$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa File: e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa (raw, json) Hash identifier: Y8LhD4qtiEE1gS5i+gTz8esc1RQdXU1Mj/C82yfV1bw= Subject key identifier: E8:4D:2B:8F:EB:D7:06:2F:83:E0:D9:B0:5E:A9:84:88:5F:4B:E8:54 Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Certificate serial: 010D0C9F43285848E16BD4BAB44019A0F5B43480 Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 62827 IP address blocks: 158.51.232.0/22 maxlen: 22 198.17.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d4:ba:b4:40:19:a0:f5:b4:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=fe750ad6-76d0-4c43-abca-91461158c589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:96:db:63:2a:e8:10:b5:42:4c:0c:88:48: 4e:4a:36:24:e3:b5:0e:9a:b9:ff:bf:c1:c0:e3:a3: 60:94:cf:1d:87:f7:eb:81:65:f5:63:db:9a:10:98: 19:f0:c5:d4:a1:63:82:c5:8e:72:40:6a:0d:33:88: 25:8f:8f:8b:ce:30:21:e4:9e:1a:62:79:7e:0f:c0: 30:f1:d3:04:e2:1e:ef:5d:fc:77:f6:f7:10:a6:6d: db:6b:c4:c5:8f:03:04:b2:3d:04:b4:a4:b5:30:26: 7d:c0:94:0d:bc:d4:8c:67:bc:32:ca:f4:41:dc:c4: c6:a2:e6:f1:3b:06:a7:d8:3e:5a:5a:2b:3c:7b:b7: 04:a9:d2:0b:c0:09:f4:40:ea:53:ad:bf:82:24:da: 06:ac:7a:0e:e1:d1:7f:33:9a:83:bc:e6:b8:6c:88: 6d:f4:da:e8:57:f5:84:0b:c8:39:f6:e5:9a:78:8b: 64:33:b4:67:71:e6:80:8f:35:f9:a7:45:db:f5:5a: 52:d9:94:cb:3f:80:b8:38:2b:93:84:fc:d7:3d:cf: 1c:35:78:c3:aa:a5:aa:2e:c3:cd:88:c1:dd:30:f6: 64:9f:0f:e1:f2:55:54:e6:63:9d:62:4a:a3:53:0c: cb:7c:a1:70:4f:aa:40:59:43:f9:68:e4:02:92:de: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4D:2B:8F:EB:D7:06:2F:83:E0:D9:B0:5E:A9:84:88:5F:4B:E8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl X509v3 Authority Key Identifier: keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer sbgp-ipAddrBlock: critical IPv4: 158.51.232.0/22 198.17.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:86:2d:6b:85:0f:4a:2b:e0:c1:ab:70:0c:2b:b0:a2:e7:c0: 69:a5:3f:99:36:3f:97:bd:c7:a3:bf:0e:91:ae:6f:42:d6:b1: c9:e2:7a:00:01:f5:01:15:84:33:55:d4:5a:e7:d0:9c:b0:1d: 91:aa:9d:19:d2:15:9f:b1:ff:fb:c2:89:4f:9f:16:c9:fe:2e: eb:7f:f4:f1:d0:29:02:6e:0d:d7:42:67:db:fd:ad:b3:c4:c8: db:6f:6c:7f:70:3a:c1:99:64:ad:e4:12:69:d5:93:36:81:d7: 6f:80:89:71:3a:ce:17:20:a6:e2:3c:10:0d:71:6c:2f:c2:d1: 3b:82:da:d8:e3:f0:cf:03:77:b3:6f:2d:4c:c9:4f:0f:0f:09: ec:77:0b:63:09:d2:7d:90:29:7f:72:2c:bd:e6:94:12:da:fc: c7:15:99:36:42:cd:10:ef:4c:5c:c7:8d:2f:7e:f3:33:9e:3b: 12:87:fc:22:96:41:db:4b:ca:26:0e:4c:75:cb:8b:80:ed:c3: b7:30:a3:14:bf:ae:3e:5d:1b:5a:0f:02:4e:3f:9e:21:9e:88: 12:62:ee:d0:34:77:de:62:a3:f3:ff:3a:bc:b0:54:8f:9e:bd: 3c:0b:59:85:de:fb:85:6a:ac:45:e6:ed:0a:cb:7b:b4:62:c7: a7:86:6d:3f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjha9S6tEAZoPW0NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2Fk NGYzMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmU3NTBhZDYtNzZkMC00YzQzLWFiY2EtOTE0NjExNThjNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstqW22Mq6BC1QkwMiEhOSjYk47UOmrn/v8HA 46NglM8dh/frgWX1Y9uaEJgZ8MXUoWOCxY5yQGoNM4glj4+LzjAh5J4aYnl+D8Aw 8dME4h7vXfx39vcQpm3ba8TFjwMEsj0EtKS1MCZ9wJQNvNSMZ7wyyvRB3MTGoubx Owan2D5aWis8e7cEqdILwAn0QOpTrb+CJNoGrHoO4dF/M5qDvOa4bIht9NroV/WE C8g59uWaeItkM7RnceaAjzX5p0Xb9VpS2ZTLP4C4OCuThPzXPc8cNXjDqqWqLsPN iMHdMPZknw/h8lVU5mOdYkqjUwzLfKFwT6pAWUP5aOQCkt4swwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOhNK4/r1wYvg+DZsF6phIhfS+hUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRi YzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvZTU2OThhYjctMmEwZi0z NDk1LThmY2ItYjE2Y2FiZWRjMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjA0YmM3ZmQtNTMzNC00NWVlLTlh NDgtM2ZmYjExN2FkNGYzL2YwNGJjN2ZkLTUzMzQtNDVlZS05YTQ4LTNmZmIxMTdh ZDRmMy5jcmwwHwYDVR0jBBgwFoAUe2AW/SJ5rexO1KDn29yN44VzpwYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZi MTE3YWQ0ZjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCnjPoAwQA xhHTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE+GLWuFD0or4MGrcAwrsKLnwGmlP5k2P5e9x6O/DpGub0LW scniegAB9QEVhDNV1Frn0JywHZGqnRnSFZ+x//vCiU+fFsn+Lut/9PHQKQJuDddC Z9v9rbPEyNtvbH9wOsGZZK3kEmnVkzaB12+AiXE6zhcgpuI8EA1xbC/C0TuC2tjj 8M8Dd7NvLUzJTw8PCex3C2MJ0n2QKX9yLL3mlBLa/McVmTZCzRDvTFzHjS9+8zOe OxKH/CKWQdtLyiYOTHXLi4Dtw7cwoxS/rj5dG1oPAk4/niGeiBJi7tA0d95io/P/ OrywVI+evTwLWYXe+4VqrEXm7QrLe7Rix6eGbT8= -----END CERTIFICATE-----Generated at Mon Apr 28 14:26:08 2025 by rpki-client