$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa File: f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa (raw, json) Hash identifier: PvNFdLC853QKT57UXsLbEep/6zddDDFiPALqs8Pf1ZE= Subject key identifier: D1:10:52:68:11:8B:0C:43:72:B2:33:A4:11:CE:A3:B4:82:73:42:54 Certificate issuer: /CN=22f50b3c-0004-4753-bb50-b088e784de4e Certificate serial: 010D0C9F43285848F4F69A59C07C9C3120B9D400 Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 14618 IP address blocks: 158.51.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9a:59:c0:7c:9c:31:20:b9:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=205fde10-ed4f-4233-a43e-166b2b5f940b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:8a:73:7c:c0:f9:24:ac:1c:ba:e1:77:84: fa:3e:67:85:19:6a:32:9e:f6:5d:ec:d7:02:6f:84: a7:b7:b3:a4:0a:bb:79:94:76:85:ba:e7:da:a5:c0: de:11:f1:d7:d3:c2:ee:53:0f:cc:e6:4d:70:ed:d8: ed:84:53:87:2a:64:79:45:78:69:70:2e:e3:6f:16: 26:c7:37:dd:b9:36:7a:12:34:4a:89:46:21:83:b6: 33:f5:a8:c0:8d:2c:0b:aa:c1:ac:5f:f4:5c:06:d9: 0a:eb:af:04:2e:5a:72:20:a7:1f:d4:d6:2e:fb:cf: 3c:3f:2a:0a:38:4b:b4:1b:8c:cd:c7:38:f7:a3:da: aa:3b:75:5a:aa:ae:b1:fd:f9:b1:45:4b:b0:ac:ac: e3:68:c4:5d:84:71:c9:ee:8a:14:fd:96:d1:8e:62: e8:9e:c6:00:20:cf:43:37:55:83:cc:b7:5e:e3:9f: d7:96:26:56:3d:0b:6d:20:77:64:ee:57:55:ff:de: 88:c7:d4:7d:2a:40:3a:0d:8d:38:29:83:a1:3b:67: 3a:48:91:65:cf:b4:d2:c7:8a:36:f5:04:ce:3f:09: 1f:28:91:41:62:78:2b:c3:85:02:62:9b:ec:1a:59: 6a:fb:e4:5c:45:1a:df:74:b9:2b:25:aa:55:b4:dd: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:10:52:68:11:8B:0C:43:72:B2:33:A4:11:CE:A3:B4:82:73:42:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl X509v3 Authority Key Identifier: keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer sbgp-ipAddrBlock: critical IPv4: 158.51.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:35:33:34:a5:20:5f:b7:44:60:ae:07:19:57:60:97:05:c3: 09:e3:87:ad:dd:50:5a:81:2d:4a:0d:f6:b9:01:cc:a0:47:c7: 99:33:7f:ca:d4:18:59:08:e3:a5:5e:f9:89:24:db:a8:4a:5a: cb:2c:44:fd:08:60:3d:f2:a3:0e:c4:bd:09:63:c7:4c:7d:6f: ed:26:7e:3d:2c:2e:76:02:8e:71:e0:46:1a:e1:8d:78:69:79: 2f:2e:35:e5:6c:33:cc:d6:a3:a2:f3:ff:bb:99:08:c8:56:eb: ea:d3:ec:ca:26:92:5a:5a:13:5f:e7:d2:4e:95:df:f5:c8:de: dc:bd:4a:86:73:b6:88:df:73:89:45:d4:ea:a8:f7:cc:91:f4: e2:c1:3f:ab:a5:a4:34:a1:8b:fe:a0:d3:64:dd:62:82:29:73: 8f:43:7f:6c:93:2b:b7:45:d9:8e:41:d9:e2:77:54:27:84:a6: 5a:dc:1a:74:93:2a:bb:2c:c0:f4:cd:19:3c:fb:11:19:de:12: 6b:d8:0d:6f:e8:3d:af:40:95:7c:2c:ae:11:33:77:02:b1:5f: 95:77:28:5b:1c:61:1f:95:0c:36:4a:08:81:d0:85:79:3e:2a: cf:bd:1e:a4:47:0a:dd:88:a4:65:25:f1:a4:c9:da:fe:c1:48: ec:86:eb:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09ppZwHycMSC51AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmNTBiM2MtMDAwNC00NzUzLWJiNTAtYjA4OGU3ODRk ZTRlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjA1ZmRlMTAtZWQ0Zi00MjMzLWE0M2UtMTY2YjJiNWY5NDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaWKc3zA+SSsHLrhd4T6PmeFGWoynvZd7NcC b4Snt7OkCrt5lHaFuufapcDeEfHX08LuUw/M5k1w7djthFOHKmR5RXhpcC7jbxYm xzfduTZ6EjRKiUYhg7Yz9ajAjSwLqsGsX/RcBtkK668ELlpyIKcf1NYu+888PyoK OEu0G4zNxzj3o9qqO3Vaqq6x/fmxRUuwrKzjaMRdhHHJ7ooU/ZbRjmLonsYAIM9D N1WDzLde45/XliZWPQttIHdk7ldV/96Ix9R9KkA6DY04KYOhO2c6SJFlz7TSx4o2 9QTOPwkfKJFBYngrw4UCYpvsGllq++RcRRrfdLkrJapVtN3TlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEQUmgRiwxDcrIzpBHOo7SCc0JUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1 MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4ZTc4NGRlNGUvZjBjZDFmMDItMjg5OS0z YzkxLWI2NTUtMGFhMWExZWRhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJmNTBiM2MtMDAwNC00NzUzLWJi NTAtYjA4OGU3ODRkZTRlLzIyZjUwYjNjLTAwMDQtNDc1My1iYjUwLWIwODhlNzg0 ZGU0ZS5jcmwwHwYDVR0jBBgwFoAU0Z+cLma+QyGVSqqdFPgeY/ROTVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4 ZTc4NGRlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw1MzSlIF+3RGCuBxlXYJcFwwnjh63dUFqBLUoN9rkBzKBHx5kzf8rU GFkI46Ve+Ykk26hKWsssRP0IYD3yow7EvQljx0x9b+0mfj0sLnYCjnHgRhrhjXhp eS8uNeVsM8zWo6Lz/7uZCMhW6+rT7MomklpaE1/n0k6V3/XI3ty9SoZztojfc4lF 1Oqo98yR9OLBP6ulpDShi/6g02TdYoIpc49Df2yTK7dF2Y5B2eJ3VCeEplrcGnST KrsswPTNGTz7ERneEmvYDW/oPa9AlXwsrhEzdwKxX5V3KFscYR+VDDZKCIHQhXk+ Ks+9HqRHCt2IpGUl8aTJ2v7BSOyG62k= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:39 2025 by rpki-client