZX78y09c8j+vUQx9VF05xRdzyewoLBOZTEj4Si5E1q0WEH3KTsk/FDnClu2TY ffwp51va+WO5NTIZ1Au4lGiyNdx7iureiqXUKZBT4UIMLhWwpeUzJqDypkoywKe1 3Ri0mQbJLOzj/7KEWHfmGf0eUXJFz6cZsLgKU1F3icvsBzJWeoxMkonZpLAtSNqa 6lHc+lyYmQ5PIe4SJdKNGwmQcUAeUyw= -----END CERTIFICATE-----Generated at Wed Apr 30 08:29:58 2025 by rpki-client