$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d3bafabe-18f5-3db3-9668-3c065e6db8a7.roa File: d3bafabe-18f5-3db3-9668-3c065e6db8a7.roa (raw, json) Hash identifier: 9STVDYQynRZo/yLQ4ml8D5MJTJAcSvMpTt0eMwVfxGA= Subject key identifier: 0C:43:28:7C:4B:9E:7F:29:74:F4:3D:61:C0:06:E0:40:71:D0:CA:B6 Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F432858498DB949D8D324CDC9E9856480 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d3bafabe-18f5-3db3-9668-3c065e6db8a7.roa Signing time: Thu 17 Apr 2025 07:16:08 +0000 ROA not before: Thu 17 Apr 2025 07:16:08 +0000 ROA not after: Wed 16 Jul 2025 07:16:08 +0000 asID: 4181 IP address blocks: 157.212.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8d:b9:49:d8:d3:24:cd:c9:e9:85:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Apr 17 07:16:08 2025 GMT Not After : Jul 16 07:16:08 2025 GMT Subject: CN=e37af5c8-987c-42ba-8e8c-ea4f2c28dadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:21:08:85:ba:d2:ab:46:55:39:cc:e5:ed: 06:0f:3f:6f:7c:41:64:2a:6b:05:2d:97:02:f7:73: d7:46:61:7c:8c:d1:c0:ff:19:c5:ba:f8:1c:52:da: 03:d1:b8:c4:18:a5:f0:80:95:78:73:a4:5e:43:53: ca:b2:3b:a4:ca:c9:23:35:74:49:10:b5:ad:b9:3f: c0:1e:e6:a2:a8:a2:b1:05:5b:4e:7e:08:a1:2f:a1: d6:63:66:e8:f7:5e:73:13:56:10:94:6f:c8:05:90: 84:51:85:fa:35:77:c4:f0:6e:9f:8e:46:bf:54:67: cc:2e:4d:96:7a:a6:e2:f6:5f:81:03:03:06:56:a5: a5:c8:ba:e8:a9:4c:0d:08:3d:62:d6:46:e9:5e:c7: cc:a3:40:ba:fc:fc:dc:21:d1:fa:5a:2c:46:ff:1a: 82:09:11:f1:50:e9:32:57:f1:ba:d8:d0:31:0e:3d: 4d:ba:c4:ad:c9:dd:e3:f2:be:f4:76:06:91:81:a7: f6:f8:2e:72:25:79:7d:9d:a4:64:35:4e:e6:9c:46: e9:ec:1d:6d:02:73:3b:ea:cc:31:74:47:c4:db:24: 44:16:ff:5d:ae:1a:90:3c:e5:b4:bd:5e:65:2e:2b: 76:d6:44:97:c0:92:2b:d6:9d:0d:ac:96:ed:13:a7: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:43:28:7C:4B:9E:7F:29:74:F4:3D:61:C0:06:E0:40:71:D0:CA:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d3bafabe-18f5-3db3-9668-3c065e6db8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 157.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:1e:3c:f3:2f:4f:2d:c4:62:77:72:a2:a7:3a:a3:67:f2:19: 95:a7:92:a6:61:6b:0a:9e:bf:b7:f0:49:c6:8b:6d:98:d4:67: 1d:d5:03:4b:c6:e7:04:8e:28:5f:4c:97:20:2b:ec:ef:04:c0: 99:03:5b:84:bd:39:b5:0c:16:34:ee:3a:bd:6e:75:2f:dd:4e: e9:1a:e0:15:9e:e6:6f:87:06:99:47:7d:ec:5f:69:1c:0a:2c: 9e:82:70:c6:00:7e:3b:e1:77:70:f0:72:dc:d7:24:86:57:8b: 3c:06:4e:6d:a2:91:e6:74:1a:2a:84:c8:12:28:80:1f:80:d2: 8a:8f:c8:7a:73:b7:8a:8d:04:ad:fb:dd:ba:0e:28:07:49:02: 1d:76:e7:f9:f9:cc:66:c9:a7:93:3f:3c:f1:96:e1:52:4f:d2: 00:c1:4d:34:08:d2:d5:f2:17:59:02:03:1e:32:55:88:0a:10: 9e:9f:66:e5:c7:42:0b:55:3c:1e:31:42:54:a6:d2:0f:e7:3f: fe:b9:64:3e:33:93:fd:3b:f3:fb:c4:88:00:07:e0:47:45:60: 07:73:5c:09:45:62:d2:d9:77:6e:24:ce:7e:a7:08:77:48:f6: 5c:c4:d1:bd:a6:cf:1e:29:2c:2c:3a:9d:53:45:56:e7:50:00: 25:05:5d:96 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmNuUnY0yTNyemFZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI1MDQxNzA3MTYwOFoXDTI1MDcxNjA3MTYwOFowLzEtMCsGA1UEAxMk ZTM3YWY1YzgtOTg3Yy00MmJhLThlOGMtZWE0ZjJjMjhkYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrghCIW60qtGVTnM5e0GDz9vfEFkKmsFLZcC 93PXRmF8jNHA/xnFuvgcUtoD0bjEGKXwgJV4c6ReQ1PKsjukyskjNXRJELWtuT/A HuaiqKKxBVtOfgihL6HWY2bo915zE1YQlG/IBZCEUYX6NXfE8G6fjka/VGfMLk2W eqbi9l+BAwMGVqWlyLroqUwNCD1i1kbpXsfMo0C6/PzcIdH6WixG/xqCCRHxUOky V/G62NAxDj1NusStyd3j8r70dgaRgaf2+C5yJXl9naRkNU7mnEbp7B1tAnM76swx dEfE2yREFv9drhqQPOW0vV5lLit21kSXwJIr1p0NrJbtE6efHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAxDKHxLnn8pdPQ9YcAG4EBx0Mq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvZDNiYWZhYmUtMThmNS0z ZGIzLTk2NjgtM2MwNjVlNmRiOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAndQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmR488y9PLcRid3KipzqjZ/IZlaeSpmFrCp6/t/BJxottmNRnHdUDS8bn BI4oX0yXICvs7wTAmQNbhL05tQwWNO46vW51L91O6RrgFZ7mb4cGmUd97F9pHAos noJwxgB+O+F3cPBy3NckhleLPAZObaKR5nQaKoTIEiiAH4DSio/IenO3io0Erfvd ug4oB0kCHXbn+fnMZsmnkz888ZbhUk/SAMFNNAjS1fIXWQIDHjJViAoQnp9m5cdC C1U8HjFCVKbSD+c//rlkPjOT/Tvz+8SIAAfgR0VgB3NcCUVi0tl3biTOfqcId0j2 XMTRvabPHiksLDqdU0VW51AAJQVdlg== -----END CERTIFICATE-----Generated at Wed Apr 30 10:48:01 2025 by rpki-client