$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/43557251-f42e-3068-aefb-7f3c8c2e4165.roa File: 43557251-f42e-3068-aefb-7f3c8c2e4165.roa (raw, json) Hash identifier: OMYZCV571ZMmXADu2wHsI+gUY3078M3jfGquKl8+sDs= Subject key identifier: EA:CF:67:71:7B:BA:95:CC:0B:1E:55:D9:4B:53:0D:DA:1F:28:91:4B Certificate issuer: /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Certificate serial: 010D0C9F432858497F09A52FE7F797ADCA46FF40 Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/43557251-f42e-3068-aefb-7f3c8c2e4165.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 8075 IP address blocks: 165.125.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a5:2f:e7:f7:97:ad:ca:46:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=db7eb839-1cac-4754-9f78-740c9a64948c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:61:30:51:af:f2:e4:da:e8:5c:3c:8e:11: c3:d8:cc:96:b4:12:d1:4a:e4:97:73:41:a3:d9:54: e3:99:74:96:c5:15:37:cb:04:c0:3d:73:f7:c1:9d: 64:af:e5:84:91:95:95:c8:6e:b7:20:52:69:b2:cf: 97:47:1a:4a:83:ef:85:7a:7a:3e:cd:6e:38:93:9b: 96:7e:a1:11:dc:d4:53:95:8e:9e:53:dc:e9:f2:e1: 14:e3:3d:cc:f7:7c:3d:70:43:98:2e:53:ff:07:f2: 32:cf:51:44:8d:57:35:80:af:06:a2:d0:fc:cb:52: 9e:b7:be:d8:45:b7:35:75:40:c2:45:db:ad:cd:78: f1:78:2c:32:e0:ae:09:2f:f4:9f:52:ec:36:61:b8: 88:01:aa:ba:2d:d0:ba:c2:a7:7f:22:0f:ff:96:85: f0:3b:d9:24:0e:9b:57:06:91:02:57:08:1c:92:48: ad:27:01:8e:8d:af:c6:76:ef:7e:97:c3:06:e4:9d: a2:f4:dc:4f:68:9c:d1:af:85:f3:16:7e:0d:14:91: 10:d5:46:97:d6:31:28:ea:08:59:1d:65:d3:1f:70: de:f3:d9:99:24:79:35:39:d8:7a:9b:d4:6c:79:30: 62:32:f7:b9:ff:dd:92:1a:01:8f:05:71:02:9a:69: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CF:67:71:7B:BA:95:CC:0B:1E:55:D9:4B:53:0D:DA:1F:28:91:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/43557251-f42e-3068-aefb-7f3c8c2e4165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl X509v3 Authority Key Identifier: keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer sbgp-ipAddrBlock: critical IPv4: 165.125.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:07:bb:92:54:43:34:a9:b5:d9:c5:e6:90:74:41:4b:98:e0: ae:a0:58:56:6e:38:74:7b:0d:64:3b:b1:0f:a0:e8:19:d8:89: 91:d3:d0:5c:a2:02:d8:41:eb:21:c2:6a:8e:ca:31:c6:8a:34: 43:5a:2f:8b:10:b9:3a:0a:59:d0:bc:cf:cb:0b:c7:0c:09:cd: 99:36:34:90:83:71:47:e7:79:28:ca:63:61:e1:f2:93:13:9a: 54:cd:4c:db:a3:0d:32:28:6d:b8:9c:43:28:30:4d:ab:55:af: 24:40:fd:47:60:3a:5b:50:e3:18:99:7c:54:e2:fe:ea:d0:55: 51:70:a7:62:5c:18:f3:dd:c9:b4:1f:db:ae:7a:30:17:95:af: 3c:f7:ab:5c:a6:37:d7:58:f2:5f:53:59:9e:22:21:bf:7e:a8: c1:ef:75:3f:70:8c:29:1b:90:52:10:f5:6a:57:b0:96:79:d3: 10:3e:56:61:71:e3:6c:3c:be:3b:39:a8:e1:ce:03:4c:5b:bb: 70:f0:ce:2e:0e:21:ca:2b:82:16:a4:8a:76:0c:ae:89:4a:ff: 52:db:25:ed:26:1f:98:d4:8f:cd:42:3c:2d:c2:c2:c3:25:63: ec:38:9b:2e:17:c2:96:04:8c:bb:26:49:0d:18:0f:0f:8f:df: 4d:0b:a6:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaUv5/eXrcpG/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4 YjliMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk ZGI3ZWI4MzktMWNhYy00NzU0LTlmNzgtNzQwYzlhNjQ5NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz5hMFGv8uTa6Fw8jhHD2MyWtBLRSuSXc0Gj 2VTjmXSWxRU3ywTAPXP3wZ1kr+WEkZWVyG63IFJpss+XRxpKg++Feno+zW44k5uW fqER3NRTlY6eU9zp8uEU4z3M93w9cEOYLlP/B/Iyz1FEjVc1gK8GotD8y1Ket77Y Rbc1dUDCRdutzXjxeCwy4K4JL/SfUuw2YbiIAaq6LdC6wqd/Ig//loXwO9kkDptX BpECVwgckkitJwGOja/Gdu9+l8MG5J2i9NxPaJzRr4XzFn4NFJEQ1UaX1jEo6ghZ HWXTH3De89mZJHk1Odh6m9RseTBiMve5/92SGgGPBXECmmkkjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrPZ3F7upXMCx5V2UtTDdofKJFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4 YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvNDM1NTcyNTEtZjQyZS0z MDY4LWFlZmItN2YzYzhjMmU0MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApX0xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYHu5JUQzSptdnF5pB0QUuY4K6gWFZuOHR7DWQ7sQ+g6BnYiZHT0Fyi AthB6yHCao7KMcaKNENaL4sQuToKWdC8z8sLxwwJzZk2NJCDcUfneSjKY2Hh8pMT mlTNTNujDTIobbicQygwTatVryRA/UdgOltQ4xiZfFTi/urQVVFwp2JcGPPdybQf 2656MBeVrzz3q1ymN9dY8l9TWZ4iIb9+qMHvdT9wjCkbkFIQ9WpXsJZ50xA+VmFx 42w8vjs5qOHOA0xbu3Dwzi4OIcorghakinYMrolK/1LbJe0mH5jUj81CPC3CwsMl Y+w4my4XwpYEjLsmSQ0YDw+P300Lpsg= -----END CERTIFICATE-----Generated at Mon Apr 28 06:46:10 2025 by rpki-client