$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa34e75c-092f-3aac-b049-a7b247568af9.roa File: aa34e75c-092f-3aac-b049-a7b247568af9.roa (raw, json) Hash identifier: RQH7B00pvnDQJxEm//OWNL0BZNhWeVkz14kKUpl+U74= Subject key identifier: 92:65:EC:52:1D:94:CF:CA:98:8B:5E:0E:17:65:D6:86:FB:58:46:ED Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C43DC3E707477559E0C300 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa34e75c-092f-3aac-b049-a7b247568af9.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 151.101.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:3d:c3:e7:07:47:75:59:e0:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=44ae1c39-e0ff-4052-b1b9-e620f6023e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:2c:52:72:4c:92:9e:79:5c:0c:06:ca:31: a2:1e:17:19:11:9e:11:02:88:33:34:fb:c6:27:b3: 14:65:5a:77:d2:63:47:fb:88:07:e9:1c:30:25:86: 78:6b:8d:a8:4d:f0:1a:2c:b7:5c:f7:4c:47:48:d2: 6a:73:e9:98:b8:da:6a:c2:48:d5:36:83:dc:3e:37: ec:fb:9a:7c:29:b9:7d:8b:19:2f:b9:e8:95:67:bf: 5d:b2:7f:86:80:89:43:ff:9f:ca:65:b2:a4:8e:80: df:18:27:69:91:c2:19:c8:0e:69:4f:92:74:af:1c: 3f:e6:ef:30:e6:7a:7b:7f:ed:18:ad:59:d9:fb:0f: c0:71:1c:0b:4b:39:ac:e4:90:f2:80:ca:9a:78:d8: b8:b1:75:8b:35:68:e4:83:58:83:4a:a2:1c:6f:eb: 28:09:86:f5:93:7b:29:43:13:93:68:48:3d:78:4d: 43:52:e2:e2:33:3b:ce:01:c0:23:26:d0:1e:8d:c0: 21:80:28:99:00:4d:7c:fa:3d:b1:b5:8b:fb:d8:66: 39:bb:52:f7:16:99:4d:7e:f3:40:0f:49:aa:f7:be: df:a3:04:31:d6:c4:09:d5:3f:33:5f:e8:b4:9b:88: 5f:be:05:fb:1a:5b:71:d0:02:31:ac:23:b9:6e:c6: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:65:EC:52:1D:94:CF:CA:98:8B:5E:0E:17:65:D6:86:FB:58:46:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa34e75c-092f-3aac-b049-a7b247568af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 151.101.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:12:e1:db:c2:a7:52:4b:b8:b4:81:31:cc:d2:19:22:f2:91: a9:ed:37:30:bc:4f:a4:5a:c4:01:67:29:07:72:bc:4a:d2:a5: 5f:ea:3e:0a:10:46:71:30:65:4e:37:9c:1a:54:3a:f2:92:75: ba:12:a9:11:11:36:7c:f5:f8:2d:ce:16:fc:3b:55:ad:1a:00: a2:33:bb:97:8f:97:bf:4b:3a:b4:f8:20:ce:33:1c:52:1d:1c: 30:c0:f2:d4:e2:f2:b0:3c:e0:c1:ad:e5:c7:48:ee:e3:2b:b6: 0a:99:8c:bf:a1:d9:a9:36:85:71:83:4a:fe:b7:78:5d:20:6c: 12:4a:a4:dd:a5:2e:d1:31:7b:87:c9:8d:73:6e:cd:71:b2:5a: 33:ee:e9:fb:59:d5:83:39:06:ff:a2:b8:5d:40:60:a5:b3:06: 42:f6:be:f9:36:48:7d:ed:56:4a:a0:0d:7b:39:d9:44:d5:38: 3c:9c:3a:44:4b:63:d7:77:c6:52:c8:d5:bc:d1:a4:a7:bd:94: 64:e0:0b:bd:4b:98:59:5b:b1:80:e6:0f:02:24:a0:11:d6:87: 98:59:58:b0:7d:50:33:43:c7:cf:dd:03:72:d0:14:9a:cf:cd: a3:47:2a:de:7b:67:56:c9:bd:52:11:d2:11:ba:3b:d8:eb:35: 32:3b:b8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxD3D5wdHdVngwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NDRhZTFjMzktZTBmZi00MDUyLWIxYjktZTYyMGY2MDIzZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlgsUnJMkp55XAwGyjGiHhcZEZ4RAogzNPvG J7MUZVp30mNH+4gH6RwwJYZ4a42oTfAaLLdc90xHSNJqc+mYuNpqwkjVNoPcPjfs +5p8Kbl9ixkvueiVZ79dsn+GgIlD/5/KZbKkjoDfGCdpkcIZyA5pT5J0rxw/5u8w 5np7f+0YrVnZ+w/AcRwLSzms5JDygMqaeNi4sXWLNWjkg1iDSqIcb+soCYb1k3sp QxOTaEg9eE1DUuLiMzvOAcAjJtAejcAhgCiZAE18+j2xtYv72GY5u1L3FplNfvNA D0mq977fowQx1sQJ1T8zX+i0m4hfvgX7Gltx0AIxrCO5bsamKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJl7FIdlM/KmIteDhdl1ob7WEbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWEzNGU3NWMtMDkyZi0z YWFjLWIwNDktYTdiMjQ3NTY4YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2UsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoS4dvCp1JLuLSBMczSGSLykantNzC8T6RaxAFnKQdyvErSpV/qPgoQ RnEwZU43nBpUOvKSdboSqRERNnz1+C3OFvw7Va0aAKIzu5ePl79LOrT4IM4zHFId HDDA8tTi8rA84MGt5cdI7uMrtgqZjL+h2ak2hXGDSv63eF0gbBJKpN2lLtExe4fJ jXNuzXGyWjPu6ftZ1YM5Bv+iuF1AYKWzBkL2vvk2SH3tVkqgDXs52UTVODycOkRL Y9d3xlLI1bzRpKe9lGTgC71LmFlbsYDmDwIkoBHWh5hZWLB9UDNDx8/dA3LQFJrP zaNHKt57Z1bJvVIR0hG6O9jrNTI7uME= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:36 2025 by rpki-client