$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/769b9315-f32e-3982-84ae-b71e52579be4.roa File: 769b9315-f32e-3982-84ae-b71e52579be4.roa (raw, json) Hash identifier: RB2nQP5DVskHqTuPcYW6L0KpgF2W2MLa158uoMxUtOg= Subject key identifier: B3:D4:80:58:D1:E8:5B:07:CD:25:B4:C5:EF:9B:FF:85:41:36:E1:24 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285849A089D258CBAB1D4ED2C8CBC0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/769b9315-f32e-3982-84ae-b71e52579be4.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 159.172.195.0/24 maxlen: 24 159.172.200.0/24 maxlen: 24 159.172.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d2:58:cb:ab:1d:4e:d2:c8:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=7f13961c-927b-476b-9120-2da560c64f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:d3:e7:6a:02:f0:57:10:6a:e6:1d:cc:52: 40:44:05:a8:fe:4e:44:22:35:b9:0d:86:0b:d7:8c: 92:bf:cc:6b:08:18:c5:e1:7b:61:6a:7b:e6:14:1e: 4a:bf:53:ba:b3:ab:dc:7a:e0:63:15:94:d8:16:1e: 8b:75:a5:b6:c1:e2:58:db:be:de:f0:9b:b1:ba:c1: 27:ed:24:e0:fc:a7:d4:fc:fb:37:16:6a:74:fb:b0: f8:45:fb:d9:16:99:81:15:4b:f6:af:98:93:ec:76: 7b:25:50:35:cb:22:35:7a:84:d2:ab:02:78:d1:ae: 0c:6f:10:5b:5e:13:82:89:20:c9:ef:80:6f:a8:5e: c3:ed:7f:fd:11:df:0e:da:aa:4c:4d:d2:01:00:54: 0a:81:19:8d:c2:f9:93:f9:7f:f5:d0:4b:58:3b:98: 00:3b:3f:61:43:c3:04:57:eb:6b:b3:f8:a2:04:ab: 05:7b:a9:41:d4:d4:34:28:fd:67:0e:e1:c4:c9:ca: e1:e4:91:c2:67:3c:86:4f:27:fa:28:97:92:89:35: a1:19:90:88:b8:ea:06:3c:e7:f4:20:e4:50:f4:d9: 34:c7:cd:a9:f3:68:93:00:d3:ec:c5:fe:ae:94:0d: 3c:91:d5:f2:71:80:77:34:16:fe:c9:66:81:b0:78: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D4:80:58:D1:E8:5B:07:CD:25:B4:C5:EF:9B:FF:85:41:36:E1:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/769b9315-f32e-3982-84ae-b71e52579be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.195.0/24 159.172.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:67:af:5e:06:00:59:bc:be:3a:4a:d9:a2:21:b9:b7:2d:3f: 72:c0:46:7f:cd:ac:77:2c:ac:c3:5b:fc:e4:72:9a:70:fa:ea: 21:45:23:96:31:c4:61:6d:98:15:a7:a1:58:3d:3a:2a:1c:b5: 16:f4:b5:67:df:fb:fb:8b:8f:fa:d5:1a:ab:ed:c3:35:c3:c1: e1:50:8a:84:3a:34:38:8b:1e:78:82:ee:1d:b0:be:4d:17:73: 54:e1:6a:84:5d:30:f1:ed:ae:e8:26:37:ea:77:9c:41:6a:99: 30:69:63:dd:1b:fc:c1:30:be:8d:17:2d:d5:7b:d2:0d:4d:d1: 1b:91:ba:52:7d:53:e4:d3:93:18:0a:64:e0:d5:1f:4a:55:3b: d0:6b:c1:80:a3:c4:44:26:48:3d:b9:03:98:be:31:7f:59:9a: f5:b5:df:88:7e:5e:26:ae:4b:8f:58:a8:9b:b2:e2:93:17:03: 90:29:54:29:45:ef:6d:b5:f1:10:f9:92:b3:bf:2a:07:2a:71: f8:a3:89:62:b5:5e:c2:aa:a7:53:28:03:13:bc:71:50:76:60: a7:fd:bc:a5:f9:91:38:74:b3:7b:13:f3:4d:68:c5:01:80:a0: 7b:21:43:70:5b:84:b5:48:4f:bb:f1:00:0d:9a:0b:87:93:92: d9:32:c9:93 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmgidJYy6sdTtLIy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk N2YxMzk2MWMtOTI3Yi00NzZiLTkxMjAtMmRhNTYwYzY0ZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLzT52oC8FcQauYdzFJARAWo/k5EIjW5DYYL 14ySv8xrCBjF4XthanvmFB5Kv1O6s6vceuBjFZTYFh6LdaW2weJY277e8JuxusEn 7STg/KfU/Ps3Fmp0+7D4RfvZFpmBFUv2r5iT7HZ7JVA1yyI1eoTSqwJ40a4MbxBb XhOCiSDJ74BvqF7D7X/9Ed8O2qpMTdIBAFQKgRmNwvmT+X/10EtYO5gAOz9hQ8ME V+trs/iiBKsFe6lB1NQ0KP1nDuHEycrh5JHCZzyGTyf6KJeSiTWhGZCIuOoGPOf0 IORQ9Nk0x82p82iTANPsxf6ulA08kdXycYB3NBb+yWaBsHhJrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLPUgFjR6FsHzSW0xe+b/4VBNuEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvNzY5YjkzMTUtZjMyZS0z OTgyLTg0YWUtYjcxZTUyNTc5YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAn6zDAwQB n6zIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGVnr14GAFm8vjpK2aIhubctP3LARn/NrHcsrMNb/ORymnD6 6iFFI5YxxGFtmBWnoVg9OioctRb0tWff+/uLj/rVGqvtwzXDweFQioQ6NDiLHniC 7h2wvk0Xc1ThaoRdMPHtrugmN+p3nEFqmTBpY90b/MEwvo0XLdV70g1N0RuRulJ9 U+TTkxgKZODVH0pVO9BrwYCjxEQmSD25A5i+MX9ZmvW134h+XiauS49YqJuy4pMX A5ApVClF72218RD5krO/KgcqcfijiWK1XsKqp1MoAxO8cVB2YKf9vKX5kTh0s3sT 801oxQGAoHshQ3BbhLVIT7vxAA2aC4eTktkyyZM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:06 2025 by rpki-client