$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa File: 10d1bb84-e6e2-362b-9505-6cd59ced77da.roa (raw, json) Hash identifier: MDzRqhlY+1j4KyFeYqLuy4Ynsw6OtdIQN7Cl4yniwM4= Subject key identifier: C7:0E:BB:75:73:B0:28:09:31:B1:1A:31:57:0B:FB:2E:F4:23:C4:D7 Certificate issuer: /CN=3abca546-ca81-48f5-bdd4-8c111ba523ea Certificate serial: 010D0C9F432858490B4C1AF97CF5A037B190FC80 Authority key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 19224 IP address blocks: 152.160.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:1a:f9:7c:f5:a0:37:b1:90:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=d17da443-8c4a-45f6-b0b7-86ef0b9c7ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:dc:b0:7e:5a:ad:ab:b2:ca:7c:53:93:96: 73:bf:94:b3:c1:23:75:0a:33:ca:2a:6d:6c:fa:35: aa:0c:41:29:d5:78:2a:02:15:f3:3c:b8:c8:21:4d: 33:a7:31:08:78:bb:d7:37:95:67:db:16:6d:6b:a9: f6:6c:aa:0d:94:eb:94:e2:1f:58:c7:96:fe:10:8e: cf:a3:19:5a:94:f8:d6:8d:6e:1a:e0:d6:0a:3c:ca: 5b:e0:16:bd:99:e0:be:e0:25:9e:a6:a1:77:9d:21: 0c:02:ab:ba:c1:9f:6a:2e:2b:c7:b0:58:af:20:e4: f5:7e:1e:fe:ca:40:40:72:6b:4b:d8:18:6a:d5:11: a8:fc:34:15:dd:a5:09:22:cb:ad:ad:72:ac:0a:95: 5d:29:db:f3:21:e2:f7:7f:d0:0a:65:26:5f:4f:2b: 7c:e1:45:8b:9c:ff:c4:c5:77:f2:5f:f3:ba:6f:62: 3a:79:c1:8f:51:b5:0f:32:16:16:98:74:d1:79:b0: 67:b0:15:19:52:70:39:68:17:94:ca:71:69:46:6b: 42:c7:fa:0b:e6:e4:0f:b7:ad:78:0b:ad:51:30:c3: d5:c6:7c:e4:fc:60:c4:52:23:23:6d:b9:6f:e7:58: eb:89:17:00:0a:85:c4:17:7e:3d:f6:b6:bd:02:80: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0E:BB:75:73:B0:28:09:31:B1:1A:31:57:0B:FB:2E:F4:23:C4:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl X509v3 Authority Key Identifier: keyid:A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer sbgp-ipAddrBlock: critical IPv4: 152.160.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:35:51:e7:ca:ca:4e:90:40:8c:97:ab:8a:bc:f8:59:84:57: f6:20:07:55:88:9a:8d:6e:4e:c9:7d:ea:93:e6:d2:1f:6f:c6: b4:4f:f0:a2:59:e8:03:d0:d0:cb:0b:de:36:0f:90:bf:dd:ca: 04:2b:4f:9a:94:a0:d7:46:f6:40:8e:36:be:00:db:d4:a5:56: dc:40:40:c2:74:ac:e9:4c:9a:6c:aa:c5:91:60:bd:9d:b8:85: 6d:52:ac:e5:42:02:1a:be:a8:a4:94:17:d7:c9:52:4e:d0:53: 14:41:87:f5:cf:95:22:47:0b:2d:10:11:5c:e9:84:75:ef:5b: b3:04:dd:86:6b:74:34:76:d0:2f:41:1f:92:d9:5e:e6:e4:bd: 34:03:be:2b:90:bd:eb:69:db:69:df:be:af:4f:d4:39:be:ba: ca:45:82:8b:45:58:6a:ed:7a:e1:0c:69:94:c3:ba:d5:72:aa: d0:d2:41:a6:a3:74:9f:f8:5a:b3:b7:1e:1a:f1:f1:e3:7e:d7: aa:f4:cc:d6:12:fa:72:32:51:eb:1b:4a:c7:c0:e7:c4:e4:4d: 65:c1:b1:f6:a8:fb:2b:cb:fe:2b:1b:1c:6c:28:87:c1:9e:06: 44:a0:bb:59:21:7e:da:f0:5e:09:9b:32:d7:5e:67:fe:92:f8: 80:56:03:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBr5fPWgN7GQ/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiY2E1NDYtY2E4MS00OGY1LWJkZDQtOGMxMTFiYTUy M2VhMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZDE3ZGE0NDMtOGM0YS00NWY2LWIwYjctODZlZjBiOWM3ZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLPcsH5arauyynxTk5Zzv5SzwSN1CjPKKm1s +jWqDEEp1XgqAhXzPLjIIU0zpzEIeLvXN5Vn2xZta6n2bKoNlOuU4h9Yx5b+EI7P oxlalPjWjW4a4NYKPMpb4Ba9meC+4CWepqF3nSEMAqu6wZ9qLivHsFivIOT1fh7+ ykBAcmtL2Bhq1RGo/DQV3aUJIsutrXKsCpVdKdvzIeL3f9AKZSZfTyt84UWLnP/E xXfyX/O6b2I6ecGPUbUPMhYWmHTRebBnsBUZUnA5aBeUynFpRmtCx/oL5uQPt614 C61RMMPVxnzk/GDEUiMjbblv51jriRcACoXEF3499ra9AoBrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcOu3VzsCgJMbEaMVcL+y70I8TXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYWJj YTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzExMWJhNTIzZWEvMTBkMWJiODQtZTZlMi0z NjJiLTk1MDUtNmNkNTljZWQ3N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2FiY2E1NDYtY2E4MS00OGY1LWJk ZDQtOGMxMTFiYTUyM2VhLzNhYmNhNTQ2LWNhODEtNDhmNS1iZGQ0LThjMTExYmE1 MjNlYS5jcmwwHwYDVR0jBBgwFoAUoYEZY9Vg9XWnqQ30oiBjUGbpybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYWJjYTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzEx MWJhNTIzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmKBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo1UefKyk6QQIyXq4q8+FmEV/YgB1WImo1uTsl96pPm0h9vxrRP8KJZ 6APQ0MsL3jYPkL/dygQrT5qUoNdG9kCONr4A29SlVtxAQMJ0rOlMmmyqxZFgvZ24 hW1SrOVCAhq+qKSUF9fJUk7QUxRBh/XPlSJHCy0QEVzphHXvW7ME3YZrdDR20C9B H5LZXubkvTQDviuQvetp22nfvq9P1Dm+uspFgotFWGrteuEMaZTDutVyqtDSQaaj dJ/4WrO3Hhrx8eN+16r0zNYS+nIyUesbSsfA58TkTWXBsfao+yvL/isbHGwoh8Ge BkSgu1khftrwXgmbMtdeZ/6S+IBWA6o= -----END CERTIFICATE-----Generated at Wed Apr 30 00:51:56 2025 by rpki-client