$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa File: b3556d71-daa7-3542-9d2c-911cecebd485.roa (raw, json) Hash identifier: +XF1j6qtnFKIAMrAcIn9w6FC8kWOCRCt9EXIJFLKNWg= Subject key identifier: C4:21:59:6E:A7:DB:33:A0:DA:27:22:C5:5A:BE:97:FF:D9:BA:DD:79 Certificate issuer: /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b Certificate serial: 010D0C9F43285849998F34AEDC73EADA2111C0A0 Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 0 IP address blocks: 158.247.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:34:ae:dc:73:ea:da:21:11:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=dfab13fb-d0d8-431a-a552-0dad05bf0541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:a2:c9:1f:26:78:51:56:10:98:95:aa:cb: ce:54:55:7c:7b:cd:4f:0b:ff:6a:1a:6e:1c:2e:f6: 8a:de:33:9c:24:00:37:bb:5a:d8:75:4e:13:4a:fe: 08:5e:f5:7f:ef:81:a6:b4:44:d3:d7:2b:a4:d2:0a: aa:76:f4:1b:11:91:1c:ad:4c:31:30:ef:ca:95:93: 27:12:1f:6e:49:ed:56:78:58:68:bc:f9:eb:7a:fc: 15:37:d8:6c:7b:a2:34:e7:96:3a:e7:f6:dd:f3:ff: ce:15:c6:be:6c:b8:c4:13:7d:80:54:80:89:9f:ca: 6a:17:8d:9c:c9:9a:8e:25:56:77:0a:b8:db:e6:17: 2d:ba:1d:05:e1:23:2f:0d:f8:8d:48:ea:77:de:6c: 3a:dc:5c:42:ae:2c:fd:7a:a1:35:a9:91:d9:85:c7: cc:59:02:36:7e:b1:70:f2:99:61:1f:c0:65:5f:7e: 2e:2f:47:e0:9b:21:2b:22:19:1b:09:3b:4e:4b:61: 66:1a:a4:79:f2:5a:dd:ba:cd:97:0b:84:dd:4d:3b: 06:50:8a:46:03:cd:ee:58:9a:ad:07:76:40:e4:6f: 01:c0:31:f7:f6:3e:a2:87:a3:74:cd:1e:bd:8c:40: f9:0e:3d:b3:de:4a:51:bd:3a:b9:75:70:51:a8:2b: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:21:59:6E:A7:DB:33:A0:DA:27:22:C5:5A:BE:97:FF:D9:BA:DD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl X509v3 Authority Key Identifier: keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer sbgp-ipAddrBlock: critical IPv4: 158.247.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b6:f8:7d:6d:9f:da:e5:89:ce:5c:33:41:35:32:0c:25:c4: 00:5b:78:7b:b0:9c:2c:0e:0b:a3:1f:1e:40:1b:31:ab:d1:4d: f5:4b:70:b6:a2:f3:1d:2f:1e:d1:bb:f8:a8:a1:f0:04:87:6b: c1:95:61:52:a5:dc:d8:66:6d:d3:4b:db:a6:7b:2c:57:e7:01: e5:51:bc:5a:78:52:90:c3:c9:f6:53:e1:57:8c:53:21:6a:e9: 8b:f1:28:f0:b3:80:c5:7d:7f:c6:ed:70:9c:a2:50:2d:01:05: be:86:1c:61:d0:aa:b4:58:ef:d9:fa:2c:52:5e:b3:62:9e:45: 07:7e:5b:69:04:05:6e:a9:39:a4:66:c5:17:d9:fe:38:1d:39: ac:ae:14:2b:ab:66:31:b3:b7:04:6d:ad:7b:2e:50:29:16:a5: 20:e5:ee:0a:68:37:55:da:5d:9c:0f:fc:9a:2e:2b:13:45:c7: 83:5a:8e:88:97:1d:1e:a9:52:bc:04:cc:57:16:9c:db:0a:63: 9e:4f:0c:26:58:36:48:86:be:59:93:65:18:b7:ba:b8:ef:9f: bd:f8:e6:c2:fb:0e:13:8d:73:ea:8d:e1:d1:8e:67:f2:e0:ff: 22:69:eb:b8:6f:17:5b:05:19:2a:b1:27:9c:fe:c3:d4:cc:b2: aa:d9:79:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzSu3HPq2iERwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJkYWEyMTctZjAwZi00NmM1LWExMDItZTVmZjJhY2Ix MDViMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk ZGZhYjEzZmItZDBkOC00MzFhLWE1NTItMGRhZDA1YmYwNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonmiyR8meFFWEJiVqsvOVFV8e81PC/9qGm4c LvaK3jOcJAA3u1rYdU4TSv4IXvV/74GmtETT1yuk0gqqdvQbEZEcrUwxMO/KlZMn Eh9uSe1WeFhovPnrevwVN9hse6I055Y65/bd8//OFca+bLjEE32AVICJn8pqF42c yZqOJVZ3Crjb5hctuh0F4SMvDfiNSOp33mw63FxCriz9eqE1qZHZhcfMWQI2frFw 8plhH8BlX34uL0fgmyErIhkbCTtOS2FmGqR58lrdus2XC4TdTTsGUIpGA83uWJqt B3ZA5G8BwDH39j6ih6N0zR69jED5Dj2z3kpRvTq5dXBRqCvGqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQhWW6n2zOg2icixVq+l//Zut15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRh YTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZmMmFjYjEwNWIvYjM1NTZkNzEtZGFhNy0z NTQyLTlkMmMtOTExY2VjZWJkNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmJkYWEyMTctZjAwZi00NmM1LWEx MDItZTVmZjJhY2IxMDViLzJiZGFhMjE3LWYwMGYtNDZjNS1hMTAyLWU1ZmYyYWNi MTA1Yi5jcmwwHwYDVR0jBBgwFoAUwIjTWY7ATOSXd4i3N52Puz3pHqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRhYTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZm MmFjYjEwNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnvcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA62+H1tn9rlic5cM0E1MgwlxABbeHuwnCwOC6MfHkAbMavRTfVLcLai 8x0vHtG7+Kih8ASHa8GVYVKl3NhmbdNL26Z7LFfnAeVRvFp4UpDDyfZT4VeMUyFq 6YvxKPCzgMV9f8btcJyiUC0BBb6GHGHQqrRY79n6LFJes2KeRQd+W2kEBW6pOaRm xRfZ/jgdOayuFCurZjGztwRtrXsuUCkWpSDl7gpoN1XaXZwP/JouKxNFx4NajoiX HR6pUrwEzFcWnNsKY55PDCZYNkiGvlmTZRi3urjvn7345sL7DhONc+qN4dGOZ/Lg /yJp67hvF1sFGSqxJ5z+w9TMsqrZeUY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:19 2025 by rpki-client