$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/4a9eb0fa-cdd8-3358-b29d-7d83a40b2b55.roa File: 4a9eb0fa-cdd8-3358-b29d-7d83a40b2b55.roa (raw, json) Hash identifier: e3VKlN0z/6nm9XRnJwov9E7i27cXsTTt+WOKR+CVNi0= Subject key identifier: AE:2C:1E:40:FA:31:E5:70:67:83:8F:BD:B7:06:2E:78:C7:9C:C8:AC Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F43285849A2C4140A955F8214BEC9E180 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/4a9eb0fa-cdd8-3358-b29d-7d83a40b2b55.roa Signing time: Thu 24 Apr 2025 20:09:51 +0000 ROA not before: Thu 24 Apr 2025 20:09:51 +0000 ROA not after: Wed 23 Jul 2025 20:09:51 +0000 asID: 10384 IP address blocks: 152.85.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:c4:14:0a:95:5f:82:14:be:c9:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Apr 24 20:09:51 2025 GMT Not After : Jul 23 20:09:51 2025 GMT Subject: CN=bf5cd94d-a64a-4387-b4bc-1a8fd5801b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cc:c7:10:70:87:bf:ea:07:51:33:cc:d8:7d: b0:8f:00:1f:2d:4c:a0:1c:50:b3:c1:c9:27:47:ad: f7:eb:30:64:6e:ec:0e:0f:34:70:51:9a:18:b0:67: bb:8d:c7:49:20:e0:91:23:16:f2:b1:ac:88:d4:9a: 51:9b:40:75:2a:c4:d9:c6:79:b0:16:7b:33:d7:6a: fc:d9:cb:0f:f1:4f:6f:92:85:00:26:34:1c:fe:d7: 93:58:e6:7e:31:80:6c:48:95:d3:2c:57:6f:77:02: 19:58:a2:8f:fb:ac:97:38:d5:ad:c6:0f:ad:6f:8a: f6:22:49:86:1e:41:3c:01:b0:6d:42:f5:6f:85:ee: eb:4f:1d:ab:d8:08:67:c3:7b:1b:e3:13:e0:59:a8: 80:54:14:06:74:da:cb:ee:c5:2c:25:b6:eb:b5:54: 75:6e:ee:b6:58:2e:d8:a3:e1:d2:12:2d:3a:fb:21: fb:d8:46:d8:af:15:0a:2e:ae:b0:c3:5f:b3:c9:a7: 81:33:6a:ea:c0:88:ff:63:de:d6:60:e1:d3:f9:65: 19:a0:9a:dd:16:60:7a:29:2c:e0:77:d9:f4:78:fb: d3:da:d0:53:0a:c1:25:4a:74:dc:98:7f:92:15:10: bf:4d:f7:cf:ff:ba:88:24:5d:00:32:f0:9d:5e:87: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2C:1E:40:FA:31:E5:70:67:83:8F:BD:B7:06:2E:78:C7:9C:C8:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/4a9eb0fa-cdd8-3358-b29d-7d83a40b2b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.85.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:73:89:6b:8b:df:44:53:b5:90:78:42:c2:d3:32:0c:0c:a9: 46:fc:1d:3b:77:a1:65:b3:40:54:53:b3:7d:e4:ee:aa:73:8e: e2:24:2d:40:4d:17:24:ad:86:4d:39:6a:a3:52:31:6e:15:8a: e6:70:2e:de:6c:c6:9f:16:72:6a:5b:ef:67:67:a1:73:ae:68: db:30:d0:58:61:9c:3e:4a:21:62:a1:e8:d2:2e:8e:64:9d:6d: b7:a4:61:d2:38:25:40:45:48:2d:d5:bf:a1:41:5b:89:30:14: dd:84:39:1f:80:3f:93:8b:42:ff:b0:fc:3f:74:bd:fb:dc:78: 8a:83:fe:d3:1e:dd:b2:30:81:57:80:dc:e6:e6:f8:45:94:ac: ac:95:8e:d1:7e:11:d4:ec:21:f2:2a:c5:45:22:fd:dc:81:60: 01:f7:cf:9c:b5:0a:4e:00:51:7d:92:34:f2:b2:d6:7e:a0:ad: b7:49:4e:c7:bb:c4:6f:be:cc:d2:a1:de:51:74:c7:21:ff:7a: 83:9b:51:0f:6a:ad:dd:c7:31:62:27:e1:1d:d9:c3:6e:52:f2: dc:bb:56:a4:f0:cf:f9:54:f0:a7:b2:95:46:9c:3c:2f:dc:0f: 77:e2:58:bd:7c:77:b3:2f:4c:53:81:7b:73:17:f8:26:be:9e: c9:ca:df:a5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmixBQKlV+CFL7J4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDQyNDIwMDk1MVoXDTI1MDcyMzIwMDk1MVowLzEtMCsGA1UEAxMk YmY1Y2Q5NGQtYTY0YS00Mzg3LWI0YmMtMWE4ZmQ1ODAxYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApszHEHCHv+oHUTPM2H2wjwAfLUygHFCzwckn R6336zBkbuwODzRwUZoYsGe7jcdJIOCRIxbysayI1JpRm0B1KsTZxnmwFnsz12r8 2csP8U9vkoUAJjQc/teTWOZ+MYBsSJXTLFdvdwIZWKKP+6yXONWtxg+tb4r2IkmG HkE8AbBtQvVvhe7rTx2r2Ahnw3sb4xPgWaiAVBQGdNrL7sUsJbbrtVR1bu62WC7Y o+HSEi06+yH72EbYrxUKLq6ww1+zyaeBM2rqwIj/Y97WYOHT+WUZoJrdFmB6KSzg d9n0ePvT2tBTCsElSnTcmH+SFRC/TffP/7qIJF0AMvCdXoftdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK4sHkD6MeVwZ4OPvbcGLnjHnMisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvNGE5ZWIwZmEtY2RkOC0z MzU4LWIyOWQtN2Q4M2E0MGIyYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmFUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAg3OJa4vfRFO1kHhCwtMyDAypRvwdO3ehZbNAVFOzfeTuqnOO4iQtQE0X JK2GTTlqo1IxbhWK5nAu3mzGnxZyalvvZ2ehc65o2zDQWGGcPkohYqHo0i6OZJ1t t6Rh0jglQEVILdW/oUFbiTAU3YQ5H4A/k4tC/7D8P3S9+9x4ioP+0x7dsjCBV4Dc 5ub4RZSsrJWO0X4R1Owh8irFRSL93IFgAffPnLUKTgBRfZI08rLWfqCtt0lOx7vE b77M0qHeUXTHIf96g5tRD2qt3ccxYifhHdnDblLy3LtWpPDP+VTwp7KVRpw8L9wP d+JYvXx3sy9MU4F7cxf4Jr6eycrfpQ== -----END CERTIFICATE-----Generated at Sat May 3 22:25:44 2025 by rpki-client