$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa File: a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa (raw, json) Hash identifier: vvEB7Ejdy8aYQsbEHeaiYYFpL+ZhGErsDJFJp0ODoEs= Subject key identifier: 84:14:24:9C:40:DD:6B:39:DC:AC:8A:AD:A7:38:E4:47:92:30:1C:47 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584930DE70A7421462FE8FC7EFC0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 9009 IP address blocks: 158.115.232.0/24 maxlen: 24 158.115.233.0/24 maxlen: 24 158.115.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:70:a7:42:14:62:fe:8f:c7:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=0a5bf1da-76d6-402e-bedb-dafd57eb8db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:26:13:85:7d:4f:c5:ea:ec:7f:cc:16:37: 23:c8:a4:ae:44:be:91:47:a8:52:44:d4:e7:3d:53: b4:4d:a7:dd:18:9e:c7:5a:42:e1:98:82:10:55:c5: 91:24:33:7f:bd:ea:76:e6:7d:4a:51:c3:1b:e0:80: 5c:2f:d2:19:4e:92:eb:bd:e6:8e:82:b2:95:4a:e9: a1:b9:2d:eb:f8:49:02:b1:37:3a:d7:02:46:bc:21: 00:68:66:69:9d:b1:fa:30:25:6c:2a:55:92:35:ee: 5d:d8:4c:a7:76:3a:cc:23:19:18:38:1e:a5:d7:eb: 92:d4:78:ec:b9:61:ca:32:89:1d:77:a4:69:ce:e7: 96:03:51:59:ce:ea:52:68:c9:6d:7e:b3:bb:d8:0c: 62:e0:49:5f:30:e9:5f:d9:32:3a:29:51:b7:86:27: 89:5c:7f:73:da:18:b5:53:4a:a9:e8:5b:3f:9b:1a: 26:f9:70:1c:2b:7e:3f:be:8a:af:71:c1:e9:49:18: 3b:b3:01:97:10:77:e7:6d:6f:be:97:53:a1:3f:5c: fe:bb:c2:6a:42:76:1a:37:a4:e8:88:cf:ce:39:c4: bc:0a:8a:7c:5d:2d:c3:b9:96:42:51:32:54:18:81: ef:c4:85:37:92:23:06:0b:ce:aa:46:b4:77:e1:f8: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:14:24:9C:40:DD:6B:39:DC:AC:8A:AD:A7:38:E4:47:92:30:1C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b1:48:7e:c9:ed:db:1f:cf:1e:2c:cd:b3:5f:c3:a1:ab:39: 8d:2d:6c:33:b8:78:c2:06:ff:72:60:61:0e:f8:ac:6f:98:e5: 7c:77:f4:29:03:8e:9b:a8:07:2b:a1:15:31:56:0b:6b:9a:3d: 98:68:a9:57:ea:a7:f6:65:f8:8e:46:75:18:1e:bd:1a:4f:19: 7a:97:eb:8d:4a:40:e1:57:43:0f:18:c6:87:73:24:7b:47:98: 09:3d:d5:47:dd:ed:30:81:4b:d9:85:3f:4f:1b:99:25:ed:27: c2:34:dc:d0:15:6e:17:95:cb:3c:7e:0d:e6:20:05:9c:1b:fd: 9d:76:17:a7:92:0e:14:0d:ad:79:c6:1f:b2:b6:7a:98:7b:87: a7:b8:4e:b2:fb:cf:20:8d:35:3a:47:22:d2:7e:3f:3b:1a:3d: c9:2e:de:cf:b3:ac:38:80:63:01:ff:0d:8c:f5:f5:32:a6:d6: c6:8d:34:bb:85:bc:8f:59:ff:e5:07:22:be:14:1b:be:84:1c: 72:e3:cd:c8:9a:4c:67:3d:2f:42:f1:a1:a2:ef:62:73:19:bc: fa:86:a3:dc:37:07:9a:f1:c5:98:74:88:2f:4d:7d:a9:cd:79: 6b:2e:69:ac:09:f5:c6:56:8f:bd:76:4a:5e:47:3e:3c:c9:fb: 8a:f7:29:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nCnQhRi/o/H78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MGE1YmYxZGEtNzZkNi00MDJlLWJlZGItZGFmZDU3ZWI4ZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq38mE4V9T8Xq7H/MFjcjyKSuRL6RR6hSRNTn PVO0TafdGJ7HWkLhmIIQVcWRJDN/vep25n1KUcMb4IBcL9IZTpLrveaOgrKVSumh uS3r+EkCsTc61wJGvCEAaGZpnbH6MCVsKlWSNe5d2EyndjrMIxkYOB6l1+uS1Hjs uWHKMokdd6RpzueWA1FZzupSaMltfrO72Axi4ElfMOlf2TI6KVG3hieJXH9z2hi1 U0qp6Fs/mxom+XAcK34/voqvccHpSRg7swGXEHfnbW++l1OhP1z+u8JqQnYaN6To iM/OOcS8Cop8XS3DuZZCUTJUGIHvxIU3kiMGC86qRrR34fiOjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQUJJxA3Ws53KyKrac45EeSMBxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTRmNGRmYmItNDM4Yi0z OWZiLTk4ZGItYWVkNWNiZDBjOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSxSH7J7dsfzx4szbNfw6GrOY0tbDO4eMIG/3JgYQ74rG+Y5Xx39CkD jpuoByuhFTFWC2uaPZhoqVfqp/Zl+I5GdRgevRpPGXqX641KQOFXQw8YxodzJHtH mAk91Ufd7TCBS9mFP08bmSXtJ8I03NAVbheVyzx+DeYgBZwb/Z12F6eSDhQNrXnG H7K2eph7h6e4TrL7zyCNNTpHItJ+PzsaPcku3s+zrDiAYwH/DYz19TKm1saNNLuF vI9Z/+UHIr4UG76EHHLjzciaTGc9L0LxoaLvYnMZvPqGo9w3B5rxxZh0iC9NfanN eWsuaawJ9cZWj712Sl5HPjzJ+4r3Kew= -----END CERTIFICATE-----Generated at Sat Apr 26 17:39:21 2025 by rpki-client