$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa File: bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa (raw, json) Hash identifier: zciBfcKZGVA+FAo2CUXBYf5VkO4H2tsvsRn/IAiuusY= Subject key identifier: 6E:17:4C:D0:41:E7:13:85:A8:FE:DA:AF:EE:17:F2:BA:52:82:3F:36 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849912F31E897D07AAC42C8EA80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 54994 IP address blocks: 157.185.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:31:e8:97:d0:7a:ac:42:c8:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=45a37634-1785-4b76-8d3b-f151dd7ad2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:c3:91:cf:8c:da:98:18:6c:67:db:19:98: a1:e4:d2:21:b4:2c:76:dd:6c:0d:d4:de:fa:fd:41: 98:6e:30:63:e8:d6:10:dd:1a:9a:7e:e6:7b:b4:58: e4:c2:1d:82:9a:ef:26:4e:29:36:fe:8a:46:33:81: 09:d3:bb:9d:1e:91:4c:8a:f3:7b:f3:da:f0:d6:36: 34:45:cc:f1:53:f3:85:5a:66:be:58:93:c7:a5:6e: fb:26:04:f9:05:89:c4:fc:bc:ce:10:e4:49:1f:33: ad:9e:d5:89:71:2f:b3:d4:a7:37:67:4f:64:4b:b6: 43:a0:fa:10:d9:8f:92:40:6f:63:73:f8:2e:e4:ae: b5:e1:ac:8f:73:eb:17:4b:4a:db:fd:fc:e3:a2:99: 8a:ee:7f:e9:72:1b:8c:3d:14:3a:66:6e:44:a1:00: 9f:38:d5:cf:b3:8b:f0:b0:11:7f:d9:1d:57:64:7c: 8c:c8:d1:d3:6a:08:9e:c3:47:5f:4d:31:a7:ca:4c: dd:30:92:24:52:02:3f:e8:fe:5d:de:1e:57:a3:17: 72:80:4c:41:5d:5a:79:a1:b3:47:4a:c1:76:06:ab: a1:ce:87:82:33:6b:a0:09:a9:90:b6:87:65:5e:3f: af:e0:9a:a0:99:cf:b7:5a:a9:4d:6e:f0:5c:bd:f5: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:4C:D0:41:E7:13:85:A8:FE:DA:AF:EE:17:F2:BA:52:82:3F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6e:00:38:49:fb:f3:1b:89:6d:a9:7e:ee:93:15:3c:c5:a6: 09:3b:51:9d:04:3b:36:40:f3:65:ca:3a:81:a3:75:34:ee:91: 20:ec:53:35:f9:b3:74:26:fc:2f:7d:5d:39:fd:95:59:94:28: d7:61:74:60:ef:42:4d:1d:2d:a0:89:ed:91:a3:a3:fd:79:b9: 0d:bb:a5:51:0b:22:ce:71:a3:68:cc:79:86:03:7a:e8:20:50: f1:62:98:88:d3:e3:5e:cf:35:a6:89:7d:11:50:8b:8a:d7:23: 27:75:b0:9e:2b:8e:9b:1a:11:b7:33:43:16:89:00:4f:73:6a: 6a:30:c3:16:18:22:58:5c:68:8d:d9:92:f1:d6:fc:75:62:23: 8a:b8:2b:59:56:f8:34:25:35:42:5f:d5:ce:7c:20:18:a8:19: b7:be:05:c4:fa:7f:c0:89:f5:1d:0c:07:94:1a:58:e8:39:25: 2c:95:c8:70:0d:c8:46:71:fe:ae:58:95:16:d1:44:95:31:da: b4:4e:27:fc:32:3b:d0:93:c1:42:96:20:ee:d7:f9:83:cf:53: 6b:cc:99:af:02:21:bc:15:21:14:cc:57:f3:42:0c:71:1e:8c: 3d:e6:a9:dd:51:6f:34:a6:95:5b:68:e3:cf:00:cd:5d:cc:71: 4c:7b:98:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLzHol9B6rELI6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NDVhMzc2MzQtMTc4NS00Yjc2LThkM2ItZjE1MWRkN2FkMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVnDkc+M2pgYbGfbGZih5NIhtCx23WwN1N76 /UGYbjBj6NYQ3RqafuZ7tFjkwh2Cmu8mTik2/opGM4EJ07udHpFMivN789rw1jY0 RczxU/OFWma+WJPHpW77JgT5BYnE/LzOEORJHzOtntWJcS+z1Kc3Z09kS7ZDoPoQ 2Y+SQG9jc/gu5K614ayPc+sXS0rb/fzjopmK7n/pchuMPRQ6Zm5EoQCfONXPs4vw sBF/2R1XZHyMyNHTagiew0dfTTGnykzdMJIkUgI/6P5d3h5XoxdygExBXVp5obNH SsF2BquhzoeCM2ugCamQtodlXj+v4Jqgmc+3WqlNbvBcvfXV9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4XTNBB5xOFqP7ar+4X8rpSgj82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYmZhMGJhYjMtYTU2NC0z ZTdjLWFiZDgtOGEwMDlmMTA0N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1uADhJ+/MbiW2pfu6TFTzFpgk7UZ0EOzZA82XKOoGjdTTukSDsUzX5 s3Qm/C99XTn9lVmUKNdhdGDvQk0dLaCJ7ZGjo/15uQ27pVELIs5xo2jMeYYDeugg UPFimIjT417PNaaJfRFQi4rXIyd1sJ4rjpsaEbczQxaJAE9zamowwxYYIlhcaI3Z kvHW/HViI4q4K1lW+DQlNUJf1c58IBioGbe+BcT6f8CJ9R0MB5QaWOg5JSyVyHAN yEZx/q5YlRbRRJUx2rROJ/wyO9CTwUKWIO7X+YPPU2vMma8CIbwVIRTMV/NCDHEe jD3mqd1RbzSmlVto488AzV3McUx7mKM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:40 2025 by rpki-client