$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2814690c-02f7-33c9-b989-87a2d8358b34.roa File: 2814690c-02f7-33c9-b989-87a2d8358b34.roa (raw, json) Hash identifier: GN/XfTiaiOslAiPzjst1cKT1sk6YNVJ6LawuAhHUv9c= Subject key identifier: 2A:1D:93:2F:DA:92:88:51:00:33:D0:FD:F7:C1:D2:55:9A:33:58:B6 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F43285849A2C26DE0B79DD85F6F32B36F Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2814690c-02f7-33c9-b989-87a2d8358b34.roa Signing time: Thu 24 Apr 2025 20:06:32 +0000 ROA not before: Thu 24 Apr 2025 20:06:32 +0000 ROA not after: Wed 23 Jul 2025 20:06:32 +0000 asID: 10384 IP address blocks: 152.85.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:c2:6d:e0:b7:9d:d8:5f:6f:32:b3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Apr 24 20:06:32 2025 GMT Not After : Jul 23 20:06:32 2025 GMT Subject: CN=c69994ac-25e1-407f-a7dc-2f3743722e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:79:f1:75:a7:0d:24:3b:8c:51:f3:bb:06: 68:07:ed:d2:17:22:ad:c3:bf:8d:ce:f1:ed:65:73: d1:1b:e6:76:98:4e:41:b7:07:05:7c:ba:f1:91:b4: d7:a0:05:35:60:23:82:75:27:d7:21:b1:e7:52:e4: 9a:c5:dc:e5:ec:42:78:91:74:d7:26:48:7e:a4:d9: 96:dc:9b:70:05:10:9c:ba:a6:89:f7:e9:04:76:db: 2b:cf:7d:4b:5a:fe:0c:d0:ad:31:24:01:20:cd:aa: 2b:4b:76:cc:dc:97:36:4f:f0:ec:60:84:30:13:7b: 92:7e:9f:b6:6b:ef:27:93:c0:f2:f0:d3:5b:80:c6: 7f:88:20:cc:33:f5:14:32:5b:14:ce:06:c1:cd:17: 82:63:b5:eb:17:d5:48:2b:fd:2c:6b:22:fd:30:f7: dd:bb:bd:d8:33:fd:03:68:75:d6:29:32:22:6b:af: 91:fa:0b:3d:78:95:fa:34:13:94:16:2d:d8:17:7f: 7e:e9:4a:97:89:29:13:82:d3:58:b7:e6:ef:27:b9: 03:1c:72:12:b4:13:7e:41:81:ae:ab:17:e5:c6:f9: 75:da:c4:bb:f8:5f:23:b8:27:60:92:dc:39:64:a8: c0:bc:8f:32:d6:cc:71:f1:2b:6e:c8:41:24:72:ae: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1D:93:2F:DA:92:88:51:00:33:D0:FD:F7:C1:D2:55:9A:33:58:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2814690c-02f7-33c9-b989-87a2d8358b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.85.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a3:e8:fb:44:8a:66:ff:e8:b7:57:5f:65:dc:a2:83:39:99: ac:1c:38:01:76:82:5d:4d:09:64:ce:d5:cc:1f:48:92:43:e8: 15:a2:05:e4:10:35:ff:d9:ed:fd:5d:54:ce:94:b9:a4:68:28: 55:b9:50:9f:c4:da:77:8b:71:1f:ac:bc:6f:41:70:0d:fa:34: 48:8b:f5:0b:a4:7c:fe:55:8b:d9:98:b2:36:ca:fc:bb:0f:1d: f1:83:4d:77:60:d3:bd:67:e7:c0:4c:73:65:35:31:69:1b:a7: 9e:6d:b4:9e:f4:33:82:97:fa:67:eb:fb:e4:c0:f1:92:10:c0: 74:aa:5e:2e:82:c9:49:59:1e:b8:d7:d1:8b:74:09:56:1c:db: 04:1d:86:6b:5c:ec:16:6a:e5:ac:89:bd:25:a1:e7:d7:02:69: 59:3c:d9:e7:55:a7:6b:76:2b:2d:43:e3:99:cc:6a:4f:95:d8: 29:0b:b2:4b:86:00:23:51:40:72:24:35:82:47:e2:0f:53:74: 4c:46:8e:5f:62:7d:61:8e:80:93:65:12:86:7e:06:2b:3a:20: 43:f1:89:6a:eb:8f:bd:08:f5:2c:e7:95:4e:bc:05:b3:31:dd: 30:99:f1:cb:67:c5:d2:de:03:29:ea:81:07:ce:7b:49:1c:50: fe:15:7f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiwm3gt53YX28ys28wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDQyNDIwMDYzMloXDTI1MDcyMzIwMDYzMlowLzEtMCsGA1UEAxMk YzY5OTk0YWMtMjVlMS00MDdmLWE3ZGMtMmYzNzQzNzIyZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphV58XWnDSQ7jFHzuwZoB+3SFyKtw7+NzvHt ZXPRG+Z2mE5BtwcFfLrxkbTXoAU1YCOCdSfXIbHnUuSaxdzl7EJ4kXTXJkh+pNmW 3JtwBRCcuqaJ9+kEdtsrz31LWv4M0K0xJAEgzaorS3bM3Jc2T/DsYIQwE3uSfp+2 a+8nk8Dy8NNbgMZ/iCDMM/UUMlsUzgbBzReCY7XrF9VIK/0sayL9MPfdu73YM/0D aHXWKTIia6+R+gs9eJX6NBOUFi3YF39+6UqXiSkTgtNYt+bvJ7kDHHIStBN+QYGu qxflxvl12sS7+F8juCdgktw5ZKjAvI8y1sxx8StuyEEkcq4dTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCodky/akohRADPQ/ffB0lWaM1i2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvMjgxNDY5MGMtMDJmNy0z M2M5LWI5ODktODdhMmQ4MzU4YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKj6PtEimb/6LdXX2XcooM5mawcOAF2gl1NCWTO1cwfSJJD6BWiBeQQ Nf/Z7f1dVM6UuaRoKFW5UJ/E2neLcR+svG9BcA36NEiL9QukfP5Vi9mYsjbK/LsP HfGDTXdg071n58BMc2U1MWkbp55ttJ70M4KX+mfr++TA8ZIQwHSqXi6CyUlZHrjX 0Yt0CVYc2wQdhmtc7BZq5ayJvSWh59cCaVk82edVp2t2Ky1D45nMak+V2CkLskuG ACNRQHIkNYJH4g9TdExGjl9ifWGOgJNlEoZ+Bis6IEPxiWrrj70I9SznlU68BbMx 3TCZ8ctnxdLeAynqgQfOe0kcUP4Vf/k= -----END CERTIFICATE-----Generated at Sat May 3 16:54:51 2025 by rpki-client