$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa File: 43d529a5-06fc-3596-b306-3805ee39efec.roa (raw, json) Hash identifier: tKZUvrjcVfiTBRA2kpDKoNi7v1RF25mzyLfXVEFuhoA= Subject key identifier: FE:25:8E:BA:8A:2F:4F:58:5E:A5:6B:EE:5A:B7:66:3F:D3:10:9A:58 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F432858496A1999E8D951AB48AB0A4680 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:99:e8:d9:51:ab:48:ab:0a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=8b37f256-63ff-4f96-8cff-45b3e4e872e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b1:f3:8b:fd:fc:82:00:e0:32:44:f8:ff:fb: e5:0c:ea:be:07:99:e8:7b:9f:e4:f3:09:5b:75:c7: 64:fe:89:d7:05:0d:72:5d:46:4c:e7:10:9a:df:48: 71:15:1b:0f:5b:c6:47:12:ee:f8:18:8d:aa:44:7f: 74:9e:61:a9:3d:fc:ff:7c:a3:60:c5:73:f6:4d:1b: fd:a7:30:22:49:07:df:b9:d6:e4:3a:24:14:61:5c: b5:7e:20:4a:83:ed:02:c4:bb:71:f3:09:62:f9:a8: fa:ff:65:71:29:f6:43:50:1c:84:61:af:a2:5c:9f: f3:c4:d9:4e:40:1c:38:2b:8e:4c:56:69:41:78:89: c8:d8:5a:8f:0b:1d:b2:d3:3b:8f:3f:34:74:a2:cf: b5:21:5c:e3:2a:e3:4a:50:d3:0f:cf:b1:86:37:2a: 57:ec:d9:c1:65:06:95:75:39:0e:dc:66:a5:ed:4e: 93:6c:d1:19:cb:dd:fb:3a:ee:43:b2:7c:62:78:d1: a9:e4:18:82:f0:a8:94:7a:49:07:89:9f:24:9f:19: b7:49:45:a3:5f:ef:b9:4d:12:6b:a0:13:b3:e1:32: d3:80:b5:05:4e:f4:89:43:ab:9d:8d:dc:53:08:9c: df:7d:17:a9:82:b0:60:8b:d9:06:0e:97:76:9f:47: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:25:8E:BA:8A:2F:4F:58:5E:A5:6B:EE:5A:B7:66:3F:D3:10:9A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:47:4c:be:89:29:da:78:34:8d:d1:72:1c:e2:ed:18:83:96: d5:de:9a:56:c7:68:92:2a:09:89:6b:65:ff:c8:68:5a:8d:36: 67:b5:cb:c8:28:6d:f6:bf:57:1a:a2:8f:5f:2d:b8:d4:66:7e: 12:46:3c:26:d7:c5:98:7b:31:75:41:17:84:1f:41:a0:82:20: bb:6c:df:f9:c5:f2:3c:7c:5e:0a:64:a8:cf:13:02:04:ae:d7: db:6b:3a:bc:2a:9f:e4:c1:99:95:c5:4c:5f:0e:1b:b4:35:f6: 84:61:1f:27:21:87:e5:56:77:2e:85:4f:34:59:d6:ee:c5:63: 4b:ba:40:5f:41:25:76:d9:44:7d:b3:74:9d:e3:39:d7:ce:e2: 13:30:4d:11:97:55:78:6d:0c:db:bc:32:8d:2e:6c:df:73:0a: 8a:48:0e:aa:ff:f3:c2:03:4f:a2:c8:46:27:97:0e:8e:52:ff: ae:97:d4:06:04:48:f3:06:55:e5:aa:a9:8e:a8:f1:b4:6f:fa: b0:3a:55:5a:33:39:0f:25:6f:18:67:64:8a:a2:42:d3:0a:1e: de:14:b4:4d:a6:12:78:e8:cc:46:93:cb:c7:f6:b0:85:57:38: 01:09:10:0b:1f:dd:c6:84:74:88:d2:61:bd:0a:a6:13:30:dc: 28:8b:4f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZno2VGrSKsKRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk OGIzN2YyNTYtNjNmZi00Zjk2LThjZmYtNDViM2U0ZTg3MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLHzi/38ggDgMkT4//vlDOq+B5noe5/k8wlb dcdk/onXBQ1yXUZM5xCa30hxFRsPW8ZHEu74GI2qRH90nmGpPfz/fKNgxXP2TRv9 pzAiSQffudbkOiQUYVy1fiBKg+0CxLtx8wli+aj6/2VxKfZDUByEYa+iXJ/zxNlO QBw4K45MVmlBeInI2FqPCx2y0zuPPzR0os+1IVzjKuNKUNMPz7GGNypX7NnBZQaV dTkO3Gal7U6TbNEZy937Ou5DsnxieNGp5BiC8KiUekkHiZ8knxm3SUWjX++5TRJr oBOz4TLTgLUFTvSJQ6udjdxTCJzffRepgrBgi9kGDpd2n0earwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4ljrqKL09YXqVr7lq3Zj/TEJpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNDNkNTI5YTUtMDZmYy0z NTk2LWIzMDYtMzgwNWVlMzllZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9HTL6JKdp4NI3Rchzi7RiDltXemlbHaJIqCYlrZf/IaFqNNme1y8go bfa/Vxqij18tuNRmfhJGPCbXxZh7MXVBF4QfQaCCILts3/nF8jx8XgpkqM8TAgSu 19trOrwqn+TBmZXFTF8OG7Q19oRhHychh+VWdy6FTzRZ1u7FY0u6QF9BJXbZRH2z dJ3jOdfO4hMwTRGXVXhtDNu8Mo0ubN9zCopIDqr/88IDT6LIRieXDo5S/66X1AYE SPMGVeWqqY6o8bRv+rA6VVozOQ8lbxhnZIqiQtMKHt4UtE2mEnjozEaTy8f2sIVX OAEJEAsf3caEdIjSYb0KphMw3CiLT34= -----END CERTIFICATE-----Generated at Tue Apr 29 04:08:40 2025 by rpki-client