$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa File: c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa (raw, json) Hash identifier: pa5iiwyk98UUdmxU/TuDpsxfoBjkEis5YlP8DzNBgcQ= Subject key identifier: 03:A4:EB:FD:E7:04:D5:7A:71:15:52:BB:84:00:D1:3B:47:5E:71:38 Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d Certificate serial: 010D0C9F432858498769AFA3545F26D1EDABE000 Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 11602 IP address blocks: 151.159.0.0/17 maxlen: 24 151.159.128.0/18 maxlen: 24 151.159.192.0/20 maxlen: 24 151.159.208.0/21 maxlen: 24 151.159.216.0/22 maxlen: 24 151.159.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:af:a3:54:5f:26:d1:ed:ab:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=661c0747-b2b2-4c48-bcab-d076ab522851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:10:6f:b5:a8:57:3c:98:42:ac:4a:8e:2d:b8: 17:f9:6c:8a:13:ef:0e:fb:c8:ab:d3:93:d6:ca:d9: c2:93:41:5a:46:dc:b2:b2:1c:cc:fa:0e:3c:86:df: 99:65:27:b7:61:7a:fe:2d:31:51:25:8d:54:2a:0b: ef:ac:4a:ba:13:89:71:df:99:fc:df:52:26:7f:66: fc:9f:cc:99:e4:d8:73:fa:18:68:f6:fb:4b:61:49: 32:e4:f6:8e:c3:d4:f5:09:b3:0c:56:d4:6c:98:76: a6:74:f0:c7:18:01:4d:35:90:d0:ec:8f:8a:b6:d2: f9:2c:1e:dc:08:b8:65:af:ae:3c:7b:1d:92:ad:6b: d1:8c:29:38:84:29:53:c5:ec:d1:3c:90:51:50:ff: 1f:c7:66:5d:9f:7d:56:1f:a7:36:8e:f8:e5:04:81: 96:e1:9e:05:76:c2:1a:56:51:8b:0c:4b:8e:1a:bd: 69:ea:d0:6e:3f:2b:25:94:4d:4e:83:7a:29:aa:90: 23:24:95:61:8f:95:71:8e:2a:ac:4f:6c:cf:50:af: 85:d6:cc:ff:e9:42:7b:84:24:4e:af:ff:54:74:b5: 06:69:12:e4:f5:ef:29:c1:5c:b6:b1:4f:71:97:0e: 03:04:f4:78:c2:3e:cd:12:4d:90:c5:57:14:38:99: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A4:EB:FD:E7:04:D5:7A:71:15:52:BB:84:00:D1:3B:47:5E:71:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl X509v3 Authority Key Identifier: keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer sbgp-ipAddrBlock: critical IPv4: 151.159.0.0-151.159.219.255 151.159.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e1:01:b7:15:2c:12:2c:94:b3:7b:4b:c1:ad:0c:1a:be:95: b2:32:8e:5d:c0:88:d7:29:af:6f:96:a1:7b:d8:2f:db:6e:78: ca:f3:b8:b8:a8:ec:d2:69:3c:62:dd:55:79:b1:64:f1:c6:6e: a8:96:26:4a:81:e3:27:8b:47:a9:01:14:65:30:21:f1:cf:26: 8c:31:b1:ff:a4:77:92:65:71:9f:36:0d:f6:07:9f:68:2b:f1: 12:f3:4a:b7:ba:b2:ff:6e:72:0c:5b:61:53:ea:55:c4:22:2c: d5:fd:b8:dc:dc:13:53:3c:42:e5:36:d9:14:44:af:3f:0d:f9: 8a:c1:c1:d1:13:b0:9f:1c:e2:9e:2c:c1:26:b1:28:6c:a7:7c: 47:a7:8e:c0:09:b1:ef:f9:99:75:2a:61:4d:9f:63:2e:49:ee: 5b:9f:1e:53:3c:ba:20:ad:7f:09:87:af:93:7f:c0:97:31:36: a7:42:4e:30:e8:86:ef:8e:43:59:15:b5:45:03:cb:4c:e8:e4: 2c:43:46:0f:c9:0d:50:c4:61:04:90:6f:2c:38:c2:61:6e:0b: 29:0b:4c:19:ee:bf:63:9d:32:90:29:82:47:69:26:29:43:f0: f8:2c:02:56:cd:99:9f:db:d5:bf:45:23:d4:b3:fd:79:1a:e3: 44:2c:fb:c1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmHaa+jVF8m0e2r4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc2N2RjZWQtNGU4OS00OTY1LWI4ZGUtNTBlNDIxMjAx YjRkMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NjYxYzA3NDctYjJiMi00YzQ4LWJjYWItZDA3NmFiNTIyODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxBvtahXPJhCrEqOLbgX+WyKE+8O+8ir05PW ytnCk0FaRtyyshzM+g48ht+ZZSe3YXr+LTFRJY1UKgvvrEq6E4lx35n831Imf2b8 n8yZ5Nhz+hho9vtLYUky5PaOw9T1CbMMVtRsmHamdPDHGAFNNZDQ7I+KttL5LB7c CLhlr648ex2SrWvRjCk4hClTxezRPJBRUP8fx2Zdn31WH6c2jvjlBIGW4Z4FdsIa VlGLDEuOGr1p6tBuPysllE1Og3opqpAjJJVhj5VxjiqsT2zPUK+F1sz/6UJ7hCRO r/9UdLUGaRLk9e8pwVy2sU9xlw4DBPR4wj7NEk2QxVcUOJnAmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAOk6/3nBNV6cRVSu4QA0TtHXnE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3 ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0MjEyMDFiNGQvYzRmMGU1MzctY2ZkZC0z NDM3LWI1YWQtZjYxM2EyNTliMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc2N2RjZWQtNGU4OS00OTY1LWI4 ZGUtNTBlNDIxMjAxYjRkLzM3NjdkY2VkLTRlODktNDk2NS1iOGRlLTUwZTQyMTIw MWI0ZC5jcmwwHwYDVR0jBBgwFoAUSSpaeqWs/SJY9eRGkJ0Fcu2mgMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0 MjEyMDFiNGQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwCXnwME Apef2AMEBJef8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCN4QG3FSwSLJSze0vBrQwavpWyMo5dwIjXKa9v lqF72C/bbnjK87i4qOzSaTxi3VV5sWTxxm6oliZKgeMni0epARRlMCHxzyaMMbH/ pHeSZXGfNg32B59oK/ES80q3urL/bnIMW2FT6lXEIizV/bjc3BNTPELlNtkURK8/ DfmKwcHRE7CfHOKeLMEmsShsp3xHp47ACbHv+Zl1KmFNn2MuSe5bnx5TPLogrX8J h6+Tf8CXMTanQk4w6IbvjkNZFbVFA8tM6OQsQ0YPyQ1QxGEEkG8sOMJhbgspC0wZ 7r9jnTKQKYJHaSYpQ/D4LAJWzZmf29W/RSPUs/15GuNELPvB -----END CERTIFICATE-----Generated at Sun Apr 27 16:05:39 2025 by rpki-client