$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa File: da29dd16-44c5-3bb1-af0e-adfb48371078.roa (raw, json) Hash identifier: 7aQxFBvcD2oj9rOmkwEB/plrYm6l709VPVtkGRfNuGA= Subject key identifier: 49:2B:5F:53:6C:97:A4:2F:9C:CE:D5:9A:B6:C5:15:51:62:A6:5A:EE Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584961B99F691544515203015C00 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 7150 IP address blocks: 148.137.0.0/16 maxlen: 20 151.161.0.0/16 maxlen: 20 157.62.0.0/16 maxlen: 20 192.149.243.0/24 maxlen: 24 204.108.180.0/23 maxlen: 24 204.108.184.0/23 maxlen: 24 204.108.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9f:69:15:44:51:52:03:01:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=07c44ee4-280f-4b51-b10b-8fa3fb6a2877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:9a:7c:2f:81:6b:db:ce:b0:56:f1:55:f5: 15:a2:8c:cd:f2:0a:79:0a:b3:56:cf:4f:e4:e2:dd: 86:e2:f4:a8:78:07:d5:b1:3f:d0:90:34:14:3e:05: d5:7f:1d:c9:a0:3c:5e:55:0f:4e:b9:e2:d6:4c:df: a4:a5:f0:47:65:67:49:70:02:4a:2b:3f:b3:96:f5: 60:21:fe:bc:37:c1:c3:ce:1d:df:37:cb:45:b7:c3: e1:9f:58:d7:11:df:cf:a6:a0:1b:b3:64:72:24:c4: fe:5f:f7:bc:35:b2:f8:e8:5d:36:91:cb:32:cb:d2: cf:bf:dc:03:de:2b:27:b0:0c:a9:bf:65:b4:24:b8: 72:af:23:0f:f5:07:bd:07:84:0e:62:6c:fa:fd:23: 7d:0b:85:8c:ba:b6:bd:f6:85:b1:80:47:1f:22:93: 5a:c8:29:45:27:5c:fd:e4:c2:23:ed:ee:c9:a3:8e: f3:14:a5:51:52:5d:1c:4a:32:98:83:4b:5c:da:2a: 21:4d:b9:f9:d6:7a:a2:7c:09:86:c3:be:74:95:86: b2:a1:0f:b3:27:0b:11:f3:ca:df:0a:9a:c6:5a:ea: 01:1f:0c:3d:51:4c:7b:21:fd:78:69:f1:fb:4f:71: 43:ca:37:4d:b1:4e:bd:d6:ff:db:2b:98:a9:c0:7f: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2B:5F:53:6C:97:A4:2F:9C:CE:D5:9A:B6:C5:15:51:62:A6:5A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 148.137.0.0/16 151.161.0.0/16 157.62.0.0/16 192.149.243.0/24 204.108.180.0/23 204.108.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:70:89:2b:84:ad:21:0a:e8:6e:9d:23:15:70:8c:de:c3:63: 77:b4:83:5c:ab:eb:fc:0a:2c:45:28:19:4a:63:ef:56:1e:e0: 39:75:92:5c:f5:c0:8a:9c:67:27:31:53:c8:0c:45:d8:66:f0: e7:f4:1a:02:49:db:ad:0e:89:11:7d:10:a0:3f:5d:35:35:be: 29:a2:bd:15:0d:a8:cc:0a:1f:eb:99:b8:2c:d9:e6:41:ee:1b: b5:1b:8e:a8:85:cd:65:33:23:e6:63:1a:21:b6:b5:79:4c:2c: 7b:7f:f0:61:7b:b4:cc:fb:b4:a8:76:40:5f:01:6c:64:a7:57: 40:95:34:af:d3:97:2d:77:53:83:81:01:d6:da:14:34:bc:55: f0:36:2d:3a:32:b7:b8:2c:53:09:5a:18:14:8a:29:4f:55:d9: 9b:06:67:53:6e:74:96:a4:d7:b0:aa:94:fd:02:97:53:28:87: 32:de:a3:7a:f3:c8:ca:22:22:a1:f2:dc:23:61:04:8f:22:88: fe:ba:ec:c5:af:21:65:e6:3c:cb:f6:70:97:12:9d:5b:df:52: 80:a1:2f:92:9d:d3:40:e7:fa:d8:2a:40:e2:af:58:87:21:e0: c3:39:de:1c:14:a2:63:cf:d9:4b:8d:e7:bb:95:25:36:b3:22: d2:4e:ae:4f -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWElhuZ9pFURRUgMBXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MDdjNDRlZTQtMjgwZi00YjUxLWIxMGItOGZhM2ZiNmEyODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknKafC+Ba9vOsFbxVfUVoozN8gp5CrNWz0/k 4t2G4vSoeAfVsT/QkDQUPgXVfx3JoDxeVQ9OueLWTN+kpfBHZWdJcAJKKz+zlvVg If68N8HDzh3fN8tFt8Phn1jXEd/PpqAbs2RyJMT+X/e8NbL46F02kcsyy9LPv9wD 3isnsAypv2W0JLhyryMP9Qe9B4QOYmz6/SN9C4WMura99oWxgEcfIpNayClFJ1z9 5MIj7e7Jo47zFKVRUl0cSjKYg0tc2iohTbn51nqifAmGw750lYayoQ+zJwsR88rf CprGWuoBHww9UUx7If14afH7T3FDyjdNsU691v/bK5ipwH8IYwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFEkrX1Nsl6QvnM7VmrbFFVFiplruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZGEyOWRkMTYtNDRjNS0z YmIxLWFmMGUtYWRmYjQ4MzcxMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAlIkDAwCX oQMDAJ0+AwQAwJXzAwQBzGy0AwQCzGy4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAANwiSuErSEK6G6dIxVw jN7DY3e0g1yr6/wKLEUoGUpj71Ye4Dl1klz1wIqcZycxU8gMRdhm8Of0GgJJ260O iRF9EKA/XTU1vimivRUNqMwKH+uZuCzZ5kHuG7UbjqiFzWUzI+ZjGiG2tXlMLHt/ 8GF7tMz7tKh2QF8BbGSnV0CVNK/Tly13U4OBAdbaFDS8VfA2LToyt7gsUwlaGBSK KU9V2ZsGZ1NudJak17CqlP0Cl1MohzLeo3rzyMoiIqHy3CNhBI8iiP667MWvIWXm PMv2cJcSnVvfUoChL5Kd00Dn+tgqQOKvWIch4MM53hwUomPP2UuN57uVJTazItJO rk8= -----END CERTIFICATE-----Generated at Tue Apr 29 09:01:00 2025 by rpki-client