$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f56c2de-4987-3959-8300-8633befcfe08.roa File: 9f56c2de-4987-3959-8300-8633befcfe08.roa (raw, json) Hash identifier: REZv6tZanCm95cFE4WYj+o44QB+HEjxrCEXEFdpJGQ0= Subject key identifier: 6F:B0:3C:C0:0E:70:39:B5:26:59:B1:BD:51:7D:40:3B:BB:91:6B:0F Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F432858498769AFB38F029CB9188B27C8 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f56c2de-4987-3959-8300-8633befcfe08.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 11377 IP address blocks: 159.183.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:af:b3:8f:02:9c:b9:18:8b:27:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=be8b621e-7f5e-4db7-bd58-706a5f31f26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:a4:2d:da:ac:88:16:9d:b4:2c:90:7d:71: e8:5b:62:e0:81:0b:a6:d1:3f:75:16:da:9f:84:73: 9f:05:1a:90:06:8e:3b:be:5c:f4:94:d1:1d:0f:2c: c8:a3:07:32:5f:0f:b2:7c:72:59:5e:79:05:63:1b: bc:14:4a:9f:25:6f:3f:53:96:b2:d0:b2:49:95:35: ec:a5:6b:b5:6f:b9:de:72:60:0f:7c:c4:7f:13:db: 45:64:3f:27:36:04:6d:99:1f:61:3d:63:98:74:c0: fd:05:61:18:24:67:24:22:4e:ce:1f:f8:8d:31:f8: 9d:c0:0e:8a:ca:d7:57:f5:35:63:07:1f:9f:3b:13: aa:06:dd:22:a0:05:17:a5:9f:9a:40:dc:6f:75:ff: f5:8d:b3:42:0b:e3:23:91:73:93:34:d4:b5:ee:fc: 4f:01:87:78:fe:6b:cd:ce:a7:d0:4d:ef:b0:d0:59: 22:be:e9:68:50:3f:35:a9:48:29:14:92:2c:3b:70: 34:ca:b3:e4:21:56:df:de:d6:c1:66:08:3a:2c:d1: b6:97:3a:0d:69:75:d5:36:ff:32:3e:6c:99:d0:00: e2:c0:d7:51:93:af:37:9d:99:f4:34:2a:96:36:ef: b5:e6:39:2b:34:19:a5:36:ea:b1:fa:f2:1a:04:f2: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B0:3C:C0:0E:70:39:B5:26:59:B1:BD:51:7D:40:3B:BB:91:6B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f56c2de-4987-3959-8300-8633befcfe08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.183.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:25:e6:58:3a:b2:04:35:c2:f3:de:6b:a7:d6:af:1e:91:b1: 2f:cc:5b:2f:fb:3a:a9:87:64:ba:6e:93:07:60:06:7b:71:4a: 96:0f:e1:f9:d1:91:e9:c3:fa:1d:69:1f:3a:09:53:33:bb:1d: ca:db:9a:13:09:50:6e:8c:e4:9f:20:ff:1a:90:b4:4b:1a:94: 50:b7:2e:19:da:93:2a:25:2a:28:e0:04:df:90:1a:8a:a7:cc: cb:21:07:b4:a2:9b:91:96:bb:8e:62:26:b7:6f:4c:66:59:dc: e1:ef:0d:ed:85:da:82:d8:42:32:85:0c:0f:a0:7b:d6:54:5a: 26:af:68:90:66:91:ed:9d:c6:ea:f8:ae:00:62:5e:bd:29:82: fe:3e:8f:a3:11:59:6a:ba:09:70:bf:54:40:a8:b6:37:4e:ce: 91:98:12:02:41:b2:d2:18:c7:14:ed:d4:e3:ac:e7:95:76:e0: 1f:98:f3:f7:cd:d2:fb:e5:61:81:b3:23:d3:70:d8:71:57:9f: 49:39:e9:1c:7f:e2:6b:6e:e3:fb:1e:44:f5:1c:cd:1e:6b:53: db:36:a3:1f:f6:69:56:13:19:79:a5:1d:3b:73:cb:22:7a:1a: 2d:30:49:87:3e:c6:33:d1:6b:1f:7b:a8:62:8c:09:c3:72:88: d2:24:d3:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaa+zjwKcuRiLJ8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YmU4YjYyMWUtN2Y1ZS00ZGI3LWJkNTgtNzA2YTVmMzFmMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQOkLdqsiBadtCyQfXHoW2LggQum0T91Ftqf hHOfBRqQBo47vlz0lNEdDyzIowcyXw+yfHJZXnkFYxu8FEqfJW8/U5ay0LJJlTXs pWu1b7necmAPfMR/E9tFZD8nNgRtmR9hPWOYdMD9BWEYJGckIk7OH/iNMfidwA6K ytdX9TVjBx+fOxOqBt0ioAUXpZ+aQNxvdf/1jbNCC+MjkXOTNNS17vxPAYd4/mvN zqfQTe+w0FkivuloUD81qUgpFJIsO3A0yrPkIVbf3tbBZgg6LNG2lzoNaXXVNv8y PmyZ0ADiwNdRk683nZn0NCqWNu+15jkrNBmlNuqx+vIaBPJ12wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+wPMAOcDm1JlmxvVF9QDu7kWsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvOWY1NmMyZGUtNDk4Ny0z OTU5LTgzMDAtODYzM2JlZmNmZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn7fwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEl5lg6sgQ1wvPea6fWrx6RsS/MWy/7OqmHZLpukwdgBntxSpYP4fnR kenD+h1pHzoJUzO7HcrbmhMJUG6M5J8g/xqQtEsalFC3LhnakyolKijgBN+QGoqn zMshB7Sim5GWu45iJrdvTGZZ3OHvDe2F2oLYQjKFDA+ge9ZUWiavaJBmke2dxur4 rgBiXr0pgv4+j6MRWWq6CXC/VECotjdOzpGYEgJBstIYxxTt1OOs55V24B+Y8/fN 0vvlYYGzI9Nw2HFXn0k56Rx/4mtu4/seRPUczR5rU9s2ox/2aVYTGXmlHTtzyyJ6 Gi0wSYc+xjPRax97qGKMCcNyiNIk08A= -----END CERTIFICATE-----Generated at Tue Apr 29 10:54:31 2025 by rpki-client