$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa File: 2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa (raw, json) Hash identifier: OogtUoSQLdu11mimr7XZzguC1vFqcI+DBrhPgO76oRo= Subject key identifier: 8A:D4:2B:B4:47:13:4B:76:58:4F:76:16:72:59:F6:B1:CE:F0:82:15 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F432858498FC9BFB69402560795E54C00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:bf:b6:94:02:56:07:95:e5:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=0c4b6054-649a-4fe9-99bd-ff780e083f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1b:0b:85:bd:d4:28:0d:d5:d6:c9:6a:29:fa: 1b:4b:38:fe:a8:67:3a:8f:bf:b2:17:3b:18:67:58: c6:7c:7a:9c:18:9a:45:15:80:5f:b3:28:77:7f:14: b0:e1:f8:4a:97:e3:01:12:5d:47:22:7b:1f:1d:77: 4b:ad:70:21:50:d1:1e:df:89:64:e1:14:a4:82:c9: 8a:74:5c:5e:52:54:7e:fa:d5:66:a9:b2:f8:5b:97: 3b:19:8d:8c:0c:84:d8:c0:d6:07:eb:30:01:1e:a7: 00:8c:44:c6:58:c8:f2:64:04:49:c3:6b:01:36:0d: 2a:2b:65:82:d8:30:81:dd:26:9f:54:65:73:39:64: 13:ee:cf:a5:b5:32:a6:e6:fe:32:4c:cb:c8:5a:4e: ee:4e:9f:c8:91:a3:f2:0a:9f:ed:f1:3b:b7:5f:fc: 6a:87:ee:89:5e:20:28:9f:28:04:37:01:a0:b6:a5: ab:b9:78:29:07:06:f7:7f:03:28:e5:2a:aa:49:ef: 9a:98:af:82:ac:f4:e8:cf:e0:17:14:70:33:3c:47: bd:73:88:2e:37:bd:2a:29:f3:fa:4c:71:71:15:07: ec:67:73:32:03:38:00:66:bf:a8:06:1e:0d:a3:40: 99:21:22:ae:50:79:d5:bb:8e:6e:04:1e:e8:29:8a: 02:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D4:2B:B4:47:13:4B:76:58:4F:76:16:72:59:F6:B1:CE:F0:82:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:05:15:ae:7d:1f:04:39:67:11:1b:3d:c5:6f:fe:5d:93:36: ca:28:c6:74:0a:4e:cd:b7:2a:d5:3c:7d:07:c8:d9:92:89:3b: 06:3a:23:c8:26:02:26:f1:a1:13:31:5e:ce:c1:ba:73:ca:2d: 69:af:e2:55:41:5a:81:75:f3:5e:86:52:a4:08:09:15:e4:f6: 45:f0:79:92:9a:18:8f:0c:b8:18:c3:07:63:99:d1:d9:45:c3: 29:17:a4:b7:8c:a2:c0:0f:8a:71:2b:dd:8f:81:9b:22:ab:3c: 93:87:5f:4b:f6:80:56:52:39:91:70:48:04:9a:0b:00:05:d5: d5:34:35:ec:6d:fb:a4:8e:95:86:22:1d:2a:7e:a0:47:57:54: de:a3:3f:a8:27:a0:66:1a:8b:e5:9c:10:08:b4:0b:eb:3b:b4: 77:8b:82:2f:20:93:4c:d3:0d:0f:88:cf:6b:4c:18:9c:6a:e7: 09:b0:51:9f:14:9f:ed:55:fa:3a:ca:98:6f:66:80:ce:e2:b6: c1:5e:93:d9:96:2b:b6:5f:61:86:77:e2:2a:a1:10:00:88:2a: c8:5e:db:ae:b1:87:52:2f:78:15:52:0c:06:79:0e:88:6c:f9: 3b:8c:98:12:1c:a5:ab:14:5a:b8:81:48:81:89:b8:c3:9b:ad: 28:6c:ba:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPyb+2lAJWB5XlTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk MGM0YjYwNTQtNjQ5YS00ZmU5LTk5YmQtZmY3ODBlMDgzZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxsLhb3UKA3V1slqKfobSzj+qGc6j7+yFzsY Z1jGfHqcGJpFFYBfsyh3fxSw4fhKl+MBEl1HInsfHXdLrXAhUNEe34lk4RSkgsmK dFxeUlR++tVmqbL4W5c7GY2MDITYwNYH6zABHqcAjETGWMjyZARJw2sBNg0qK2WC 2DCB3SafVGVzOWQT7s+ltTKm5v4yTMvIWk7uTp/IkaPyCp/t8Tu3X/xqh+6JXiAo nygENwGgtqWruXgpBwb3fwMo5SqqSe+amK+CrPToz+AXFHAzPEe9c4guN70qKfP6 THFxFQfsZ3MyAzgAZr+oBh4No0CZISKuUHnVu45uBB7oKYoCVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrUK7RHE0t2WE92FnJZ9rHO8IIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMmI0ZTZiNzAtMzlkZC0z ZmQzLTkxZGEtODdkNGM5NmM5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgFFa59HwQ5ZxEbPcVv/l2TNsooxnQKTs23KtU8fQfI2ZKJOwY6I8gm AibxoRMxXs7BunPKLWmv4lVBWoF1816GUqQICRXk9kXweZKaGI8MuBjDB2OZ0dlF wykXpLeMosAPinEr3Y+BmyKrPJOHX0v2gFZSOZFwSASaCwAF1dU0Next+6SOlYYi HSp+oEdXVN6jP6gnoGYai+WcEAi0C+s7tHeLgi8gk0zTDQ+Iz2tMGJxq5wmwUZ8U n+1V+jrKmG9mgM7itsFek9mWK7ZfYYZ34iqhEACIKshe266xh1IveBVSDAZ5Dohs +TuMmBIcpasUWriBSIGJuMObrShsujk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:20:47 2025 by rpki-client