$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa File: f851c4bc-a18d-3492-9e35-2d61175cac7b.roa (raw, json) Hash identifier: Cy1qThRSiXG57Jsu6VHx6nnAh+3yG0B4eljVACXwTcM= Subject key identifier: 71:C6:9A:C9:5A:3E:69:76:E2:4D:19:12:10:EC:4D:1B:E9:91:8E:D5 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F43285849806F1B69859EA16C7F0BD640 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 29909 IP address blocks: 216.157.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:1b:69:85:9e:a1:6c:7f:0b:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=be147bc7-528f-44d3-ba3a-3a4f0dd52b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c2:0e:35:d1:86:41:d2:0b:c1:34:d8:1c:06: 22:08:fd:9c:f1:98:93:4a:96:da:b3:ed:d4:f3:1c: 5a:e5:91:cf:a9:19:ab:02:ef:e3:fa:82:cb:8d:1e: 4d:fe:33:4d:bd:5a:91:32:8d:d5:71:74:78:b2:44: 5d:3f:d7:6d:ef:7b:10:4b:2c:3e:46:47:8b:46:45: 66:f4:9d:8e:95:42:c6:f1:86:cf:df:07:52:b2:1c: 0c:4d:16:8e:a5:f7:56:a7:03:96:39:7b:18:9a:6d: ff:ae:e3:2a:36:18:c8:c5:03:a2:11:61:45:06:29: 61:b7:97:45:61:52:9e:37:b5:6d:61:ab:5f:2a:7b: b5:0b:74:17:7e:0f:26:21:d4:de:f7:09:a8:01:ab: d6:98:86:43:dc:6d:d0:f5:de:49:fb:9b:6a:ed:be: 93:0b:3d:ac:be:60:7d:47:a2:45:7b:21:73:e6:c4: c8:88:17:28:28:eb:69:25:a3:ce:3a:50:7a:84:13: a4:aa:50:28:75:49:55:a4:59:f7:9b:9f:a0:3b:1b: 4e:04:19:cb:ba:d3:d3:48:39:e1:0b:b1:5c:45:61: 41:53:b2:f9:a6:da:57:72:33:f8:ac:89:89:43:44: 0d:6b:f0:90:ce:ce:f4:8d:45:65:d1:e3:a8:b9:6d: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C6:9A:C9:5A:3E:69:76:E2:4D:19:12:10:EC:4D:1B:E9:91:8E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 216.157.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c0:b9:6c:ec:83:49:59:0d:a4:7f:77:e6:3a:ce:b3:28:63: d8:08:17:46:45:38:73:0f:50:32:bf:57:21:81:b6:fd:ef:1d: 8b:a7:c4:92:c3:d9:43:fd:1b:71:af:00:d6:56:ac:71:5f:72: 6b:a8:ce:bb:e8:fd:01:77:c5:37:ed:10:cb:2d:ce:c9:49:e8: 5f:97:64:a0:58:19:9a:58:c1:67:4d:7f:22:79:a7:de:77:a2: f5:50:8c:a7:65:24:bf:1d:a9:8e:93:17:8c:ec:31:84:7e:90: 5b:81:b6:18:92:78:dd:a2:fe:6f:be:c3:05:dc:41:c3:95:78: 4b:4f:f2:8a:84:68:ae:f2:9a:6c:1c:61:65:ea:2d:f1:ef:07: ea:2c:5a:63:3b:3e:53:ae:df:85:47:71:13:10:72:93:81:c3: 02:a3:28:cf:3b:42:e5:49:56:ea:11:c7:3a:c3:aa:3c:6a:8a: 58:da:a3:11:e8:34:aa:cc:8a:a9:1e:a9:62:56:c1:fb:78:04: 62:d2:df:1d:46:d2:41:04:f6:73:31:00:58:cc:e9:50:4b:cd: 62:9f:ab:17:2f:96:f5:a1:c5:c9:e6:26:65:5c:43:68:39:be: d6:89:35:86:f2:e1:63:3d:4c:40:2e:48:3d:a5:5f:f4:39:e7: 1d:13:43:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxtphZ6hbH8L1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk YmUxNDdiYzctNTI4Zi00NGQzLWJhM2EtM2E0ZjBkZDUyYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMIONdGGQdILwTTYHAYiCP2c8ZiTSpbas+3U 8xxa5ZHPqRmrAu/j+oLLjR5N/jNNvVqRMo3VcXR4skRdP9dt73sQSyw+RkeLRkVm 9J2OlULG8YbP3wdSshwMTRaOpfdWpwOWOXsYmm3/ruMqNhjIxQOiEWFFBilht5dF YVKeN7VtYatfKnu1C3QXfg8mIdTe9wmoAavWmIZD3G3Q9d5J+5tq7b6TCz2svmB9 R6JFeyFz5sTIiBcoKOtpJaPOOlB6hBOkqlAodUlVpFn3m5+gOxtOBBnLutPTSDnh C7FcRWFBU7L5ptpXcjP4rImJQ0QNa/CQzs70jUVl0eOouW015wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHGmslaPml24k0ZEhDsTRvpkY7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvZjg1MWM0YmMtYTE4ZC0z NDkyLTllMzUtMmQ2MTE3NWNhYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2J2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/AuWzsg0lZDaR/d+Y6zrMoY9gIF0ZFOHMPUDK/VyGBtv3vHYunxJLD 2UP9G3GvANZWrHFfcmuozrvo/QF3xTftEMstzslJ6F+XZKBYGZpYwWdNfyJ5p953 ovVQjKdlJL8dqY6TF4zsMYR+kFuBthiSeN2i/m++wwXcQcOVeEtP8oqEaK7ymmwc YWXqLfHvB+osWmM7PlOu34VHcRMQcpOBwwKjKM87QuVJVuoRxzrDqjxqiljaoxHo NKrMiqkeqWJWwft4BGLS3x1G0kEE9nMxAFjM6VBLzWKfqxcvlvWhxcnmJmVcQ2g5 vtaJNYby4WM9TEAuSD2lX/Q55x0TQzY= -----END CERTIFICATE-----Generated at Tue Apr 29 09:25:58 2025 by rpki-client