$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa File: 2aa91757-41a3-3878-bde1-4f11a5d770af.roa (raw, json) Hash identifier: nG38z80mh+mBhnF1Ja5WabBjdQxQme+IBPNIVXrWsyc= Subject key identifier: 04:BC:88:2A:72:DF:18:8D:AE:0D:E2:7C:27:07:FD:EB:1B:09:FF:88 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285848CDE111F29969C582F6C94880 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 33442 IP address blocks: 157.235.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:11:f2:99:69:c5:82:f6:c9:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=10e81c80-9e58-4108-bd47-17d94a4d38de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:a2:5c:39:eb:b5:89:b7:62:87:ed:2a:e2: 0a:83:cb:44:1b:21:83:b3:d4:d5:3e:06:22:0d:a3: b3:e0:46:17:9d:23:25:66:e0:98:cc:fa:0a:67:d5: d2:87:f5:5b:77:95:cb:c3:3e:74:6b:e7:16:fe:cc: e8:a8:1b:b0:6f:fb:66:c7:10:3e:eb:12:26:02:5a: 47:bb:1b:bf:61:94:67:c8:03:27:cb:cd:e2:f0:4c: 57:0a:91:15:ea:0b:4d:ec:dd:9b:2e:99:9c:46:14: 8a:e1:79:e3:d0:6b:9d:45:14:be:8c:62:f0:e4:9f: 76:87:c4:fd:28:a7:17:8e:7e:da:be:c8:b7:c1:09: ec:70:8d:d1:de:85:c6:82:46:35:46:63:dd:83:2f: 0c:50:7c:46:3b:99:fc:49:23:a7:e9:78:a1:f6:e2: 97:03:16:a8:39:f5:ad:80:05:a1:62:c0:89:ce:27: 35:01:14:f7:f6:03:8a:cd:32:7b:f2:73:cd:d6:d1: f4:bf:8f:89:15:dc:75:f0:15:b1:65:4a:1b:40:2d: 8e:f7:b0:3f:f3:d9:be:c6:2e:b3:61:9c:09:8c:9c: e2:2a:49:9e:d8:01:21:f0:2f:97:d0:04:3a:ca:ab: a4:cd:b5:8f:d2:dd:f1:e7:21:4c:dd:9b:5c:d9:6d: fd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BC:88:2A:72:DF:18:8D:AE:0D:E2:7C:27:07:FD:EB:1B:09:FF:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1b:c8:ab:7e:30:fc:63:dd:b9:79:5f:31:94:1b:d8:39:0e: 9f:3d:a5:5f:7a:4c:a7:79:17:a1:c4:f4:e6:58:57:22:80:5b: e3:58:8f:9c:06:90:fc:03:5f:92:87:44:69:ce:5b:d9:28:8f: 3a:1a:ac:32:91:df:d1:76:99:67:e9:70:ab:c8:38:c2:f4:fd: fc:38:32:8a:c4:46:0d:2c:61:c3:fc:99:82:95:98:9c:aa:25: f7:52:08:f4:f8:ed:de:8b:e9:1a:e9:78:ef:a9:68:a5:83:02: cd:e4:b7:91:40:d0:f1:07:67:fd:a0:b7:58:c3:b7:78:76:d8: aa:6b:03:c1:b9:c0:b2:7f:33:b8:9e:a5:41:31:86:ac:e8:3a: 36:6e:ba:7c:bf:b3:81:37:93:49:60:78:0b:0d:cc:af:93:82: e2:29:ea:fd:68:6b:32:fb:fc:86:83:d2:c5:19:36:db:7f:d5: 5a:6f:6c:98:fd:b9:d1:61:b5:b0:4c:70:cc:cd:f6:57:05:4a: 95:57:76:8d:ed:02:a5:a5:b5:49:94:4c:7c:01:f1:50:59:06: 17:16:72:53:6f:91:f3:53:90:8f:55:17:a1:2f:98:c0:59:f1: 9c:a8:48:a2:82:46:f5:5a:05:cf:c8:3d:0a:10:10:e8:61:65: c3:a3:7e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RHymWnFgvbJSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MTBlODFjODAtOWU1OC00MTA4LWJkNDctMTdkOTRhNGQzOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNCiXDnrtYm3YoftKuIKg8tEGyGDs9TVPgYi DaOz4EYXnSMlZuCYzPoKZ9XSh/Vbd5XLwz50a+cW/szoqBuwb/tmxxA+6xImAlpH uxu/YZRnyAMny83i8ExXCpEV6gtN7N2bLpmcRhSK4Xnj0GudRRS+jGLw5J92h8T9 KKcXjn7avsi3wQnscI3R3oXGgkY1RmPdgy8MUHxGO5n8SSOn6Xih9uKXAxaoOfWt gAWhYsCJzic1ART39gOKzTJ78nPN1tH0v4+JFdx18BWxZUobQC2O97A/89m+xi6z YZwJjJziKkme2AEh8C+X0AQ6yqukzbWP0t3x5yFM3Ztc2W39fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS8iCpy3xiNrg3ifCcH/esbCf+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMmFhOTE3NTctNDFhMy0z ODc4LWJkZTEtNGYxMWE1ZDc3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnesnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkbyKt+MPxj3bl5XzGUG9g5Dp89pV96TKd5F6HE9OZYVyKAW+NYj5wG kPwDX5KHRGnOW9kojzoarDKR39F2mWfpcKvIOML0/fw4MorERg0sYcP8mYKVmJyq JfdSCPT47d6L6RrpeO+paKWDAs3kt5FA0PEHZ/2gt1jDt3h22KprA8G5wLJ/M7ie pUExhqzoOjZuuny/s4E3k0lgeAsNzK+TguIp6v1oazL7/IaD0sUZNtt/1VpvbJj9 udFhtbBMcMzN9lcFSpVXdo3tAqWltUmUTHwB8VBZBhcWclNvkfNTkI9VF6EvmMBZ 8ZyoSKKCRvVaBc/IPQoQEOhhZcOjfj8= -----END CERTIFICATE-----Generated at Mon Apr 28 01:58:25 2025 by rpki-client