$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa File: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (raw, json) Hash identifier: Z+6w5u6+VfZMTYiqCi7ggi2rq3aQGalH0PBwF+xrqqw= Subject key identifier: C2:FC:D6:55:2B:17:A6:61:F9:89:7E:DB:72:66:AA:E6:95:A8:01:4F Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584913AC1EB3BECA6714FED2E800 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 7922 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1e:b3:be:ca:67:14:fe:d2:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=45a973bf-7f6b-455f-9a41-b11afda39d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:82:42:72:15:16:5d:ec:1a:5b:b5:ea:59: 9b:47:e9:0d:3b:40:13:8f:ee:0b:e1:51:b4:5a:cc: 9f:34:3c:82:0e:0d:65:96:51:f6:3c:d6:29:cf:48: c1:d3:ba:4e:d9:db:87:99:35:cb:e7:da:f4:6a:29: 75:3b:18:1a:b9:01:ac:61:f6:99:99:9d:99:c7:eb: 55:94:fe:8c:1b:56:bd:58:04:09:76:76:34:5e:ff: 59:a3:9a:cf:c2:d8:0b:80:29:86:f9:a6:3a:bc:f0: 66:54:fc:c9:d1:ff:df:da:06:7c:ca:01:97:57:49: a6:5e:da:c9:fc:f5:29:a1:c0:d2:66:a9:c9:59:a2: d8:8c:5f:25:85:e5:b7:dd:b9:b2:09:d0:9b:fa:dd: 10:40:59:5c:4e:68:7d:20:c0:30:65:15:e5:31:4c: 14:2e:4d:5e:9e:89:99:bc:f6:8b:50:60:29:27:66: cf:32:bf:62:3f:e2:80:0f:24:0e:cd:56:c4:0f:02: 13:5a:91:cc:20:ac:b6:67:3a:d7:29:f5:77:c1:37: 44:f8:ed:73:2a:a9:fa:c5:cd:d5:ce:29:42:63:c1: b1:b0:59:2c:3d:3e:59:5e:a5:56:1c:52:c5:24:7e: 4b:10:de:8b:25:3e:cf:0d:10:93:6f:8c:69:12:c2: eb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FC:D6:55:2B:17:A6:61:F9:89:7E:DB:72:66:AA:E6:95:A8:01:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:da:b9:65:97:9b:bf:23:94:a0:4b:70:78:ca:58:a4:7b:2c: 46:5e:ad:c6:fc:29:cb:c8:ef:db:34:29:8c:b7:cf:be:0d:fb: 59:26:5c:e5:76:6e:db:75:55:85:e2:da:cb:c9:31:4d:48:51: 88:19:32:d2:0e:ba:2b:70:4e:fd:8b:06:e7:37:45:5e:2d:59: 0a:dc:5d:73:60:56:44:ed:9a:ae:4d:95:14:c3:5a:e1:8d:d3: 80:d3:2d:2d:bd:9b:d5:cf:d2:ba:6d:67:01:aa:8b:96:81:ec: 98:33:54:4e:d2:43:7b:d9:97:cd:b0:1f:34:82:48:0e:c8:9a: c8:29:41:d2:8c:aa:c5:2c:23:7c:0f:2c:bb:b0:f8:9e:8d:33: 0f:f3:41:f6:d0:1f:96:c4:ca:f8:1e:be:2c:43:7c:ac:71:3a: c4:15:ae:23:fe:94:bc:a6:aa:64:ba:52:82:dd:d3:3f:52:3c: 2a:03:c7:6f:d2:95:4d:a8:47:58:97:6e:56:54:52:59:14:5d: 6c:82:79:fb:7b:c9:c0:a1:fe:c8:8b:29:ff:51:b3:37:42:ec: 38:ca:1a:7a:7f:3a:bc:02:b5:91:93:0b:6d:4b:39:6d:81:4a: 34:3d:b7:cb:d9:96:ab:85:93:e0:0e:46:f4:fd:5c:dd:17:cb: 2f:cb:e0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB6zvspnFP7S6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NDVhOTczYmYtN2Y2Yi00NTVmLTlhNDEtYjExYWZkYTM5ZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1OCQnIVFl3sGlu16lmbR+kNO0ATj+4L4VG0 WsyfNDyCDg1lllH2PNYpz0jB07pO2duHmTXL59r0ail1OxgauQGsYfaZmZ2Zx+tV lP6MG1a9WAQJdnY0Xv9Zo5rPwtgLgCmG+aY6vPBmVPzJ0f/f2gZ8ygGXV0mmXtrJ /PUpocDSZqnJWaLYjF8lheW33bmyCdCb+t0QQFlcTmh9IMAwZRXlMUwULk1enomZ vPaLUGApJ2bPMr9iP+KADyQOzVbEDwITWpHMIKy2ZzrXKfV3wTdE+O1zKqn6xc3V zilCY8GxsFksPT5ZXqVWHFLFJH5LEN6LJT7PDRCTb4xpEsLrqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFML81lUrF6Zh+Yl+23JmquaVqAFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNzE0Mzg1Y2MtNmNhZi0z NTM0LTk1NzEtNmJmOTJmOGVhMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjauWWXm78jlKBLcHjKWKR7LEZercb8KcvI79s0KYy3z74N+1kmXOV2 btt1VYXi2svJMU1IUYgZMtIOuitwTv2LBuc3RV4tWQrcXXNgVkTtmq5NlRTDWuGN 04DTLS29m9XP0rptZwGqi5aB7JgzVE7SQ3vZl82wHzSCSA7ImsgpQdKMqsUsI3wP LLuw+J6NMw/zQfbQH5bEyvgevixDfKxxOsQVriP+lLymqmS6UoLd0z9SPCoDx2/S lU2oR1iXblZUUlkUXWyCeft7ycCh/siLKf9RszdC7DjKGnp/OrwCtZGTC21LOW2B SjQ9t8vZlquFk+AORvT9XN0Xyy/L4DE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:52:44 2025 by rpki-client