$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa File: 875cadce-0a07-3252-b823-2dab07525f7b.roa (raw, json) Hash identifier: y1LLSRb7yo7AaAe2hzyMSRurU8EPyq1hluy+uzbwwQw= Subject key identifier: 10:17:A1:66:EF:96:D1:36:F2:F4:E7:4F:F4:B7:71:59:82:66:CC:25 Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Certificate serial: 010D0C9F4328584965E97937CA719D4512217EA0 Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 16509 IP address blocks: 192.157.36.0/23 maxlen: 24 2602:f7db::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:79:37:ca:71:9d:45:12:21:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=7cde7703-4123-4a2a-a240-e0d91423c950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:69:96:0f:f4:8b:fd:3d:24:73:b6:9e:59: 54:fd:87:9f:af:49:4b:cd:f5:9d:2b:7a:ad:06:c7: aa:e4:ba:48:e3:04:3e:a8:77:9e:e5:c9:d6:e7:31: 74:8d:09:42:57:51:d0:c5:1b:25:5e:c6:b8:aa:df: d9:95:d1:ea:18:8f:25:eb:06:f8:3c:49:54:35:39: 05:45:f2:ee:23:53:9c:b2:88:72:91:82:6c:56:27: ba:c0:72:38:56:1c:24:9e:a8:71:50:64:53:93:c2: 9f:d6:5b:d9:18:a1:78:5f:68:83:0a:a2:17:f2:c3: 90:70:39:7a:77:11:50:54:77:73:7f:f1:00:c4:43: 1f:44:12:46:f4:fe:e6:46:d6:9b:a1:65:93:2b:24: 78:71:e2:ff:91:40:72:f4:5d:5c:0d:4e:60:d3:35: 27:17:95:e2:7a:00:55:d6:90:a5:5f:0a:e1:bb:ba: d1:c7:68:8c:f7:f9:a2:c4:99:bd:6f:86:28:d8:b2: 13:38:30:17:99:07:73:76:96:d7:65:b2:2f:47:a9: 31:58:f8:07:b8:aa:e9:92:a9:a8:fe:58:1f:2e:1d: d8:41:6c:de:af:7d:48:bd:b5:df:c9:48:7a:8a:87: 5d:83:b9:13:f2:50:ad:25:ef:12:bb:28:e2:11:86: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:17:A1:66:EF:96:D1:36:F2:F4:E7:4F:F4:B7:71:59:82:66:CC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl X509v3 Authority Key Identifier: keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer sbgp-ipAddrBlock: critical IPv4: 192.157.36.0/23 IPv6: 2602:f7db::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:64:bf:08:d6:14:40:fe:5d:66:2b:c4:9a:37:34:98:c3:59: 53:bd:12:d3:15:fc:4d:34:31:96:fe:3f:c1:e5:ef:31:33:f3: 3f:83:f8:6e:e8:23:c6:e5:43:db:3a:31:be:bf:ea:8b:eb:c2: f1:77:95:ae:a0:01:ba:89:32:24:aa:7b:a0:22:c2:19:71:91: 04:56:ed:0e:6d:ca:00:b2:e2:bb:ee:3a:b2:33:da:da:e4:9c: 5a:9c:97:e5:d4:8f:28:23:87:81:cb:48:a4:b5:0e:25:49:a0: 6f:90:04:da:d7:4a:b5:b8:95:42:dd:2d:44:f1:6b:2f:54:8f: 1b:71:d6:db:06:0d:c7:f3:13:ff:fe:1e:04:16:83:f8:79:48: d9:e1:0e:36:6d:10:15:5a:85:ca:e0:16:f7:40:90:f1:69:4e: f8:84:65:76:25:35:28:55:f7:7f:99:69:52:87:b4:f2:e2:58: 7e:fc:d2:28:8b:45:63:b4:c1:bd:52:1a:b7:0f:3a:b2:85:57: 79:49:2d:21:c5:72:b4:a6:80:8a:fa:54:40:74:c3:85:11:c5: 37:44:88:9d:fa:94:96:ae:01:e0:15:71:58:8b:22:70:68:40: b4:b5:a0:f4:42:70:e8:05:33:8e:67:d3:6b:2c:30:cb:25:18: 6f:40:84:bc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEll6Xk3ynGdRRIhfqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm MWE0MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk N2NkZTc3MDMtNDEyMy00YTJhLWEyNDAtZTBkOTE0MjNjOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15Vplg/0i/09JHO2nllU/Yefr0lLzfWdK3qt Bseq5LpI4wQ+qHee5cnW5zF0jQlCV1HQxRslXsa4qt/ZldHqGI8l6wb4PElUNTkF RfLuI1OcsohykYJsVie6wHI4VhwknqhxUGRTk8Kf1lvZGKF4X2iDCqIX8sOQcDl6 dxFQVHdzf/EAxEMfRBJG9P7mRtaboWWTKyR4ceL/kUBy9F1cDU5g0zUnF5XiegBV 1pClXwrhu7rRx2iM9/mixJm9b4Yo2LITODAXmQdzdpbXZbIvR6kxWPgHuKrpkqmo /lgfLh3YQWzer31IvbXfyUh6ioddg7kT8lCtJe8SuyjiEYb4qQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBAXoWbvltE28vTnT/S3cVmCZswlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvODc1Y2FkY2UtMGEwNy0z MjUyLWI4MjMtMmRhYjA3NTI1ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx YjNjMmYxYTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBwJ0kMA4E AgACMAgDBgAmAvfbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDRZL8I1hRA/l1mK8SaNzSYw1lTvRLTFfxN NDGW/j/B5e8xM/M/g/hu6CPG5UPbOjG+v+qL68Lxd5WuoAG6iTIkqnugIsIZcZEE Vu0ObcoAsuK77jqyM9ra5JxanJfl1I8oI4eBy0iktQ4lSaBvkATa10q1uJVC3S1E 8WsvVI8bcdbbBg3H8xP//h4EFoP4eUjZ4Q42bRAVWoXK4Bb3QJDxaU74hGV2JTUo Vfd/mWlSh7Ty4lh+/NIoi0VjtMG9Uhq3DzqyhVd5SS0hxXK0poCK+lRAdMOFEcU3 RIid+pSWrgHgFXFYiyJwaEC0taD0QnDoBTOOZ9NrLDDLJRhvQIS8 -----END CERTIFICATE-----Generated at Sat Apr 26 20:19:56 2025 by rpki-client