$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86397c2-3a3d-3be7-959b-d25121926382.roa File: a86397c2-3a3d-3be7-959b-d25121926382.roa (raw, json) Hash identifier: gzgXvfjny5jNPdrVtHlLMp8uYgxmoc5fm1Do6oi0j98= Subject key identifier: 40:7D:6F:5F:4A:9B:61:2D:B0:97:93:C2:37:87:D0:77:89:10:F3:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD05C75A1527F4E30472A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86397c2-3a3d-3be7-959b-d25121926382.roa Signing time: Thu 24 Apr 2025 11:52:04 +0000 ROA not before: Thu 24 Apr 2025 11:52:04 +0000 ROA not after: Wed 23 Jul 2025 11:52:04 +0000 asID: 19905 IP address blocks: 150.195.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:05:c7:5a:15:27:f4:e3:04:72:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:52:04 2025 GMT Not After : Jul 23 11:52:04 2025 GMT Subject: CN=52f92589-f1e2-4df5-9e5b-ddacd787cf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1f:a4:c7:3f:ef:66:cb:fc:c1:b7:39:58:9b: ef:59:51:ce:b9:51:12:89:80:96:82:97:00:76:7e: c8:f5:0e:cf:49:66:ae:87:48:7d:1c:03:91:2f:65: e7:1a:33:3c:0e:bb:b0:12:52:53:b7:91:d0:59:e7: 6c:6c:d6:4e:e3:0a:5c:a4:ea:7b:e0:b1:09:a9:41: a5:09:bf:50:1f:22:84:1e:70:10:e8:f5:90:ac:17: 75:a8:b6:d1:a8:47:72:30:fb:27:80:5f:a2:4c:38: d4:eb:c7:a2:64:93:a7:9a:2f:d7:3e:36:c6:70:85: a8:98:c8:f2:f9:cf:69:2d:ad:69:95:f3:6e:19:b7: 41:64:88:28:c4:c2:11:36:c7:22:04:e6:ee:c1:a8: 03:1d:c4:70:42:cf:ef:2d:ea:69:7d:52:45:d0:a5: 1f:7a:26:67:05:1b:60:cf:d0:08:b3:4e:ab:dc:61: 6f:c8:a8:5f:70:50:3c:9f:ad:a0:70:2e:de:5a:f4: 2e:0a:60:dd:f2:e2:67:af:1f:18:94:32:10:c0:88: 36:8d:4d:13:f2:1a:97:e7:cd:23:3a:cd:9e:e4:45: 7a:2a:63:2a:7f:15:b4:5d:e8:97:af:ca:ca:17:4c: e9:74:c5:d8:23:06:44:7d:3f:f1:46:55:60:db:7c: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7D:6F:5F:4A:9B:61:2D:B0:97:93:C2:37:87:D0:77:89:10:F3:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86397c2-3a3d-3be7-959b-d25121926382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e5:bd:3d:a8:26:7f:5c:48:b4:e4:cb:4b:48:9b:94:27:4c: 35:c4:82:8a:59:4c:11:49:f2:4c:07:ce:b0:f5:f6:2d:c5:03: 9a:25:2d:e4:a0:58:78:8f:40:1d:43:f7:84:77:e0:92:75:a6: a5:a6:b4:6e:4c:4c:bb:e3:df:23:f2:22:16:e2:19:21:da:b8: 03:4c:46:a0:c9:fe:4b:06:0e:55:c4:5e:d8:7a:b3:c8:77:e9: b9:ab:b3:38:34:d3:11:72:11:b8:3c:33:4d:d4:fe:20:7e:a9: b3:1a:7a:bd:2f:e8:0d:c9:f5:be:0e:19:d8:13:f3:69:91:2f: c5:9e:8e:a4:ec:84:da:c3:ff:54:31:e1:75:83:46:67:4e:13: 3b:81:82:02:69:c5:42:3a:ab:17:e9:59:59:0f:90:80:a0:19: 15:df:2d:dc:e7:3e:d4:8d:4a:82:85:47:58:86:59:53:d1:b6: 66:05:4b:1c:38:ba:6b:80:90:a1:e9:d5:b9:4e:e7:3c:74:24: 35:75:4b:50:41:e5:69:98:1d:e5:7c:8e:7e:24:49:e0:47:f1: 2f:e5:8d:02:d7:d8:7f:ad:42:85:92:25:4d:98:e0:eb:aa:3e: 97:66:5c:33:23:7e:19:ee:47:d7:e7:c3:12:45:a3:f5:f5:3d: 80:16:52:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzQXHWhUn9OMEcqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTIwNFoXDTI1MDcyMzExNTIwNFowLzEtMCsGA1UEAxMk NTJmOTI1ODktZjFlMi00ZGY1LTllNWItZGRhY2Q3ODdjZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh+kxz/vZsv8wbc5WJvvWVHOuVESiYCWgpcA dn7I9Q7PSWauh0h9HAORL2XnGjM8DruwElJTt5HQWedsbNZO4wpcpOp74LEJqUGl Cb9QHyKEHnAQ6PWQrBd1qLbRqEdyMPsngF+iTDjU68eiZJOnmi/XPjbGcIWomMjy +c9pLa1plfNuGbdBZIgoxMIRNsciBObuwagDHcRwQs/vLeppfVJF0KUfeiZnBRtg z9AIs06r3GFvyKhfcFA8n62gcC7eWvQuCmDd8uJnrx8YlDIQwIg2jU0T8hqX580j Os2e5EV6KmMqfxW0XeiXr8rKF0zpdMXYIwZEfT/xRlVg23xb2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB9b19Km2EtsJeTwjeH0HeJEPOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTg2Mzk3YzItM2EzZC0z YmU3LTk1OWItZDI1MTIxOTI2MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDlvT2oJn9cSLTky0tIm5QnTDXEgopZTBFJ8kwHzrD19i3FA5olLeSg WHiPQB1D94R34JJ1pqWmtG5MTLvj3yPyIhbiGSHauANMRqDJ/ksGDlXEXth6s8h3 6bmrszg00xFyEbg8M03U/iB+qbMaer0v6A3J9b4OGdgT82mRL8WejqTshNrD/1Qx 4XWDRmdOEzuBggJpxUI6qxfpWVkPkICgGRXfLdznPtSNSoKFR1iGWVPRtmYFSxw4 umuAkKHp1blO5zx0JDV1S1BB5WmYHeV8jn4kSeBH8S/ljQLX2H+tQoWSJU2Y4Ouq PpdmXDMjfhnuR9fnwxJFo/X1PYAWUvQ= -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:08 2025 by rpki-client