$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json) Hash identifier: I9EATP1yqYY9sFoXYpSfC5SIm2CcaL3Rir0ECPHCHa4= Subject key identifier: 1A:24:6E:AF:46:D7:8F:E6:D1:26:FA:B3:27:A7:63:CD:6C:B8:D7:A1 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849DF5A6E2791C717458D85D000 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 212238 IP address blocks: 158.115.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6e:27:91:c7:17:45:8d:85:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=4671fb03-68db-4a18-995b-d17a4b824983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f0:e2:04:a0:a1:95:80:77:5b:65:70:e8:ab: e8:58:b6:4e:60:e8:8f:40:65:d2:bb:e9:a1:a5:74: c0:2f:70:18:06:17:5c:69:ed:b3:80:dd:a0:01:a4: 66:46:fd:7c:5c:0e:22:f6:59:a6:0e:e7:03:42:c8: 7c:10:45:89:36:31:e2:d3:fb:c1:de:93:5f:77:3b: 90:28:5b:11:c7:66:b7:74:33:87:55:01:fc:3e:8c: 20:e2:a2:14:34:99:ca:97:ea:37:ae:ba:ab:c6:d3: 9e:45:57:91:d6:f7:10:91:58:a3:25:92:19:44:d6: 9f:1e:19:8d:d2:39:56:98:31:15:7c:5c:2b:6e:da: e6:65:ec:ce:bf:a8:3f:c3:e3:e9:0e:01:49:c8:1a: 94:86:34:98:21:05:a2:be:65:8c:9b:c5:07:0a:9d: 94:60:70:40:29:b3:a4:7f:e7:48:60:7c:6a:2e:4e: 8f:e3:85:98:9f:d2:db:19:11:cb:fa:59:eb:b0:b5: 0e:e1:77:8f:9b:27:3c:80:a8:c2:dd:d8:7b:a9:a7: 67:ce:2a:36:fe:6d:d6:26:64:15:e6:01:77:7d:f3: 43:25:2f:00:ea:18:61:be:5c:e9:73:8a:c7:ca:cd: a2:fd:c2:4c:30:2a:7b:6f:5b:e5:c5:09:82:59:56: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:24:6E:AF:46:D7:8F:E6:D1:26:FA:B3:27:A7:63:CD:6C:B8:D7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7a:ea:47:d1:e0:6e:e3:60:53:0f:47:08:6e:fa:bf:b8:fe: df:0f:de:dd:12:29:af:84:3c:78:a6:a8:06:41:a6:df:41:7c: eb:c8:9d:46:ad:56:38:f7:9c:d9:19:8c:fa:90:a3:03:55:33: 55:2a:06:be:c3:2d:e0:9a:13:f4:46:90:d8:3d:ab:15:0c:52: 5e:df:ff:13:fc:f7:44:57:20:56:07:1e:c1:dd:b8:15:67:70: ce:82:9c:b3:5b:47:31:a1:76:dd:da:9a:11:f3:5e:8f:2f:bf: 23:3a:45:1a:57:c4:72:09:08:b4:c7:ca:f2:b0:ab:7c:cc:a6: 0a:d6:05:19:db:79:ba:02:ac:b9:9c:d3:e3:0a:e3:58:a3:c2: 50:50:f8:40:71:de:71:c8:b3:a9:11:bf:3d:5a:fc:5f:e8:68: 35:28:bf:8e:f3:7d:77:fa:96:10:6d:02:89:13:e0:54:0e:eb: 9a:e4:e4:b8:44:b2:1c:11:21:f6:8a:1b:96:2a:9f:90:28:47: c8:bc:e1:95:37:65:3f:95:4e:1f:66:92:64:77:19:13:65:91: 79:87:e0:75:6e:63:be:69:02:1b:54:c3:6a:b1:6c:3a:03:08: 38:26:5c:37:12:f0:0d:03:19:e4:80:7c:bc:11:d2:70:81:e6: 94:aa:0b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWm4nkccXRY2F0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NDY3MWZiMDMtNjhkYi00YTE4LTk5NWItZDE3YTRiODI0OTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PDiBKChlYB3W2Vw6KvoWLZOYOiPQGXSu+mh pXTAL3AYBhdcae2zgN2gAaRmRv18XA4i9lmmDucDQsh8EEWJNjHi0/vB3pNfdzuQ KFsRx2a3dDOHVQH8Powg4qIUNJnKl+o3rrqrxtOeRVeR1vcQkVijJZIZRNafHhmN 0jlWmDEVfFwrbtrmZezOv6g/w+PpDgFJyBqUhjSYIQWivmWMm8UHCp2UYHBAKbOk f+dIYHxqLk6P44WYn9LbGRHL+lnrsLUO4XePmyc8gKjC3dh7qadnzio2/m3WJmQV 5gF3ffNDJS8A6hhhvlzpc4rHys2i/cJMMCp7b1vlxQmCWVYR7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBokbq9G14/m0Sb6syenY81suNehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU3MjA3YWEtMzNiYS0z NTE3LWJhOTItZGJlYWU3NTZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV66kfR4G7jYFMPRwhu+r+4/t8P3t0SKa+EPHimqAZBpt9BfOvInUat Vjj3nNkZjPqQowNVM1UqBr7DLeCaE/RGkNg9qxUMUl7f/xP890RXIFYHHsHduBVn cM6CnLNbRzGhdt3amhHzXo8vvyM6RRpXxHIJCLTHyvKwq3zMpgrWBRnbeboCrLmc 0+MK41ijwlBQ+EBx3nHIs6kRvz1a/F/oaDUov47zfXf6lhBtAokT4FQO65rk5LhE shwRIfaKG5Yqn5AoR8i84ZU3ZT+VTh9mkmR3GRNlkXmH4HVuY75pAhtUw2qxbDoD CDgmXDcS8A0DGeSAfLwR0nCB5pSqCxY= -----END CERTIFICATE-----Generated at Sat Jun 14 04:25:37 2025 by rpki-client