$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa File: 0409d953-fb93-3031-9957-e0cd196421fa.roa (raw, json) Hash identifier: tat7jZ9oNBVBGmF1VnNnq84xfRo9GFfhuPM7xiVSBpQ= Subject key identifier: D6:F6:2E:2D:BB:FA:6A:82:B5:2C:0C:FB:3D:9B:BD:B7:FB:3D:EA:9B Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F43285849D85F9EDF1CC1507369BC8340 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 159.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:9e:df:1c:c1:50:73:69:bc:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=355b2f0a-b001-4a8d-9629-3f3b4607f86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:27:af:6f:5f:81:77:23:b7:75:65:a0:22: da:91:d6:72:1c:be:38:5f:8e:9c:c6:e9:22:5a:07: bf:96:92:71:eb:89:df:b9:49:20:92:94:b5:78:02: f9:5c:b9:38:a9:2f:f6:f9:2d:58:73:9b:6c:cb:ad: 4c:20:ef:ba:82:9b:bd:26:59:36:11:f7:30:1d:08: 79:be:b5:0a:78:5c:8e:34:d6:a9:a7:45:73:90:cb: 8f:c6:00:13:a1:07:4d:9c:2e:39:d6:57:b5:0b:e7: f3:48:cd:4b:07:1b:f5:47:81:65:47:98:f4:50:9e: d8:75:37:d4:52:0f:96:a1:f2:e3:54:f4:83:d5:94: 76:81:ac:a9:e4:59:9f:29:dd:91:ed:79:67:2a:5e: 23:6b:4e:11:68:49:b2:8d:1b:ee:37:93:4d:e7:36: 52:7a:5a:46:bb:e9:4a:fa:fa:d7:c2:18:77:fd:63: 15:46:ce:3c:85:40:b5:a8:e9:c1:a2:ab:b1:92:99: 7e:02:e0:64:f7:c7:8e:1e:db:49:6d:ea:10:6e:70: 2f:82:ae:a9:22:2f:4b:ef:29:0e:0e:94:82:58:fb: ca:cb:ac:d8:a8:5c:39:86:7e:d3:04:b5:6c:01:74: 9b:a3:4b:16:d7:3e:f0:c1:3b:b0:34:f1:07:14:84: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F6:2E:2D:BB:FA:6A:82:B5:2C:0C:FB:3D:9B:BD:B7:FB:3D:EA:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:54:98:5c:f3:f8:e6:24:75:c7:6d:97:8f:4a:67:36:7c:ef: ed:6d:9b:02:ce:6c:3b:6d:38:86:88:d8:ac:9e:f6:38:42:a7: 85:3f:c0:1c:b5:0a:96:7d:81:81:af:61:21:56:41:49:36:51: d6:3c:f2:f4:6b:80:b0:46:d9:dd:2a:94:5c:fa:74:b9:dd:72: d7:e0:ab:80:8a:81:23:24:ab:ab:8d:c8:14:18:37:0b:92:b7: 39:9d:5f:04:d8:cd:b7:e7:27:18:35:04:65:eb:20:be:49:39: ea:35:8d:c6:41:08:04:aa:c7:4a:90:91:bd:87:5f:c8:59:02: cf:66:d7:36:ab:c9:86:85:3d:f1:7a:c7:71:8c:3c:06:7c:1a: fd:6a:67:4b:97:4e:0b:93:12:2e:17:aa:b8:0b:8a:5d:2a:70: a9:69:3d:d7:f1:db:71:db:98:ed:2c:c3:57:26:13:84:fb:df: 70:de:cc:dd:9c:cf:8a:44:23:91:4a:f6:8a:d3:0f:1b:90:83: 6d:5f:22:86:77:5a:35:ef:4f:e6:fb:71:42:22:fc:71:cc:59: 4c:9d:e0:f7:2d:73:a3:e8:86:67:ca:d0:09:5b:6b:ca:08:c1: 96:c2:78:f9:98:20:e0:7a:50:a3:47:84:37:2b:c7:9b:ca:2e: 72:99:0c:03 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnYX57fHMFQc2m8g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzU1YjJmMGEtYjAwMS00YThkLTk2MjktM2YzYjQ2MDdmODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif0nr29fgXcjt3VloCLakdZyHL44X46cxuki Wge/lpJx64nfuUkgkpS1eAL5XLk4qS/2+S1Yc5tsy61MIO+6gpu9Jlk2EfcwHQh5 vrUKeFyONNapp0VzkMuPxgAToQdNnC451le1C+fzSM1LBxv1R4FlR5j0UJ7YdTfU Ug+WofLjVPSD1ZR2gayp5FmfKd2R7XlnKl4ja04RaEmyjRvuN5NN5zZSelpGu+lK +vrXwhh3/WMVRs48hUC1qOnBoquxkpl+AuBk98eOHttJbeoQbnAvgq6pIi9L7ykO DpSCWPvKy6zYqFw5hn7TBLVsAXSbo0sW1z7wwTuwNPEHFISL5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNb2Li27+mqCtSwM+z2bvbf7PeqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMDQwOWQ5NTMtZmI5My0z MDMxLTk5NTctZTBjZDE5NjQyMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn48wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUVSYXPP45iR1x22Xj0pnNnzv7W2bAs5sO204hojYrJ72OEKnhT/AHLUK ln2Bga9hIVZBSTZR1jzy9GuAsEbZ3SqUXPp0ud1y1+CrgIqBIySrq43IFBg3C5K3 OZ1fBNjNt+cnGDUEZesgvkk56jWNxkEIBKrHSpCRvYdfyFkCz2bXNqvJhoU98XrH cYw8Bnwa/WpnS5dOC5MSLhequAuKXSpwqWk91/HbcduY7SzDVyYThPvfcN7M3ZzP ikQjkUr2itMPG5CDbV8ihndaNe9P5vtxQiL8ccxZTJ3g9y1zo+iGZ8rQCVtrygjB lsJ4+Zgg4HpQo0eENyvHm8oucpkMAw== -----END CERTIFICATE-----Generated at Tue Jun 17 15:05:11 2025 by rpki-client