$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/3b9a74c7-b35b-3f22-b81b-eb7dd5f676a6.roa File: 3b9a74c7-b35b-3f22-b81b-eb7dd5f676a6.roa (raw, json) Hash identifier: XeEDS4paQMgPLvw3+o9UvYUPaoi581S8lvaubCGFU8Q= Subject key identifier: 07:41:15:CF:CD:56:A9:50:1A:6A:B9:4F:6A:D5:3F:0B:2B:77:34:70 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F43285849A2C47F8821A22CB089F183B0 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/3b9a74c7-b35b-3f22-b81b-eb7dd5f676a6.roa Signing time: Thu 24 Apr 2025 20:10:42 +0000 ROA not before: Thu 24 Apr 2025 20:10:42 +0000 ROA not after: Wed 23 Jul 2025 20:10:42 +0000 asID: 10384 IP address blocks: 152.87.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:c4:7f:88:21:a2:2c:b0:89:f1:83:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Apr 24 20:10:42 2025 GMT Not After : Jul 23 20:10:42 2025 GMT Subject: CN=5d724334-06f5-4955-b414-b904bdfa61af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:36:4c:64:b3:32:0d:f1:73:b7:a5:c1:e7: 6b:68:3b:42:d2:66:b8:b3:77:62:f2:6d:4a:58:a7: 19:5b:77:b2:d1:52:d1:52:52:ae:14:5e:0c:23:98: 55:60:03:18:a5:d9:6c:f2:43:31:4e:f3:b9:fc:96: e2:af:d6:5e:fb:df:51:c7:2d:64:8d:c8:32:2c:a5: 9d:82:de:d4:f7:09:11:c6:4e:7c:41:8c:2e:7f:4b: c5:1c:95:fa:e9:f9:4e:ce:06:95:67:42:ca:7c:de: 0e:fd:fd:33:04:37:0d:91:42:ba:0d:f0:47:af:35: e0:60:68:13:62:fa:dd:36:f9:ba:49:8c:ef:3d:df: e0:7f:e6:72:68:25:69:14:8e:67:78:a2:01:d0:57: c5:21:1d:50:82:e3:8e:57:e4:c6:63:66:1f:b8:c0: 0e:a0:bc:31:94:28:5c:f0:5b:06:c0:74:36:97:00: 32:ee:93:b0:27:6e:e4:88:61:ec:9a:b8:80:fa:59: b6:af:00:d3:cc:d7:eb:cb:1e:65:5f:b0:f1:7c:42: ad:11:2d:c7:6e:27:7c:11:61:84:93:8a:17:a4:40: 76:69:46:ff:ed:2c:58:97:97:4e:42:2e:97:37:65: 8b:3a:3a:5d:14:7b:42:92:d6:05:d4:7e:79:4f:2c: 98:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:41:15:CF:CD:56:A9:50:1A:6A:B9:4F:6A:D5:3F:0B:2B:77:34:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/3b9a74c7-b35b-3f22-b81b-eb7dd5f676a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:df:57:32:fd:43:ff:00:12:68:25:3a:24:8b:25:96:5b:80: f4:b2:f9:1d:fa:c9:de:01:5c:ef:aa:7e:ec:16:15:bf:3c:0a: b8:ab:26:7c:be:06:3c:31:74:64:f5:78:f1:02:e2:dc:b4:cc: 7c:f1:f3:22:56:94:b2:dd:e0:6a:a2:bb:44:d6:2b:ee:a3:98: 7c:06:81:04:06:eb:f7:02:ce:33:4e:c2:79:ab:77:a1:c2:41: 8a:1c:f2:c4:e0:c5:2c:e5:dc:d9:f7:2f:fd:5b:29:e6:4c:34: 14:84:0e:2e:bc:30:95:ba:4f:4f:1b:d0:4d:31:82:b7:2f:53: 02:f0:49:37:90:fa:2b:0f:fd:0c:c4:1a:ff:ee:b0:26:81:97: b4:7b:ba:a9:d5:a3:27:84:9b:43:e7:b5:a0:12:fb:92:a0:72: 9d:cd:a0:60:d0:27:23:2c:6b:e9:be:e4:fe:af:73:f1:5a:8f: ef:4e:b2:8e:f0:f4:8a:78:6a:73:6e:05:9e:de:e0:89:5d:9b: c4:de:3d:f2:c2:55:c6:1f:52:4e:f8:cf:c0:2a:9d:4a:64:f6: fd:a9:23:da:08:e3:d8:bd:3a:bb:1d:9a:66:3f:0a:25:b0:0d: 70:fc:0d:59:cf:07:42:f7:f6:46:a9:bf:01:1e:46:97:07:e0: e4:2e:ee:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmixH+IIaIssInxg7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDQyNDIwMTA0MloXDTI1MDcyMzIwMTA0MlowLzEtMCsGA1UEAxMk NWQ3MjQzMzQtMDZmNS00OTU1LWI0MTQtYjkwNGJkZmE2MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCQ2TGSzMg3xc7elwedraDtC0ma4s3di8m1K WKcZW3ey0VLRUlKuFF4MI5hVYAMYpdls8kMxTvO5/Jbir9Ze+99Rxy1kjcgyLKWd gt7U9wkRxk58QYwuf0vFHJX66flOzgaVZ0LKfN4O/f0zBDcNkUK6DfBHrzXgYGgT YvrdNvm6SYzvPd/gf+ZyaCVpFI5neKIB0FfFIR1QguOOV+TGY2YfuMAOoLwxlChc 8FsGwHQ2lwAy7pOwJ27kiGHsmriA+lm2rwDTzNfryx5lX7DxfEKtES3Hbid8EWGE k4oXpEB2aUb/7SxYl5dOQi6XN2WLOjpdFHtCktYF1H55TyyYyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdBFc/NVqlQGmq5T2rVPwsrdzRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvM2I5YTc0YzctYjM1Yi0z ZjIyLWI4MWItZWI3ZGQ1ZjY3NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmFeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvfVzL9Q/8AEmglOiSLJZZbgPSy+R36yd4BXO+qfuwWFb88CrirJny+ BjwxdGT1ePEC4ty0zHzx8yJWlLLd4Gqiu0TWK+6jmHwGgQQG6/cCzjNOwnmrd6HC QYoc8sTgxSzl3Nn3L/1bKeZMNBSEDi68MJW6T08b0E0xgrcvUwLwSTeQ+isP/QzE Gv/usCaBl7R7uqnVoyeEm0PntaAS+5Kgcp3NoGDQJyMsa+m+5P6vc/Faj+9Oso7w 9Ip4anNuBZ7e4Ildm8TePfLCVcYfUk74z8AqnUpk9v2pI9oI49i9OrsdmmY/CiWw DXD8DVnPB0L39kapvwEeRpcH4OQu7kM= -----END CERTIFICATE-----Generated at Sat May 3 23:30:46 2025 by rpki-client