$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json) Hash identifier: +hDSM+IvI/+cfLYkxTtk00I3OozHnMk8J7bNQol3/ng= Subject key identifier: 34:D6:F2:92:49:5A:34:0E:88:DA:33:2D:E5:A3:31:6D:4D:CB:2C:9B Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F432858498FC9BC6745BC1502C726AF00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:bc:67:45:bc:15:02:c7:26:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=f354dc90-0450-4680-abd8-813358cc2340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:72:a7:0a:c3:c3:eb:a4:9c:62:d5:32:8e: 35:45:91:44:a2:ff:98:14:54:78:99:3d:65:04:fb: a0:67:c5:af:87:cf:a6:23:54:8e:51:08:27:50:15: 9a:6f:bd:ea:1f:db:32:2b:4f:85:ca:9d:8e:7a:a4: e0:a2:f4:9a:61:c7:65:c9:e6:0a:7f:b7:44:2f:e6: 28:77:7c:ca:45:d4:ba:1c:84:f3:17:66:17:d1:b6: b3:05:30:1c:08:81:e6:57:34:21:e0:25:ec:bd:e0: 59:ec:a6:f1:7a:31:32:62:a4:f8:3f:85:34:15:f8: 89:08:31:0c:82:09:08:6f:1d:3c:8c:5e:74:2f:5e: 01:76:3b:3c:9f:4b:87:2d:4e:16:7e:cc:d1:ff:02: c2:6d:d3:0b:09:47:d9:11:a3:06:2b:a0:87:bd:74: ce:1c:76:34:ed:a4:56:0b:ce:9a:97:14:90:ff:b4: a1:b5:90:86:3a:b8:81:b9:44:20:e3:f4:35:cf:83: 45:fd:b5:cf:3a:0d:20:95:05:de:99:ae:8d:8b:69: 3c:13:c1:0d:ad:c6:6c:f3:a7:99:8c:08:35:f5:1d: 46:53:7c:18:75:8b:7f:7b:ba:99:be:9e:9d:f0:7a: 91:4e:2d:03:e0:1c:fb:ba:7e:f7:77:3d:f1:84:b4: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D6:F2:92:49:5A:34:0E:88:DA:33:2D:E5:A3:31:6D:4D:CB:2C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:8a:9e:31:87:46:73:25:b9:9d:38:39:4c:a2:f8:34:4e:f7: 0a:dd:69:0b:3f:aa:2e:9f:92:81:3f:a5:ac:be:a2:9a:b1:74: c4:07:87:03:38:a2:86:b5:bc:07:89:6f:42:06:3b:cf:3c:42: 2f:e2:d6:61:b1:93:c2:72:3b:7e:e9:95:2f:14:f8:4c:23:f8: a3:ba:ba:8c:e8:6f:8f:f2:53:79:59:24:b7:23:98:5b:d0:ee: 40:c1:b7:e4:0d:39:f2:d2:38:85:0c:f1:f9:7d:87:0b:85:71: 2e:11:dd:49:e5:32:d9:73:32:fb:66:78:50:ed:3a:c9:4d:f3: 4e:ea:37:a5:b4:f6:ba:15:f0:6a:51:ab:f0:c4:31:2b:a7:fd: 00:77:d3:78:c2:76:a0:d1:45:50:50:1f:6e:25:6e:eb:4c:24: 3c:f7:fe:63:66:df:24:12:dc:34:dc:fc:28:29:74:9d:d0:f5: 1f:44:d9:b4:97:c7:f5:9d:e6:20:9d:b6:4a:af:ba:89:d0:3b: 97:99:02:18:19:d9:44:88:bd:f2:91:72:cc:3b:f9:ee:ee:c4: e8:7b:01:15:11:fa:e6:35:11:27:f1:f8:1b:2e:de:3e:49:40: 51:fb:be:9b:c7:8e:f1:d6:71:6e:51:99:bd:0f:2d:a8:eb:c6: 1a:81:8b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybxnRbwVAscmrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ZjM1NGRjOTAtMDQ1MC00NjgwLWFiZDgtODEzMzU4Y2MyMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHhypwrDw+uknGLVMo41RZFEov+YFFR4mT1l BPugZ8Wvh8+mI1SOUQgnUBWab73qH9syK0+Fyp2OeqTgovSaYcdlyeYKf7dEL+Yo d3zKRdS6HITzF2YX0bazBTAcCIHmVzQh4CXsveBZ7KbxejEyYqT4P4U0FfiJCDEM ggkIbx08jF50L14Bdjs8n0uHLU4WfszR/wLCbdMLCUfZEaMGK6CHvXTOHHY07aRW C86alxSQ/7ShtZCGOriBuUQg4/Q1z4NF/bXPOg0glQXema6Ni2k8E8ENrcZs86eZ jAg19R1GU3wYdYt/e7qZvp6d8HqRTi0D4Bz7un73dz3xhLR30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTW8pJJWjQOiNozLeWjMW1NyyybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDNjYmE0NGYtZTRlOS0z YjVjLWI3ZGQtZDFlMmUyNjdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmKnjGHRnMluZ04OUyi+DRO9wrdaQs/qi6fkoE/pay+opqxdMQHhwM4 ooa1vAeJb0IGO888Qi/i1mGxk8JyO37plS8U+Ewj+KO6uozob4/yU3lZJLcjmFvQ 7kDBt+QNOfLSOIUM8fl9hwuFcS4R3UnlMtlzMvtmeFDtOslN807qN6W09roV8GpR q/DEMSun/QB303jCdqDRRVBQH24lbutMJDz3/mNm3yQS3DTc/CgpdJ3Q9R9E2bSX x/Wd5iCdtkqvuonQO5eZAhgZ2USIvfKRcsw7+e7uxOh7ARUR+uY1ESfx+Bsu3j5J QFH7vpvHjvHWcW5Rmb0PLajrxhqBi1k= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:29 2025 by rpki-client