$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bd266590-a1cb-38c5-b2dd-3ac211617367.roa File: bd266590-a1cb-38c5-b2dd-3ac211617367.roa (raw, json) Hash identifier: xU+86KxkgRj5J63ZR+DLVLL5HaJeyhc/d+/yE+0bp+U= Subject key identifier: BC:55:95:89:43:3C:A7:1E:A8:B2:DE:B2:7B:1E:D6:BD:52:52:CB:EC Certificate issuer: /CN=b1898100-f40c-4002-b68a-8a97b548e69d Certificate serial: 010D0C9F432858499DBF395794D790630C56BC80 Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bd266590-a1cb-38c5-b2dd-3ac211617367.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 174 IP address blocks: 158.51.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:39:57:94:d7:90:63:0c:56:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=f31b6c9c-f855-4089-91ca-38decac65c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:93:05:72:d7:82:fd:57:2e:70:02:7c:6f: dc:b4:63:82:48:c5:fe:54:bd:82:e0:43:cf:44:dc: a8:84:49:d0:94:b5:89:a5:ab:66:b0:76:d6:b5:73: 01:50:1e:1e:a1:d9:17:56:31:d9:1e:fc:5e:cb:05: f7:49:a0:be:76:75:59:f1:f9:0c:e5:57:92:9e:5f: 40:b9:55:cd:ca:34:e2:2d:05:d0:d2:68:77:b5:37: 22:ec:1d:3c:bf:41:07:18:2a:15:f7:aa:71:d5:4c: 98:1d:82:34:a6:92:68:a9:f2:dc:62:ad:76:1b:77: fb:72:9f:a6:d2:83:06:b2:99:19:64:c9:24:1a:08: 92:15:23:68:db:dc:80:c8:07:2e:df:25:07:c3:95: 7d:5c:72:d9:79:47:98:97:d4:7a:93:b1:c8:7a:16: 60:0a:59:1a:cb:d3:f9:bc:0a:88:d4:cd:b4:7b:5a: c2:e0:74:93:f0:e0:15:e1:b1:ea:a1:16:fa:81:83: 1c:68:c0:7f:47:a0:f0:3f:ae:79:19:e8:b7:b5:11: 11:c2:dd:8f:f9:23:c0:46:91:9b:6f:ac:76:0e:6e: 13:51:35:ac:b9:e9:85:d3:8e:e3:9e:d7:b4:ca:7f: 59:56:61:e0:7c:41:67:36:0b:cb:b6:68:e5:71:c7: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:55:95:89:43:3C:A7:1E:A8:B2:DE:B2:7B:1E:D6:BD:52:52:CB:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bd266590-a1cb-38c5-b2dd-3ac211617367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl X509v3 Authority Key Identifier: keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer sbgp-ipAddrBlock: critical IPv4: 158.51.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f1:e9:32:5b:19:fe:bd:1a:0f:6c:41:23:33:23:0f:51:ee: 22:cd:12:6b:e2:f0:e3:2c:0f:3e:8c:e5:27:9c:ee:d5:b7:65: 3f:43:51:15:40:41:b1:b8:83:9c:a4:9b:1c:24:d2:95:81:af: 31:e8:ba:6f:6b:57:fb:0b:56:8b:65:ba:9a:3a:6c:9f:fb:46: 00:3f:51:79:ab:6f:65:99:fb:79:ac:d2:25:c4:77:71:e8:28: c3:8a:6e:9c:8c:83:02:7a:e7:cf:54:4b:46:4d:bf:2e:01:c0: f8:3c:9f:92:4a:f6:42:2f:6b:f3:88:4a:1f:7d:12:c0:66:37: e5:c8:c6:41:ae:b7:b6:e8:10:68:72:1a:af:9c:19:36:3e:6d: ef:49:81:e5:b4:18:3c:7d:a8:87:ce:5f:aa:fb:7e:87:ba:1c: ab:a3:04:20:b0:a7:a1:b7:0f:60:70:38:e4:20:82:80:cf:88: b7:1f:21:47:67:f7:6d:2b:80:db:4d:b5:49:71:b7:33:0c:50: b4:2b:7c:a3:fb:4c:88:58:83:99:cb:ef:7e:1c:b1:eb:03:c9: 1c:bd:8b:8d:fb:14:d2:d4:4c:4a:19:30:e2:52:27:c7:e7:96: a2:3a:6d:29:c7:e9:0e:62:3e:6b:84:90:42:b4:b9:ca:52:67: 55:9f:5b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzlXlNeQYwxWvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl NjlkMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZjMxYjZjOWMtZjg1NS00MDg5LTkxY2EtMzhkZWNhYzY1Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgSTBXLXgv1XLnACfG/ctGOCSMX+VL2C4EPP RNyohEnQlLWJpatmsHbWtXMBUB4eodkXVjHZHvxeywX3SaC+dnVZ8fkM5VeSnl9A uVXNyjTiLQXQ0mh3tTci7B08v0EHGCoV96px1UyYHYI0ppJoqfLcYq12G3f7cp+m 0oMGspkZZMkkGgiSFSNo29yAyAcu3yUHw5V9XHLZeUeYl9R6k7HIehZgClkay9P5 vAqI1M20e1rC4HST8OAV4bHqoRb6gYMcaMB/R6DwP655Gei3tRERwt2P+SPARpGb b6x2Dm4TUTWsuemF047jnte0yn9ZVmHgfEFnNgvLtmjlccdOewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxVlYlDPKceqLLesnse1r1SUsvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5 ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvYmQyNjY1OTAtYTFjYi0z OGM1LWIyZGQtM2FjMjExNjE3MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2 OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4 ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3 YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7x6TJbGf69Gg9sQSMzIw9R7iLNEmvi8OMsDz6M5Sec7tW3ZT9DURVA QbG4g5ykmxwk0pWBrzHoum9rV/sLVotlupo6bJ/7RgA/UXmrb2WZ+3ms0iXEd3Ho KMOKbpyMgwJ6589US0ZNvy4BwPg8n5JK9kIva/OISh99EsBmN+XIxkGut7boEGhy Gq+cGTY+be9JgeW0GDx9qIfOX6r7foe6HKujBCCwp6G3D2BwOOQggoDPiLcfIUdn 920rgNtNtUlxtzMMULQrfKP7TIhYg5nL734csesDyRy9i437FNLUTEoZMOJSJ8fn lqI6bSnH6Q5iPmuEkEK0ucpSZ1WfW3E= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:39 2025 by rpki-client