$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/afd3eb64-d223-32a2-ae6d-c697fb9eb71a.roa File: afd3eb64-d223-32a2-ae6d-c697fb9eb71a.roa (raw, json) Hash identifier: 4QwEAJiZQyZLonhjfnDfOPAQNvGQ7bFCEYf1ewSxj+c= Subject key identifier: E8:08:EA:5A:63:3C:91:82:81:5D:B2:AE:B6:08:F6:14:69:A8:F6:F3 Certificate issuer: /CN=ab991ee4-f5ad-4c54-a01e-156f24bac9fb Certificate serial: 010D0C9F432858498769A8FE32389997AA829FC0 Authority key identifier: E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/afd3eb64-d223-32a2-ae6d-c697fb9eb71a.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 7018 IP address blocks: 156.2.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a8:fe:32:38:99:97:aa:82:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab991ee4-f5ad-4c54-a01e-156f24bac9fb Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=5d3a1887-e62c-46b6-88dc-f495886716bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9c:56:bd:a4:37:1d:d0:88:8c:b7:5a:77:d6: 5d:43:d3:6f:e3:38:1f:15:c2:b2:d3:e0:db:42:80: be:06:71:7f:67:4c:f8:8a:6e:6d:80:37:44:d6:a9: bc:68:95:31:d4:fc:1c:66:65:ec:3c:3e:f9:08:b2: a4:1c:96:c4:ec:1a:ed:8a:1b:07:92:cc:82:92:54: 28:66:d4:39:5a:b6:5c:6e:50:41:5b:81:b5:ed:75: 70:c0:9f:bb:e6:23:82:e7:37:32:64:da:6c:b1:37: e0:81:26:32:89:84:96:05:aa:cb:48:4d:16:74:63: 89:93:27:d7:52:a3:09:3d:50:ba:9a:f7:2b:34:83: 29:60:af:7c:d8:68:93:e7:1a:bd:e3:2f:7a:5d:59: 57:ec:e5:40:1a:a6:9f:3c:72:18:70:04:88:48:9a: 80:ae:fb:73:14:3e:6a:26:47:06:98:3c:81:14:63: 34:3b:69:3f:19:ee:ee:9c:86:cd:43:1a:25:1c:e7: a0:b3:46:3e:2e:23:06:78:0a:b0:d2:a2:4c:22:79: 1b:f7:55:fb:2b:88:2c:5c:07:bd:1a:9c:5d:61:c6: 9c:7f:91:0e:16:6d:3a:98:52:1e:3a:5f:9e:3a:0c: 0a:1b:2a:52:24:db:13:fb:74:35:7c:3a:06:ce:b7: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:08:EA:5A:63:3C:91:82:81:5D:B2:AE:B6:08:F6:14:69:A8:F6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/afd3eb64-d223-32a2-ae6d-c697fb9eb71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.crl X509v3 Authority Key Identifier: keyid:E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer sbgp-ipAddrBlock: critical IPv4: 156.2.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:67:16:64:61:b3:ab:aa:78:e1:c0:6e:4f:56:ab:89:13:3c: c3:bb:f4:3b:c6:76:08:3a:39:4a:f5:15:a9:17:34:7b:83:6e: e4:9b:3e:bf:16:5f:4a:4a:29:16:18:d0:01:6c:7d:64:56:a3: 9c:3b:49:3f:7b:e9:bd:a1:40:0c:a8:ec:7d:75:bd:f2:3e:92: d0:95:a7:c2:c6:4b:b3:6c:6b:f1:0f:72:4c:1e:03:5c:b3:18: 54:58:1e:45:f5:cb:74:2b:5c:98:06:40:a9:bb:cc:25:58:a7: 87:9e:43:dd:38:ea:2c:0e:7d:0f:42:55:30:23:33:7c:a0:4e: ee:52:64:fd:6a:9e:60:70:cd:1a:e1:84:03:d3:48:53:b1:53: ec:42:3f:c0:43:25:fd:7e:c4:cf:98:64:ba:da:ea:e4:3c:6e: 8a:f8:d8:6e:59:2e:75:75:27:d8:94:90:10:dc:a4:a3:60:79: cb:4e:3d:95:8f:1e:e8:1c:ac:8a:7d:d0:39:73:9f:c8:82:bf: 08:3e:f6:b3:b4:33:b7:87:dd:3e:f1:9a:d3:a9:17:58:1c:f1: 4f:6a:a9:0a:7a:ae:5c:ac:da:67:e1:2c:f9:0b:03:00:9d:60: a4:13:73:eb:42:ff:c2:12:c1:20:9f:06:b0:94:e0:f8:4a:8f: 18:a0:0e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaaj+MjiZl6qCn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5OTFlZTQtZjVhZC00YzU0LWEwMWUtMTU2ZjI0YmFj OWZiMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NWQzYTE4ODctZTYyYy00NmI2LTg4ZGMtZjQ5NTg4NjcxNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJxWvaQ3HdCIjLdad9ZdQ9Nv4zgfFcKy0+Db QoC+BnF/Z0z4im5tgDdE1qm8aJUx1PwcZmXsPD75CLKkHJbE7BrtihsHksyCklQo ZtQ5WrZcblBBW4G17XVwwJ+75iOC5zcyZNpssTfggSYyiYSWBarLSE0WdGOJkyfX UqMJPVC6mvcrNIMpYK982GiT5xq94y96XVlX7OVAGqafPHIYcASISJqArvtzFD5q JkcGmDyBFGM0O2k/Ge7unIbNQxolHOegs0Y+LiMGeAqw0qJMInkb91X7K4gsXAe9 GpxdYcacf5EOFm06mFIeOl+eOgwKGypSJNsT+3Q1fDoGzrcgQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgI6lpjPJGCgV2yrrYI9hRpqPbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjk5 MWVlNC1mNWFkLTRjNTQtYTAxZS0xNTZmMjRiYWM5ZmIvYWZkM2ViNjQtZDIyMy0z MmEyLWFlNmQtYzY5N2ZiOWViNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI5OTFlZTQtZjVhZC00YzU0LWEw MWUtMTU2ZjI0YmFjOWZiL2FiOTkxZWU0LWY1YWQtNGM1NC1hMDFlLTE1NmYyNGJh YzlmYi5jcmwwHwYDVR0jBBgwFoAU5A3+z7gBdoBBtQIsAcwDE78AKlcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjk5MWVlNC1mNWFkLTRjNTQtYTAxZS0xNTZm MjRiYWM5ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnAKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBnFmRhs6uqeOHAbk9Wq4kTPMO79DvGdgg6OUr1FakXNHuDbuSbPr8W X0pKKRYY0AFsfWRWo5w7ST976b2hQAyo7H11vfI+ktCVp8LGS7Nsa/EPckweA1yz GFRYHkX1y3QrXJgGQKm7zCVYp4eeQ9046iwOfQ9CVTAjM3ygTu5SZP1qnmBwzRrh hAPTSFOxU+xCP8BDJf1+xM+YZLra6uQ8bor42G5ZLnV1J9iUkBDcpKNgectOPZWP HugcrIp90Dlzn8iCvwg+9rO0M7eH3T7xmtOpF1gc8U9qqQp6rlys2mfhLPkLAwCd YKQTc+tC/8ISwSCfBrCU4PhKjxigDrc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:09 2025 by rpki-client