$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa File: f580b67a-767d-31bd-8089-26fba68e71a7.roa (raw, json) Hash identifier: iUMo6VkncOCuZ+ZILN2ukdoA/mg+0JjmzpDdN96OX8k= Subject key identifier: B5:57:AF:6D:D2:7E:69:58:89:E6:0E:E6:FC:DD:1C:58:B6:AC:6F:CE Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285849287E698325898C0A845D8C80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 396982 IP address blocks: 152.38.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:69:83:25:89:8c:0a:84:5d:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=fc40d87c-d940-484d-87ee-992b6fc820a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:ab:ec:e8:e6:bf:eb:49:b7:2a:06:59:d2: b9:3c:06:98:d3:44:1a:71:a9:31:ba:0d:cb:80:b8: e9:3c:d9:fe:21:58:67:d9:98:1b:60:39:6d:69:8b: 65:bb:46:f8:ad:85:2f:1f:d6:2e:81:18:ec:72:8c: 8b:5c:9f:1a:13:6d:2b:8d:07:69:f0:47:f4:9b:02: 93:64:c8:5a:94:c2:40:7c:6d:f6:4d:23:eb:a4:a6: 7c:ee:9f:a1:43:38:3a:06:e8:bd:1c:8d:09:7c:9e: 88:2b:d1:9a:d0:c8:ea:4a:65:4a:c1:c8:39:6d:38: c7:c3:4f:3e:de:ab:0c:91:b2:71:09:d1:ab:0d:26: a1:37:ed:7d:9b:c3:bf:1c:fb:a0:ae:a2:04:cc:c7: e4:11:df:39:11:43:19:cb:04:28:70:b2:b2:fe:ac: 3c:3e:a5:ef:49:8c:5a:12:87:e1:d2:a6:56:26:db: f4:2b:cd:37:dd:65:fd:15:54:5c:8f:a7:f7:55:4a: cc:65:04:41:a9:85:5f:77:50:a5:6c:72:f0:59:61: f0:68:27:b5:71:ff:de:b4:65:64:e4:f5:27:37:f9: 9f:c9:3c:92:19:f2:c2:f6:e9:f0:9f:83:28:53:8a: 76:97:db:86:f3:80:4d:b0:b9:e0:d7:b6:12:49:7f: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:57:AF:6D:D2:7E:69:58:89:E6:0E:E6:FC:DD:1C:58:B6:AC:6F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ad:bc:fb:de:22:52:ed:c5:cf:9f:72:43:bc:fe:b3:8d:85: bc:e1:ca:65:42:7e:aa:63:9b:e3:b1:87:63:39:9e:9d:49:81: 37:e5:88:c3:85:fa:8c:19:cc:4d:3f:aa:bf:a9:c9:1e:11:d4: fa:00:bd:a8:ea:d1:f6:a3:a7:17:18:fa:e4:78:fe:8f:06:26: 7b:7a:40:b4:ca:53:40:b4:1e:a5:2a:7a:56:66:1f:88:18:f2: 91:99:ad:17:53:a4:38:24:ff:cc:b8:3d:31:34:ff:49:46:36: 12:33:7b:6b:3d:24:9a:d7:3c:d9:f4:73:d8:c3:34:1d:6b:de: 16:d1:b7:c0:1e:5a:6f:d8:98:ee:6c:fa:f9:56:ad:0f:50:22: e7:26:13:fa:10:2f:db:05:a1:bb:36:76:23:2a:a7:28:dd:f9: 3b:b1:bb:0b:40:f3:d2:b2:2f:0f:72:c4:e7:d0:53:2e:c2:cc: 88:c7:be:8f:a6:1d:87:cb:ef:56:25:f7:d1:74:83:bb:0c:4a: 95:cd:8c:99:91:58:58:31:3a:dc:37:78:43:10:ae:e2:77:17: b2:6c:96:fc:eb:96:e7:60:fd:cb:dc:49:39:47:c8:8f:7a:ec: 7c:47:11:89:f9:52:96:11:db:7d:64:b8:7d:e3:2b:f6:4a:61: af:6b:d9:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmmDJYmMCoRdjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmM0MGQ4N2MtZDk0MC00ODRkLTg3ZWUtOTkyYjZmYzgyMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMKr7Ojmv+tJtyoGWdK5PAaY00Qacakxug3L gLjpPNn+IVhn2ZgbYDltaYtlu0b4rYUvH9YugRjscoyLXJ8aE20rjQdp8Ef0mwKT ZMhalMJAfG32TSPrpKZ87p+hQzg6Bui9HI0JfJ6IK9Ga0MjqSmVKwcg5bTjHw08+ 3qsMkbJxCdGrDSahN+19m8O/HPugrqIEzMfkEd85EUMZywQocLKy/qw8PqXvSYxa Eofh0qZWJtv0K8033WX9FVRcj6f3VUrMZQRBqYVfd1ClbHLwWWHwaCe1cf/etGVk 5PUnN/mfyTySGfLC9unwn4MoU4p2l9uG84BNsLng17YSSX91nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVXr23SfmlYieYO5vzdHFi2rG/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvZjU4MGI2N2EtNzY3ZC0z MWJkLTgwODktMjZmYmE2OGU3MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmtvPveIlLtxc+fckO8/rONhbzhymVCfqpjm+Oxh2M5np1JgTfliMOF +owZzE0/qr+pyR4R1PoAvajq0fajpxcY+uR4/o8GJnt6QLTKU0C0HqUqelZmH4gY 8pGZrRdTpDgk/8y4PTE0/0lGNhIze2s9JJrXPNn0c9jDNB1r3hbRt8AeWm/YmO5s +vlWrQ9QIucmE/oQL9sFobs2diMqpyjd+TuxuwtA89KyLw9yxOfQUy7CzIjHvo+m HYfL71Yl99F0g7sMSpXNjJmRWFgxOtw3eEMQruJ3F7Jslvzrludg/cvcSTlHyI96 7HxHEYn5UpYR231kuH3jK/ZKYa9r2bM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:34 2025 by rpki-client