$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa File: 5530f811-421c-3e6a-94f4-ec500c171493.roa (raw, json) Hash identifier: 65x4ZD74Ei4+RZaci7Z0S/jslWFevZNboMgdSapJbbg= Subject key identifier: 1F:59:21:86:F6:55:ED:9F:4C:27:F1:FB:44:F9:8C:6E:B5:74:DC:15 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285849350EA36750DA25021AD42880 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 396982 IP address blocks: 152.38.154.0/24 maxlen: 24 152.38.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a3:67:50:da:25:02:1a:d4:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=6e633110-32dd-42ab-99e2-d0b3b770b179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:b6:bb:f2:84:f1:15:53:d7:61:58:69:89: 46:eb:b0:12:e0:ed:36:81:78:b8:a9:a6:34:4b:c8: 2a:56:d5:b3:5b:22:c3:a3:ef:a7:13:70:cb:6d:9f: 5a:1c:f9:77:43:04:c9:fc:d6:a4:3d:ba:f6:6c:f4: b5:cb:46:e5:61:61:1c:cb:9d:e5:ab:2c:cd:c5:d1: 54:15:0b:4b:78:4c:d5:b7:c3:e1:17:f5:10:3a:56: 82:03:da:6f:5b:fc:5d:08:93:b7:97:05:2a:f6:21: cf:46:30:bd:f5:5c:1a:dc:aa:5d:a2:8f:66:bc:a1: 71:5b:ad:e7:da:36:1d:a0:a6:54:51:10:9f:52:3c: 49:44:5a:c5:4f:c8:7f:a8:c0:7a:b1:cb:f2:56:a7: 6f:58:9a:3f:d5:7d:0c:b9:ff:fe:6c:4b:78:5f:2e: fc:06:81:ae:5c:77:af:15:3b:62:86:fd:08:a3:10: 3f:1d:de:c5:6e:5d:e9:fe:d4:41:fb:54:aa:20:3e: 22:ff:c6:78:29:3f:f3:c5:47:65:bc:b4:2f:12:f9: 3e:5f:ef:1d:9c:6d:06:32:31:ae:66:05:8b:59:3f: b9:7c:e0:93:ac:65:48:d6:aa:89:44:df:9e:b5:df: a3:05:b8:4e:f5:f8:d8:eb:92:51:9a:2f:4b:32:cd: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:59:21:86:F6:55:ED:9F:4C:27:F1:FB:44:F9:8C:6E:B5:74:DC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:19:5f:08:f9:2d:41:ab:b5:45:14:77:de:05:b2:fe:b6:53: 98:6c:f3:4f:01:6f:77:7f:41:8c:a0:2d:64:36:00:e6:99:a6: ab:88:92:2f:45:56:4a:73:f1:bb:98:17:33:98:44:0e:40:c0: 84:d5:9d:90:5d:17:8b:02:c2:6e:1b:94:ea:21:ef:88:dc:19: 97:72:e3:0d:fc:06:0c:0c:2b:ac:91:29:0e:59:51:bd:0e:ec: 6e:6a:a0:02:30:dd:98:42:c8:f5:2b:b4:88:c4:30:99:9d:63: b4:c1:c5:98:e9:99:05:d8:47:bc:c4:e5:a5:8c:c8:c8:6a:ec: 41:1b:04:55:67:4f:53:f8:9b:51:e1:94:a5:65:09:77:67:a8: 02:8b:76:da:f4:64:fa:bb:a1:ee:4d:39:ea:f1:9f:35:74:6d: b9:4c:b7:eb:ca:a4:6a:5a:40:5f:ba:8b:a2:29:3d:28:8d:b1: e3:a4:b1:21:91:7b:b7:a9:c0:1e:27:fb:97:bb:60:3f:60:99: 10:6b:96:95:2b:a5:55:1f:30:9f:e9:71:1e:c5:52:9b:f9:82: 53:06:9b:99:82:6b:2b:84:6c:91:69:f4:72:aa:4e:f7:14:85: 10:01:2b:f2:01:1c:50:a5:c1:f1:32:22:25:46:b6:6c:9a:8b: dd:36:4a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqNnUNolAhrUKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NmU2MzMxMTAtMzJkZC00MmFiLTk5ZTItZDBiM2I3NzBiMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRy2u/KE8RVT12FYaYlG67AS4O02gXi4qaY0 S8gqVtWzWyLDo++nE3DLbZ9aHPl3QwTJ/NakPbr2bPS1y0blYWEcy53lqyzNxdFU FQtLeEzVt8PhF/UQOlaCA9pvW/xdCJO3lwUq9iHPRjC99Vwa3Kpdoo9mvKFxW63n 2jYdoKZUURCfUjxJRFrFT8h/qMB6scvyVqdvWJo/1X0Muf/+bEt4Xy78BoGuXHev FTtihv0IoxA/Hd7Fbl3p/tRB+1SqID4i/8Z4KT/zxUdlvLQvEvk+X+8dnG0GMjGu ZgWLWT+5fOCTrGVI1qqJRN+etd+jBbhO9fjY65JRmi9LMs2IywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9ZIYb2Ve2fTCfx+0T5jG61dNwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNTUzMGY4MTEtNDIxYy0z ZTZhLTk0ZjQtZWM1MDBjMTcxNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkZXwj5LUGrtUUUd94Fsv62U5hs808Bb3d/QYygLWQ2AOaZpquIki9F Vkpz8buYFzOYRA5AwITVnZBdF4sCwm4blOoh74jcGZdy4w38BgwMK6yRKQ5ZUb0O 7G5qoAIw3ZhCyPUrtIjEMJmdY7TBxZjpmQXYR7zE5aWMyMhq7EEbBFVnT1P4m1Hh lKVlCXdnqAKLdtr0ZPq7oe5NOerxnzV0bblMt+vKpGpaQF+6i6IpPSiNseOksSGR e7epwB4n+5e7YD9gmRBrlpUrpVUfMJ/pcR7FUpv5glMGm5mCayuEbJFp9HKqTvcU hRABK/IBHFClwfEyIiVGtmyai902Sro= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:33 2025 by rpki-client