$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa File: 3d3cb45a-61fe-3633-8f13-e51266e75732.roa (raw, json) Hash identifier: Qhw8ANKmG+n1XrRgb2kxayY0GCnXkS/TUn86qEfrJXo= Subject key identifier: 4B:EA:66:90:3A:6C:D3:FF:3E:CB:80:2E:15:E3:70:9C:53:CB:BC:70 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285849A089D26F8D6DAA33E22F29E0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 159.172.195.0/24 maxlen: 24 159.172.200.0/24 maxlen: 24 159.172.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d2:6f:8d:6d:aa:33:e2:2f:29:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=7d93f066-1d81-48c1-bd56-8a8d7406bf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:2c:3d:2f:ea:56:a8:c9:32:8e:b1:c2:c8: ab:c3:7d:9f:39:3c:9e:4b:08:72:d4:74:d8:bb:e3: 5b:05:d5:66:f1:34:48:1b:73:4b:91:c7:e7:48:81: 73:58:36:a9:c8:65:03:87:8d:04:50:f3:1f:cd:41: e1:7b:ef:39:be:3f:3a:81:87:4f:66:3e:46:75:1c: 30:7b:1b:cf:d0:ff:72:17:c0:51:0f:4f:4b:a7:df: 93:79:f7:f5:9a:a6:40:88:99:d4:a5:9d:d0:e2:f0: e2:3e:06:1d:c1:24:5f:48:a5:f3:8f:2c:e1:d4:ff: 3b:f4:5c:47:6a:f8:10:40:a7:79:42:00:d4:76:a2: c1:db:06:a8:16:38:75:e9:43:28:07:1f:1e:96:2d: 65:30:aa:78:5c:2c:fc:db:0b:3a:35:e4:72:d1:2c: 96:89:b6:bc:97:5e:99:d4:77:3b:9f:16:42:6f:f6: ba:b6:cb:d8:83:1e:25:c0:1f:e4:b4:0a:cb:4e:52: 87:43:bf:fc:f0:64:93:32:c3:85:ab:d4:6d:ce:25: 23:a3:ec:f6:c7:48:5e:e1:c5:cb:e1:fe:e9:24:c2: 44:24:65:11:f0:d7:a9:ab:a7:44:37:ff:2a:ca:27: 20:1c:9d:3b:a4:2e:cf:1c:86:83:25:0d:9f:33:2a: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EA:66:90:3A:6C:D3:FF:3E:CB:80:2E:15:E3:70:9C:53:CB:BC:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.195.0/24 159.172.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c3:8f:0c:8e:f1:f3:62:c9:69:5e:ca:aa:0b:82:0c:0e:5f: d4:35:f9:91:10:6d:40:6b:79:da:58:b6:f6:b0:15:a5:f2:fe: ed:54:71:48:53:15:30:73:6b:d0:3c:b1:bb:28:2d:5d:0b:70: 01:92:69:54:51:3e:4f:e7:75:1d:4f:9a:f1:26:99:5e:d3:a5: 27:20:51:36:ae:02:bd:35:46:42:6d:2e:0f:e3:89:fb:99:c1: fc:52:cb:8a:d0:8a:6a:f7:12:66:98:83:ec:e7:9d:e9:19:37: 21:31:b7:62:c3:78:98:67:11:61:6f:4c:6b:1f:2f:b3:b7:cb: 35:88:dd:f0:8e:08:fe:07:d0:39:3e:90:be:60:99:ca:be:8c: 9f:2f:08:35:a7:85:16:9f:5f:12:f8:5b:50:04:ad:35:26:c5: ea:68:a9:8b:ee:81:44:c4:9c:f4:01:1e:8c:3d:91:c3:dd:67: 76:c7:d3:1a:57:b9:5c:34:9b:8e:e4:1c:96:24:22:2c:4b:86: 08:53:45:2d:c1:d8:36:2c:00:2b:7c:86:f4:1e:c5:42:81:17: a9:c3:59:2c:a7:50:29:74:b3:84:90:9d:d0:03:22:17:fa:f7: 08:9a:be:85:71:e7:b0:85:41:9c:8f:b7:c2:80:ca:ef:71:65: 86:65:6d:a6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmgidJvjW2qM+IvKeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk N2Q5M2YwNjYtMWQ4MS00OGMxLWJkNTYtOGE4ZDc0MDZiZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXEsPS/qVqjJMo6xwsirw32fOTyeSwhy1HTY u+NbBdVm8TRIG3NLkcfnSIFzWDapyGUDh40EUPMfzUHhe+85vj86gYdPZj5GdRww exvP0P9yF8BRD09Lp9+Teff1mqZAiJnUpZ3Q4vDiPgYdwSRfSKXzjyzh1P879FxH avgQQKd5QgDUdqLB2waoFjh16UMoBx8eli1lMKp4XCz82ws6NeRy0SyWiba8l16Z 1Hc7nxZCb/a6tsvYgx4lwB/ktArLTlKHQ7/88GSTMsOFq9RtziUjo+z2x0he4cXL 4f7pJMJEJGUR8Nepq6dEN/8qyicgHJ07pC7PHIaDJQ2fMyqZcwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEvqZpA6bNP/PsuALhXjcJxTy7xwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvM2QzY2I0NWEtNjFmZS0z NjMzLThmMTMtZTUxMjY2ZTc1NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAn6zDAwQB n6zIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAETDjwyO8fNiyWleyqoLggwOX9Q1+ZEQbUBredpYtvawFaXy /u1UcUhTFTBza9A8sbsoLV0LcAGSaVRRPk/ndR1PmvEmmV7TpScgUTauAr01RkJt Lg/jifuZwfxSy4rQimr3EmaYg+znnekZNyExt2LDeJhnEWFvTGsfL7O3yzWI3fCO CP4H0Dk+kL5gmcq+jJ8vCDWnhRafXxL4W1AErTUmxepoqYvugUTEnPQBHow9kcPd Z3bH0xpXuVw0m47kHJYkIixLhghTRS3B2DYsACt8hvQexUKBF6nDWSynUCl0s4SQ ndADIhf69wiavoVx57CFQZyPt8KAyu9xZYZlbaY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:31 2025 by rpki-client