$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa File: 00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa (raw, json) Hash identifier: Z1aiNtspEoPLIdM1PKbzr56nzQ/J5EWj9R7GyEng/LQ= Subject key identifier: 98:27:0D:74:70:EC:5D:A2:59:82:D3:46:AA:02:25:E4:E4:7B:38:44 Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F43285849287E623713642995C098AE80 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 22571 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:62:37:13:64:29:95:c0:98:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=f380e2fc-32f0-4ac2-a1e2-9a7ac0191436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:c1:ea:fa:44:08:76:79:03:a8:43:fd:d0: f6:aa:d1:40:90:86:27:06:ec:6f:1a:e5:97:ee:65: 9d:b6:0c:d0:95:21:d8:ec:93:d7:44:74:de:e2:9a: b0:80:3b:33:d1:d5:14:3e:5a:5b:92:b7:a0:93:38: 63:ee:4f:21:4c:ab:13:da:c7:2a:d9:28:10:b5:ca: 75:bf:f5:ec:9b:91:94:df:d9:f5:5e:b1:98:bb:44: 59:d2:cd:ab:bd:c2:15:39:f5:a4:49:15:b9:a2:1f: 83:a4:10:b6:3c:7b:5b:2b:88:c9:d5:d9:4e:f0:04: e0:3b:64:4c:e9:82:3e:10:b9:76:92:1d:7f:d0:29: f8:02:20:72:a3:b1:cc:06:67:ee:bc:29:b3:56:c1: cc:28:48:1b:d7:7d:4c:cf:f5:44:8e:a4:e1:ca:d8: 8f:f1:4b:59:ad:e8:c7:1d:88:ae:c7:03:3a:19:39: 09:32:c0:83:4d:d1:9a:74:24:09:5d:c9:e0:03:98: 20:ac:0a:16:e7:ce:10:ca:6d:39:df:07:17:4e:5a: 14:30:11:16:e9:ef:10:47:c3:18:73:c9:7d:da:6e: f2:f0:06:5a:4f:6f:5f:a3:25:64:87:71:e4:48:90: fc:81:dc:51:7e:01:e3:43:ab:70:13:8a:9b:b6:99: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:27:0D:74:70:EC:5D:A2:59:82:D3:46:AA:02:25:E4:E4:7B:38:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ba:80:81:83:89:7f:23:e2:08:47:db:ec:bf:a5:30:81:9c: 1a:e7:9a:75:64:82:c7:5c:01:bf:b8:70:76:14:d5:6a:e0:f3: c9:7d:16:c1:92:ab:fc:cd:1d:62:49:e3:3a:92:b6:ab:a7:8f: f3:bc:d2:86:e8:7a:e2:9f:b1:ff:a0:94:4d:3f:2c:12:7d:c8: c1:18:37:a4:f5:de:f7:cc:9b:28:ab:91:d2:66:e0:99:c2:b2: b6:8c:41:b2:53:bb:6d:ef:43:f6:9c:98:b1:6d:a8:64:d6:1c: 17:76:8e:d2:19:f5:31:e7:87:bf:50:35:e2:27:94:24:ea:09: ac:1d:16:72:ac:ba:ab:4d:2f:16:7d:2e:45:b3:20:0f:8e:4a: 6c:c2:30:58:fd:3c:1e:96:57:7b:87:90:06:a6:e9:b4:1e:72: 7e:8b:a2:f4:f0:ec:6d:6d:65:48:e4:02:1a:a7:e8:4e:c3:6e: f6:69:b9:49:8f:6b:7b:88:61:fc:03:f4:59:2b:20:68:60:3b: 94:ce:c4:6f:80:3e:04:69:3b:2a:78:64:1f:d7:98:62:e8:3b: 75:55:0c:32:fd:24:cd:0d:65:97:dd:08:39:1a:1e:98:07:9c: 10:82:1f:24:3c:27:e1:a7:09:ec:d3:d6:46:c8:41:42:ba:a7: 05:a1:ee:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmI3E2QplcCYroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjM4MGUyZmMtMzJmMC00YWMyLWExZTItOWE3YWMwMTkxNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUTB6vpECHZ5A6hD/dD2qtFAkIYnBuxvGuWX 7mWdtgzQlSHY7JPXRHTe4pqwgDsz0dUUPlpbkregkzhj7k8hTKsT2scq2SgQtcp1 v/Xsm5GU39n1XrGYu0RZ0s2rvcIVOfWkSRW5oh+DpBC2PHtbK4jJ1dlO8ATgO2RM 6YI+ELl2kh1/0Cn4AiByo7HMBmfuvCmzVsHMKEgb131Mz/VEjqThytiP8UtZrejH HYiuxwM6GTkJMsCDTdGadCQJXcngA5ggrAoW584Qym053wcXTloUMBEW6e8QR8MY c8l92m7y8AZaT29foyVkh3HkSJD8gdxRfgHjQ6twE4qbtpl1uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgnDXRw7F2iWYLTRqoCJeTkezhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvMDBhOWJlNzMtNmUwZC0z MWJhLWE1MTAtNmVlMmIzMjVmYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW6gIGDiX8j4ghH2+y/pTCBnBrnmnVkgsdcAb+4cHYU1Wrg88l9FsGS q/zNHWJJ4zqStqunj/O80oboeuKfsf+glE0/LBJ9yMEYN6T13vfMmyirkdJm4JnC sraMQbJTu23vQ/acmLFtqGTWHBd2jtIZ9THnh79QNeInlCTqCawdFnKsuqtNLxZ9 LkWzIA+OSmzCMFj9PB6WV3uHkAam6bQecn6LovTw7G1tZUjkAhqn6E7DbvZpuUmP a3uIYfwD9FkrIGhgO5TOxG+APgRpOyp4ZB/XmGLoO3VVDDL9JM0NZZfdCDkaHpgH nBCCHyQ8J+GnCezT1kbIQUK6pwWh7vg= -----END CERTIFICATE-----Generated at Mon Apr 28 01:01:17 2025 by rpki-client