$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/7d49b6f5-a2e5-373d-978f-b5f0c121cc09.roa File: 7d49b6f5-a2e5-373d-978f-b5f0c121cc09.roa (raw, json) Hash identifier: 9UVRCrLV5uzO0tDMFDqEtIlcmkfKQLgV67Vo1rp+YZ4= Subject key identifier: D8:FF:9D:00:D3:45:DF:1E:04:D3:38:83:67:92:FE:A9:6A:64:AE:81 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F43285849A2C348746889BB545A408A40 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/7d49b6f5-a2e5-373d-978f-b5f0c121cc09.roa Signing time: Thu 24 Apr 2025 20:08:15 +0000 ROA not before: Thu 24 Apr 2025 20:08:15 +0000 ROA not after: Wed 23 Jul 2025 20:08:15 +0000 asID: 10384 IP address blocks: 152.87.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:c3:48:74:68:89:bb:54:5a:40:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Apr 24 20:08:15 2025 GMT Not After : Jul 23 20:08:15 2025 GMT Subject: CN=8988ccf6-0637-4787-b237-9157d8405902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:26:f3:b5:e4:1e:34:92:43:29:7d:d8:b3: 5a:c3:66:ac:e3:d3:fc:15:c8:f2:72:fd:6f:54:86: a9:b4:ba:41:89:cf:58:f9:c6:f5:cf:54:1f:fd:8c: e0:94:c2:a8:79:fb:5f:15:ef:85:df:46:33:1e:da: c0:c7:1f:65:37:59:bd:19:47:87:b6:ca:ad:3f:82: 7e:59:23:84:53:93:cd:7c:41:c5:28:84:4c:15:6d: 66:fc:36:ca:36:4e:90:70:a7:70:53:1e:68:eb:e2: 51:b1:98:20:d3:e9:ff:12:37:76:43:75:f6:41:62: 66:43:b1:9a:39:40:dc:d4:86:75:cf:99:5b:24:cf: 4e:c6:81:7a:94:b6:63:d8:9b:3b:37:8e:7d:c3:89: 94:b9:f2:aa:15:75:13:5c:ca:5a:0f:3d:0f:94:2b: 3d:95:30:6d:8e:af:e7:15:23:4b:97:78:6b:ba:81: 77:5b:df:60:d4:67:05:9a:7a:a1:06:c8:d4:d5:c1: 39:29:9d:6f:39:e6:47:36:1d:49:1b:7e:09:a0:ff: ce:70:07:54:9d:25:1f:2b:16:ea:41:15:b7:70:c0: 73:af:e4:bc:87:7e:19:8c:34:bc:9b:04:d1:07:50: 9b:e1:7b:41:d0:a1:7f:50:ea:1c:87:b5:ce:94:9f: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FF:9D:00:D3:45:DF:1E:04:D3:38:83:67:92:FE:A9:6A:64:AE:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/7d49b6f5-a2e5-373d-978f-b5f0c121cc09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:75:5c:05:cf:85:82:f1:f5:f9:6f:74:9e:74:91:bc:cc:cd: 83:18:79:89:2b:73:c5:0c:2b:ba:2e:ec:92:68:c9:40:a7:3d: c6:77:b9:22:d6:50:e9:99:e4:f3:35:ea:b3:4b:78:06:b0:f1: 5b:b2:30:a4:a9:cf:25:6c:78:77:fa:55:25:6c:5c:57:84:d0: ef:2d:68:9e:27:33:a9:6c:cb:8d:3a:de:21:1c:20:c8:53:be: b9:d4:b1:c7:18:dd:f5:1b:33:90:23:69:14:ae:1f:73:ae:b1: 06:58:40:51:3f:fe:06:4d:3f:a4:ac:1f:68:6e:b2:10:bd:60: f1:33:64:3f:46:b8:8c:e1:65:27:2b:8b:7e:12:12:af:10:9b: fe:d0:75:fa:4b:4d:ee:b3:5f:8c:c9:dc:a2:0b:d3:e3:22:83: 3a:e1:4a:27:f2:77:69:62:04:89:17:ad:aa:6c:8a:9b:12:81: 16:24:e2:10:be:25:f9:f5:75:8c:cf:ee:af:c3:02:e0:15:c7: 8a:e5:ce:e9:ef:0f:80:9b:6b:f0:44:3d:d1:03:4f:93:d6:58: 36:04:78:c9:85:6a:4e:af:e1:b7:c0:86:e8:23:8d:0b:3c:68: 54:66:2e:f7:16:5c:a7:c5:dd:7a:c2:f1:dd:d7:74:a1:08:ed: 5b:98:8e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiw0h0aIm7VFpAikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDQyNDIwMDgxNVoXDTI1MDcyMzIwMDgxNVowLzEtMCsGA1UEAxMk ODk4OGNjZjYtMDYzNy00Nzg3LWIyMzctOTE1N2Q4NDA1OTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJUm87XkHjSSQyl92LNaw2as49P8Fcjycv1v VIaptLpBic9Y+cb1z1Qf/YzglMKoeftfFe+F30YzHtrAxx9lN1m9GUeHtsqtP4J+ WSOEU5PNfEHFKIRMFW1m/DbKNk6QcKdwUx5o6+JRsZgg0+n/Ejd2Q3X2QWJmQ7Ga OUDc1IZ1z5lbJM9OxoF6lLZj2Js7N459w4mUufKqFXUTXMpaDz0PlCs9lTBtjq/n FSNLl3hruoF3W99g1GcFmnqhBsjU1cE5KZ1vOeZHNh1JG34JoP/OcAdUnSUfKxbq QRW3cMBzr+S8h34ZjDS8mwTRB1Cb4XtB0KF/UOoch7XOlJ8/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj/nQDTRd8eBNM4g2eS/qlqZK6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvN2Q0OWI2ZjUtYTJlNS0z NzNkLTk3OGYtYjVmMGMxMjFjYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL11XAXPhYLx9flvdJ50kbzMzYMYeYkrc8UMK7ou7JJoyUCnPcZ3uSLW UOmZ5PM16rNLeAaw8VuyMKSpzyVseHf6VSVsXFeE0O8taJ4nM6lsy4063iEcIMhT vrnUsccY3fUbM5AjaRSuH3OusQZYQFE//gZNP6SsH2hushC9YPEzZD9GuIzhZScr i34SEq8Qm/7QdfpLTe6zX4zJ3KIL0+MigzrhSifyd2liBIkXrapsipsSgRYk4hC+ Jfn1dYzP7q/DAuAVx4rlzunvD4Cba/BEPdEDT5PWWDYEeMmFak6v4bfAhugjjQs8 aFRmLvcWXKfF3XrC8d3XdKEI7VuYjoY= -----END CERTIFICATE-----Generated at Sun May 4 04:36:57 2025 by rpki-client