$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/af588dc9-3760-36b8-898a-4b74432f212b.roa File: af588dc9-3760-36b8-898a-4b74432f212b.roa (raw, json) Hash identifier: yMICOC43htXFfU365FZkfD9XbcQ7DeNZF9WdzTWOINY= Subject key identifier: 10:46:02:0C:9B:95:F7:2E:B2:0E:9E:55:68:D9:69:CE:FE:E0:82:3E Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C4376206D8C0ED03D3D780 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/af588dc9-3760-36b8-898a-4b74432f212b.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 157.52.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:37:62:06:d8:c0:ed:03:d3:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=0ab130d9-cc33-49c0-895d-6b187db75f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:a4:1e:e9:52:40:ec:f1:7d:af:a5:43:c6: 50:68:dc:24:b5:11:72:08:56:1b:cd:f3:c1:b2:d0: 36:41:d6:e4:e7:6e:3f:94:8a:21:ea:a4:bb:33:a4: d8:67:64:51:c5:ec:ad:64:e9:86:97:9a:45:45:c0: b8:ed:0b:b7:11:a4:63:e2:ae:00:94:9b:00:98:fa: 15:04:da:56:47:0b:41:53:04:1d:ee:c2:f4:3e:94: 0f:82:ef:28:3f:25:fc:88:35:fa:c6:a5:4f:31:90: f2:6c:9b:73:ae:4c:3b:e4:04:01:da:58:f5:ca:88: d9:58:f8:f4:e6:2b:c2:79:41:bd:62:54:17:6c:46: e5:6e:27:82:eb:32:6d:99:df:3c:60:e6:2e:93:49: f6:ce:2b:7f:d4:a8:38:ca:20:ef:b4:59:f9:47:85: df:29:ba:8f:88:23:dc:32:36:67:1d:7f:ae:56:6e: 68:3c:52:0a:c6:25:a4:f8:af:f6:8e:a4:64:85:fd: 53:1d:fa:46:a3:ce:57:e1:e1:3d:1a:1d:97:46:aa: 7f:f4:10:c2:17:cc:24:74:fd:b4:84:4c:ed:d9:3b: 03:27:17:b1:8a:21:53:86:fe:20:b4:60:ac:66:80: 3a:e9:cc:62:c7:b5:54:e6:17:dd:04:a3:c3:0a:fc: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:46:02:0C:9B:95:F7:2E:B2:0E:9E:55:68:D9:69:CE:FE:E0:82:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/af588dc9-3760-36b8-898a-4b74432f212b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 157.52.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1a:de:be:3f:f0:95:03:6f:ed:ca:ed:c4:6f:dd:d2:04:55: 38:69:1e:53:70:8c:8e:4c:9a:c2:52:eb:96:f9:6b:1e:b7:59: a9:3b:62:4f:ce:67:7c:6b:7e:66:4a:40:5b:0b:fd:6a:d0:7b: f0:53:a3:18:93:28:1e:f8:dc:5a:4a:b0:20:5f:3f:dd:61:16: 7a:43:93:ef:0e:0b:8b:78:15:1e:f4:cd:c4:43:3d:77:c3:c6: 7a:26:81:fa:7e:a0:a1:a9:cb:eb:a9:dc:91:ba:68:ea:08:02: fe:c6:a5:ba:d2:2a:71:95:fa:6d:6a:f7:03:e3:f7:40:ce:38: a2:b4:83:9f:a4:1e:7a:28:91:7f:f4:2c:6b:f8:e2:47:87:d0: 14:c4:fb:54:d2:e4:79:5b:18:ac:4e:1f:66:87:64:2f:db:fc: 54:b2:c6:ff:f1:85:ec:40:e6:fc:e0:77:6e:20:be:66:ee:66: d8:d8:9f:f2:fa:5f:9f:d3:91:63:6b:fe:20:e8:f4:0f:33:cf: ff:5b:60:7a:4c:99:df:ba:0c:8a:70:f5:32:df:2e:ff:5b:83: 61:69:a0:64:ca:dd:3f:be:68:5c:44:90:49:c8:7e:92:70:72: 63:fa:76:b1:e2:b5:0a:b3:3c:6b:23:4d:ea:82:68:0b:66:cf: 5d:a4:f7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDdiBtjA7QPT14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MGFiMTMwZDktY2MzMy00OWMwLTg5NWQtNmIxODdkYjc1ZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE6kHulSQOzxfa+lQ8ZQaNwktRFyCFYbzfPB stA2Qdbk524/lIoh6qS7M6TYZ2RRxeytZOmGl5pFRcC47Qu3EaRj4q4AlJsAmPoV BNpWRwtBUwQd7sL0PpQPgu8oPyX8iDX6xqVPMZDybJtzrkw75AQB2lj1yojZWPj0 5ivCeUG9YlQXbEblbieC6zJtmd88YOYuk0n2zit/1Kg4yiDvtFn5R4XfKbqPiCPc MjZnHX+uVm5oPFIKxiWk+K/2jqRkhf1THfpGo85X4eE9Gh2XRqp/9BDCF8wkdP20 hEzt2TsDJxexiiFThv4gtGCsZoA66cxix7VU5hfdBKPDCvwnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBGAgyblfcusg6eVWjZac7+4II+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWY1ODhkYzktMzc2MC0z NmI4LTg5OGEtNGI3NDQzMmYyMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTRBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwa3r4/8JUDb+3K7cRv3dIEVThpHlNwjI5MmsJS65b5ax63Wak7Yk/O Z3xrfmZKQFsL/WrQe/BToxiTKB743FpKsCBfP91hFnpDk+8OC4t4FR70zcRDPXfD xnomgfp+oKGpy+up3JG6aOoIAv7GpbrSKnGV+m1q9wPj90DOOKK0g5+kHnookX/0 LGv44keH0BTE+1TS5HlbGKxOH2aHZC/b/FSyxv/xhexA5vzgd24gvmbuZtjYn/L6 X5/TkWNr/iDo9A8zz/9bYHpMmd+6DIpw9TLfLv9bg2FpoGTK3T++aFxEkEnIfpJw cmP6drHitQqzPGsjTeqCaAtmz12k9xQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:47:43 2025 by rpki-client