$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa File: ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa (raw, json) Hash identifier: vgB+5B2Pteuy/hfbQLbDEiAQy2QrVZuUqaySwPCSoLg= Subject key identifier: C0:28:C7:76:27:8A:D0:65:F9:AD:E6:1C:D6:C8:FE:44:AA:A9:A9:1A Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F43285849A2C2D0A8B2301898DDB3E280 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa Signing time: Thu 24 Apr 2025 20:07:18 +0000 ROA not before: Thu 24 Apr 2025 20:07:18 +0000 ROA not after: Wed 23 Jul 2025 20:07:18 +0000 asID: 10384 IP address blocks: 152.87.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:c2:d0:a8:b2:30:18:98:dd:b3:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Apr 24 20:07:18 2025 GMT Not After : Jul 23 20:07:18 2025 GMT Subject: CN=187eb6f2-b6e1-48f5-a248-8fca49f8560a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:07:e0:94:26:c6:db:2d:96:3a:1d:e7:16: 0e:4c:87:1a:8a:b4:91:d8:8b:97:03:1c:78:e0:f7: e6:24:69:19:ad:22:d4:a3:34:34:7f:79:b6:24:45: a8:90:22:81:00:25:d2:bc:72:92:81:66:25:70:bc: 2b:d6:04:44:1e:ca:f1:84:d0:9f:0a:9c:4e:02:ee: a0:3c:b4:81:d0:06:0e:2b:ba:f4:0b:1c:97:bc:df: 5d:8a:99:61:7f:de:6e:c9:88:2c:1f:dd:93:64:fb: 2d:93:61:02:72:9e:ab:2d:16:e6:be:dd:b4:cd:11: d9:ad:40:6d:81:48:15:db:2e:70:0e:c6:f2:48:bb: 37:58:31:6a:8a:cf:19:4e:e8:3d:d2:1f:2e:b5:9f: c5:17:ac:e0:25:a3:37:79:b9:88:f9:96:34:96:87: 1f:5b:c3:84:4a:15:f5:fc:b6:63:76:ad:f3:ae:55: f3:74:59:b0:ba:f2:cc:39:23:87:5c:cc:eb:96:9c: 16:47:24:6c:b2:73:49:07:e7:87:b7:fe:77:6e:8e: 70:c0:de:09:07:31:25:49:c2:87:e1:57:c4:84:02: 2b:00:11:1f:d6:ca:7c:67:67:fe:65:5f:b5:2c:22: e6:7d:5a:09:7d:b4:d0:12:a7:01:03:dc:80:cd:76: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:28:C7:76:27:8A:D0:65:F9:AD:E6:1C:D6:C8:FE:44:AA:A9:A9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1c:7c:a3:40:69:6a:5e:13:5c:ef:3f:c6:2b:8b:06:16:e8: 41:80:43:d6:94:3b:1f:cb:33:78:7f:9c:8d:21:fd:e8:49:fe: 47:a4:5b:ec:50:19:13:e3:2a:71:a8:75:66:73:c1:08:6f:57: cb:72:4c:0d:26:26:b6:24:9b:ed:98:40:bc:86:30:1d:0e:17: c8:fe:50:3a:1e:ae:1d:07:3c:db:c3:80:ab:32:8a:ff:33:d7: 39:bb:d0:4f:5d:f4:58:dc:75:60:65:ff:60:cc:24:b7:26:e6: a4:70:8e:82:74:58:d5:a7:0e:bc:f7:3c:22:87:a7:62:a4:3e: 8c:bd:8e:94:f9:1d:f9:05:c6:55:b0:69:0c:e5:96:09:97:1c: e2:b7:ab:d1:0a:0f:0b:90:53:0f:51:57:69:21:33:e2:20:24: c6:27:01:e2:c5:d3:14:6b:38:3f:11:c0:94:5b:9a:48:0f:2b: df:76:94:dc:76:29:a0:0b:1c:bc:ee:97:7e:ab:c0:6f:08:cf: cb:a3:00:91:ca:18:a5:1d:4e:89:fb:9c:b0:33:29:a3:d8:f0: 42:17:79:99:f2:73:d8:23:17:07:b4:e5:e3:9a:cb:a7:39:55: f6:75:75:b6:72:db:4f:6a:7f:d6:29:9c:b0:f6:26:f5:5b:c0: c0:8c:45:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiwtCosjAYmN2z4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDQyNDIwMDcxOFoXDTI1MDcyMzIwMDcxOFowLzEtMCsGA1UEAxMk MTg3ZWI2ZjItYjZlMS00OGY1LWEyNDgtOGZjYTQ5Zjg1NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiQH4JQmxtstljod5xYOTIcairSR2IuXAxx4 4PfmJGkZrSLUozQ0f3m2JEWokCKBACXSvHKSgWYlcLwr1gREHsrxhNCfCpxOAu6g PLSB0AYOK7r0CxyXvN9diplhf95uyYgsH92TZPstk2ECcp6rLRbmvt20zRHZrUBt gUgV2y5wDsbySLs3WDFqis8ZTug90h8utZ/FF6zgJaM3ebmI+ZY0locfW8OEShX1 /LZjdq3zrlXzdFmwuvLMOSOHXMzrlpwWRyRssnNJB+eHt/53bo5wwN4JBzElScKH 4VfEhAIrABEf1sp8Z2f+ZV+1LCLmfVoJfbTQEqcBA9yAzXYzDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAox3YnitBl+a3mHNbI/kSqqakaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvZWY2NTIxZjctMzU2My0z MWI4LWEyYTQtMTczYzZhOTM3OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADscfKNAaWpeE1zvP8YriwYW6EGAQ9aUOx/LM3h/nI0h/ehJ/kekW+xQ GRPjKnGodWZzwQhvV8tyTA0mJrYkm+2YQLyGMB0OF8j+UDoerh0HPNvDgKsyiv8z 1zm70E9d9FjcdWBl/2DMJLcm5qRwjoJ0WNWnDrz3PCKHp2KkPoy9jpT5HfkFxlWw aQzllgmXHOK3q9EKDwuQUw9RV2khM+IgJMYnAeLF0xRrOD8RwJRbmkgPK992lNx2 KaALHLzul36rwG8Iz8ujAJHKGKUdTon7nLAzKaPY8EIXeZnyc9gjFwe05eOay6c5 VfZ1dbZy209qf9YpnLD2JvVbwMCMRRk= -----END CERTIFICATE-----Generated at Sat May 3 18:27:53 2025 by rpki-client