$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa File: 0409d953-fb93-3031-9957-e0cd196421fa.roa (raw, json) Hash identifier: gR+92rRaUMHny1jaQUs/x8c0V4B0Q/GTv+4U8o35j1U= Subject key identifier: 4D:9B:98:50:1F:2C:56:45:A3:1F:6B:9B:3D:A5:CB:E8:58:F8:E2:D5 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F43285848F92692897D98C5C548A53880 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 159.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:92:89:7d:98:c5:c5:48:a5:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=8972dd01-e0c1-49b8-8d8b-beaeb931f042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:fb:2d:09:49:c5:54:d4:84:21:6a:e5:26: ad:5a:8d:e0:e1:aa:d5:82:68:89:4a:5f:e7:b1:8c: a9:9d:bd:99:c7:e5:b9:bd:03:9a:a5:11:b6:d7:f9: aa:38:f4:36:10:e8:8c:24:f8:c5:8c:ac:d2:77:85: c7:9a:22:1e:8e:fd:c0:28:b3:0d:9a:77:e9:fd:ad: 9f:d7:68:ab:2c:72:ba:8f:9b:37:40:63:0d:83:64: de:0c:2a:20:40:21:79:29:69:1a:0f:9a:df:44:9b: 9f:20:a0:2b:89:99:2a:87:31:6e:98:20:e3:90:ab: d6:f4:aa:29:ce:fb:23:e8:3b:23:b5:bb:9e:78:c7: f4:dd:09:8a:1f:58:55:5a:c6:bc:86:93:ac:61:56: b9:98:82:c6:3a:e9:4a:b8:d2:1d:0d:41:82:91:bd: d6:12:04:f6:2a:8f:31:1c:38:d9:b1:80:34:8b:1c: 49:0d:83:a6:15:8b:c8:68:83:57:3a:94:3e:6a:97: 36:69:d8:cc:eb:f8:4e:d2:a3:ba:cf:30:7e:37:b7: 1f:f4:f9:92:31:78:54:ef:bf:59:65:6f:8e:99:09: ec:f5:2b:e9:ef:40:86:b7:9d:dc:23:f3:2b:f3:38: 02:72:8a:e2:92:2d:19:de:c0:15:29:82:ce:6d:e5: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9B:98:50:1F:2C:56:45:A3:1F:6B:9B:3D:A5:CB:E8:58:F8:E2:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:35:57:d8:54:b1:a4:ef:60:4e:44:0a:fa:b1:63:62:a7:a2: a0:c3:31:26:ac:ae:fd:6f:3d:5b:79:15:41:63:d7:19:23:58: 25:e8:c8:d1:81:70:d0:06:56:36:eb:be:f0:d0:98:0f:11:2b: 43:d9:f4:06:ff:08:36:b2:0d:9d:28:0d:53:cc:ee:a7:6a:00: 75:cf:79:93:0f:78:00:0a:39:82:f8:c8:24:74:8c:08:4c:a1: 6c:22:22:02:84:31:ed:c9:c2:7a:9c:0a:a5:7d:fd:0b:42:e7: 0c:1d:df:15:14:12:93:a2:68:c0:be:70:f1:49:05:76:c0:d5: fd:bd:a0:9f:a9:05:aa:e2:34:98:35:46:f4:76:f7:fd:fd:d3: 7e:92:f9:f3:db:53:94:51:6d:76:08:c5:9e:c7:1d:20:e6:95: 1c:6b:54:7d:8b:34:b1:82:63:d5:b0:21:fe:f4:c8:39:0d:5a: 0f:33:56:13:db:71:1a:b3:2f:11:b3:c4:70:c2:32:c4:18:3d: 03:1f:f1:9c:f9:02:34:22:29:89:90:80:32:9d:b4:e5:a6:54: 46:ff:a7:9d:c4:97:56:39:95:2a:c6:f0:4f:44:b1:b8:db:87: a5:93:c1:c1:c9:db:55:24:72:69:25:75:bf:51:35:05:9a:e5: 6a:29:41:f3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj5JpKJfZjFxUilOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ODk3MmRkMDEtZTBjMS00OWI4LThkOGItYmVhZWI5MzFmMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWT7LQlJxVTUhCFq5SatWo3g4arVgmiJSl/n sYypnb2Zx+W5vQOapRG21/mqOPQ2EOiMJPjFjKzSd4XHmiIejv3AKLMNmnfp/a2f 12irLHK6j5s3QGMNg2TeDCogQCF5KWkaD5rfRJufIKAriZkqhzFumCDjkKvW9Kop zvsj6DsjtbueeMf03QmKH1hVWsa8hpOsYVa5mILGOulKuNIdDUGCkb3WEgT2Ko8x HDjZsYA0ixxJDYOmFYvIaINXOpQ+apc2adjM6/hO0qO6zzB+N7cf9PmSMXhU779Z ZW+OmQns9Svp70CGt53cI/Mr8zgCcoriki0Z3sAVKYLObeUXgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE2bmFAfLFZFox9rmz2ly+hY+OLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMDQwOWQ5NTMtZmI5My0z MDMxLTk5NTctZTBjZDE5NjQyMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn48wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEzVX2FSxpO9gTkQK+rFjYqeioMMxJqyu/W89W3kVQWPXGSNYJejI0YFw 0AZWNuu+8NCYDxErQ9n0Bv8INrINnSgNU8zup2oAdc95kw94AAo5gvjIJHSMCEyh bCIiAoQx7cnCepwKpX39C0LnDB3fFRQSk6JowL5w8UkFdsDV/b2gn6kFquI0mDVG 9Hb3/f3TfpL589tTlFFtdgjFnscdIOaVHGtUfYs0sYJj1bAh/vTIOQ1aDzNWE9tx GrMvEbPEcMIyxBg9Ax/xnPkCNCIpiZCAMp205aZURv+nncSXVjmVKsbwT0SxuNuH pZPBwcnbVSRyaSV1v1E1BZrlailB8w== -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:07 2025 by rpki-client