$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa File: 4caa9342-737f-3da7-a847-9c004e5815b3.roa (raw, json) Hash identifier: ojAYdLaNPe3zcEFsNuDESPzYSdzRLcy9MXrIivKl41Y= Subject key identifier: 8B:39:6E:9E:3A:77:84:81:2F:8B:A5:1C:B9:62:4A:BD:AF:D3:8E:46 Certificate issuer: /CN=85befeae-24b8-4c74-a4dc-19e1382944ad Certificate serial: 010D0C9F432858499F249598E41AFC04A53ED180 Authority key identifier: C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 156.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:95:98:e4:1a:fc:04:a5:3e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85befeae-24b8-4c74-a4dc-19e1382944ad Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=f19b553d-09f0-437f-aaaf-f0cf681d3e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:58:c0:e4:c3:d4:3a:04:39:87:8d:18:1f:65: 38:83:9c:b3:02:f6:90:87:22:a4:18:ea:e7:45:ae: 92:6c:2e:17:0c:70:ee:81:ef:a4:2e:7d:f1:c5:71: 75:c6:43:c8:42:c5:68:06:da:b9:c3:ad:5b:ad:a0: 70:b4:2e:c1:48:ff:6e:75:1f:79:06:d1:a3:c9:c6: c2:89:8b:29:25:c7:de:6b:af:d7:df:89:0f:31:68: 94:f4:59:48:e7:91:a3:8f:bc:45:8d:75:8f:f4:7b: 41:1d:48:7b:d6:05:01:c0:f2:b0:5a:0f:27:c6:bd: 38:c5:7d:3c:5c:eb:49:77:c6:04:22:34:fc:9f:0e: 61:0d:31:ab:33:fa:f7:90:d3:05:13:fa:70:f2:a0: 3a:07:dd:50:1a:be:8a:48:6d:c5:57:c1:8f:c9:23: 75:ba:fb:e4:19:6e:34:03:51:4c:a7:48:c6:51:28: 0b:c0:9e:1c:26:56:c4:e3:02:8f:ad:7f:10:bc:1a: 39:5f:ff:8f:55:7f:e5:24:77:0a:ed:9c:d3:23:3e: c8:59:67:60:c2:ac:09:73:c4:e9:89:33:74:a9:6d: 11:8e:f9:cb:61:e9:31:9f:68:9e:04:06:50:ef:74: 52:a4:bd:05:b9:4e:8d:d5:9b:9b:12:ba:5b:c9:bc: 3e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:39:6E:9E:3A:77:84:81:2F:8B:A5:1C:B9:62:4A:BD:AF:D3:8E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl X509v3 Authority Key Identifier: keyid:C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer sbgp-ipAddrBlock: critical IPv4: 156.154.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4f:d5:28:4a:c0:8c:8f:63:6b:f2:eb:a7:cf:55:70:c5:49: 40:45:ed:50:79:5c:e9:98:e5:fa:c4:1b:06:ae:aa:e2:02:65: ad:67:27:c6:8b:c0:ae:c9:50:cc:74:67:db:75:bd:77:85:7b: d1:61:33:25:d0:08:fd:b7:2d:0d:65:0e:04:5a:8a:8f:50:71: 7b:36:1e:6d:35:71:15:3f:fe:c2:b7:c0:53:eb:33:11:24:88: c9:58:ec:b6:f8:6e:6b:21:d7:18:79:29:be:0c:1c:3a:2f:56: 42:f3:2a:29:56:6f:3e:6e:86:4f:27:e0:19:f5:eb:6e:11:7d: 34:0b:17:5c:08:d8:40:cc:61:58:3d:df:f2:9e:11:b0:3b:67: f8:c6:79:ef:a6:f6:9d:35:96:fe:f6:b0:54:8c:a4:25:63:db: c1:9a:5e:5b:99:54:2d:4a:fa:2e:b5:21:06:eb:23:0b:21:64: aa:23:4e:44:21:9e:d0:2e:f7:5d:4f:e4:3e:3d:31:f5:e0:c4: a6:6d:91:5b:fa:2e:11:4d:33:48:84:f4:66:f9:48:4b:10:c6: 79:91:a8:62:62:ef:a4:00:61:8e:b6:92:85:ce:7e:df:68:ff: 95:d6:d2:ba:a9:d3:b7:09:0f:41:ad:39:bc:34:74:f6:0a:98: 45:0b:bf:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJWY5Br8BKU+0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZWZlYWUtMjRiOC00Yzc0LWE0ZGMtMTllMTM4Mjk0 NGFkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZjE5YjU1M2QtMDlmMC00MzdmLWFhYWYtZjBjZjY4MWQzZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ljA5MPUOgQ5h40YH2U4g5yzAvaQhyKkGOrn Ra6SbC4XDHDuge+kLn3xxXF1xkPIQsVoBtq5w61braBwtC7BSP9udR95BtGjycbC iYspJcfea6/X34kPMWiU9FlI55Gjj7xFjXWP9HtBHUh71gUBwPKwWg8nxr04xX08 XOtJd8YEIjT8nw5hDTGrM/r3kNMFE/pw8qA6B91QGr6KSG3FV8GPySN1uvvkGW40 A1FMp0jGUSgLwJ4cJlbE4wKPrX8QvBo5X/+PVX/lJHcK7ZzTIz7IWWdgwqwJc8Tp iTN0qW0RjvnLYekxn2ieBAZQ73RSpL0FuU6N1ZubErpbybw+IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs5bp46d4SBL4ulHLliSr2v045GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJl ZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUxMzgyOTQ0YWQvNGNhYTkzNDItNzM3Zi0z ZGE3LWE4NDctOWMwMDRlNTgxNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODViZWZlYWUtMjRiOC00Yzc0LWE0 ZGMtMTllMTM4Mjk0NGFkLzg1YmVmZWFlLTI0YjgtNGM3NC1hNGRjLTE5ZTEzODI5 NDRhZC5jcmwwHwYDVR0jBBgwFoAUwzVtrRq38XwWjDErZQ/V5Z/BvSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJlZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUx MzgyOTQ0YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJoTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJP1ShKwIyPY2vy66fPVXDFSUBF7VB5XOmY5frEGwauquICZa1nJ8aL wK7JUMx0Z9t1vXeFe9FhMyXQCP23LQ1lDgRaio9QcXs2Hm01cRU//sK3wFPrMxEk iMlY7Lb4bmsh1xh5Kb4MHDovVkLzKilWbz5uhk8n4Bn1624RfTQLF1wI2EDMYVg9 3/KeEbA7Z/jGee+m9p01lv72sFSMpCVj28GaXluZVC1K+i61IQbrIwshZKojTkQh ntAu911P5D49MfXgxKZtkVv6LhFNM0iE9Gb5SEsQxnmRqGJi76QAYY62koXOft9o /5XW0rqp07cJD0GtObw0dPYKmEULv6E= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:24 2025 by rpki-client