$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/649e883f-445a-3a11-bd4d-1acad627c507.roa File: 649e883f-445a-3a11-bd4d-1acad627c507.roa (raw, json) Hash identifier: syhv+cmE/NhMOmDTDJQVtLozRvUsK/kjQMeUfjLS8QU= Subject key identifier: 7A:CC:9E:56:9F:F4:74:E6:AD:3B:FB:43:F9:E2:BF:F4:38:01:04:F2 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584976A9954FA05A0795CCE07300 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/649e883f-445a-3a11-bd4d-1acad627c507.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 11377 IP address blocks: 159.183.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:95:4f:a0:5a:07:95:cc:e0:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=8da669a1-845e-479f-bb49-cf2c551ccb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:58:b4:0a:7c:8e:77:1d:79:81:fc:31:4e: 3c:e9:e2:df:84:d9:1a:a9:5c:e3:de:61:f2:a7:d5: bc:29:8e:c9:63:2d:b1:08:74:d6:db:b8:93:b7:f9: 29:fa:34:8f:0d:54:71:e7:d3:9d:e6:89:3b:a0:71: 67:95:85:3e:d7:f0:17:19:a4:0b:c7:dc:8b:7e:c1: 3c:68:7c:20:72:38:79:da:76:52:2b:aa:e9:7f:57: 25:b0:3c:53:a3:71:bc:e5:3b:f0:98:d1:4b:e6:27: 0a:47:dc:f1:7a:b0:92:ef:bd:28:d3:85:a6:14:3c: 0c:ff:39:1d:22:e5:73:32:25:b4:e1:8b:f9:3d:87: bb:c0:86:97:1b:ac:c4:ad:a4:98:35:84:de:4d:a8: 6f:8a:95:8a:be:65:11:11:c0:98:c2:d4:2b:ed:95: db:06:d2:07:bc:5d:cf:12:d8:40:80:5b:fc:f3:9c: 63:83:4d:d8:09:aa:1d:b3:e8:4c:af:3a:c8:8a:a9: ab:db:e9:48:eb:70:67:61:f7:1d:e5:7f:eb:f2:38: 10:77:c6:2d:51:57:f9:cd:a0:fa:fa:de:d3:12:f4: f2:be:3b:52:70:ac:5d:25:78:17:ab:99:11:ab:58: aa:26:ea:4c:8a:39:b9:ff:ec:66:f8:d6:e9:bc:ea: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:9E:56:9F:F4:74:E6:AD:3B:FB:43:F9:E2:BF:F4:38:01:04:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/649e883f-445a-3a11-bd4d-1acad627c507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.183.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7d:d5:20:95:d1:c2:15:d1:89:d1:91:7d:bf:b5:bb:89:a1: 19:2c:a7:8a:7a:17:9c:9c:48:b3:cc:34:f6:c5:77:96:bf:1e: d8:5e:d3:ec:ff:1b:86:9f:35:50:b5:15:75:6e:c2:bf:17:b5: c3:5d:7d:a7:a8:bd:3b:75:37:e7:28:3c:9f:8d:33:10:0d:54: 23:51:25:2b:5a:ad:a5:b2:c4:0c:7e:d4:04:0b:81:5e:5f:13: 24:79:d2:cf:67:e4:7b:16:b0:db:23:6a:d7:10:29:7b:9f:df: bc:d0:79:1e:47:80:04:fc:b7:0b:ee:ee:72:80:86:ca:b8:13: 39:ee:68:1b:93:ef:42:1d:32:73:b8:eb:0b:ce:80:18:26:3c: f5:8e:a3:d0:01:63:39:11:c1:87:46:2f:f1:7a:b0:da:1e:a6: d8:89:74:03:11:7c:4c:b8:47:26:28:cf:20:bb:04:77:88:90: dd:3a:82:0e:1b:e4:9c:ee:c3:fc:0f:f7:c1:e8:b4:84:cd:40: d2:15:fa:e8:9c:a2:2d:d1:e8:1e:73:53:54:ec:71:97:5b:84: c9:e9:7e:e1:5d:87:f9:82:f0:9a:87:49:52:56:91:7f:95:f4: 7f:0a:34:b7:97:89:42:28:61:c8:b7:80:df:ea:9f:9f:be:8a: cf:e0:26:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qZVPoFoHlczgcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk OGRhNjY5YTEtODQ1ZS00NzlmLWJiNDktY2YyYzU1MWNjYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23dYtAp8jncdeYH8MU486eLfhNkaqVzj3mHy p9W8KY7JYy2xCHTW27iTt/kp+jSPDVRx59Od5ok7oHFnlYU+1/AXGaQLx9yLfsE8 aHwgcjh52nZSK6rpf1clsDxTo3G85TvwmNFL5icKR9zxerCS770o04WmFDwM/zkd IuVzMiW04Yv5PYe7wIaXG6zEraSYNYTeTahvipWKvmUREcCYwtQr7ZXbBtIHvF3P EthAgFv885xjg03YCaods+hMrzrIiqmr2+lI63BnYfcd5X/r8jgQd8YtUVf5zaD6 +t7TEvTyvjtScKxdJXgXq5kRq1iqJupMijm5/+xm+NbpvOovpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrMnlaf9HTmrTv7Q/niv/Q4AQTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvNjQ5ZTg4M2YtNDQ1YS0z YTExLWJkNGQtMWFjYWQ2MjdjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7cnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ91SCV0cIV0YnRkX2/tbuJoRksp4p6F5ycSLPMNPbFd5a/Hthe0+z/ G4afNVC1FXVuwr8XtcNdfaeovTt1N+coPJ+NMxANVCNRJStaraWyxAx+1AQLgV5f EyR50s9n5HsWsNsjatcQKXuf37zQeR5HgAT8twvu7nKAhsq4EznuaBuT70IdMnO4 6wvOgBgmPPWOo9ABYzkRwYdGL/F6sNoeptiJdAMRfEy4RyYozyC7BHeIkN06gg4b 5Jzuw/wP98HotITNQNIV+uicoi3R6B5zU1TscZdbhMnpfuFdh/mC8JqHSVJWkX+V 9H8KNLeXiUIoYci3gN/qn5++is/gJjc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:34:07 2025 by rpki-client