$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa File: c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa (raw, json) Hash identifier: 24rH2vp3ebJ17yZfhZrWflThyHsbvYQwCwDD892pE5k= Subject key identifier: DC:71:8D:63:FE:9E:5A:4E:91:AF:AB:9C:46:01:9D:63:E5:47:F8:F1 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F43285849F87A9FCE9DAEC4C584AC0C50 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 54535 IP address blocks: 156.37.204.0/24 maxlen: 24 156.37.205.0/24 maxlen: 24 156.37.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9f:ce:9d:ae:c4:c5:84:ac:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=209ac24b-e657-4c87-9289-d347f15730ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fb:fe:42:88:27:7d:64:a6:72:82:bb:54:dd: d8:d2:7f:53:42:66:d9:2d:7d:bb:5c:ab:e7:d0:6f: 51:f4:ff:e6:65:e8:0d:e0:9f:be:93:53:48:a6:dd: e1:c3:b0:04:6b:57:7d:e6:64:1e:e4:b9:ed:f1:29: 5b:11:3c:27:ab:78:9b:3a:15:3a:8a:cf:40:d2:60: df:81:cc:57:67:e8:95:ef:60:a3:6d:0b:71:83:ff: a1:ae:93:10:02:2c:4e:e4:bb:db:18:dd:37:ad:c2: 33:7c:1a:38:6b:ca:80:84:28:51:7a:96:41:67:9f: d9:48:ff:15:e8:c0:be:fc:4e:32:de:2f:b0:65:45: 75:7f:46:82:b0:f5:56:8e:01:96:ff:61:13:ca:c8: 29:7f:04:9b:95:4e:18:4f:15:36:fd:4a:a8:e5:4c: a4:14:fe:89:06:64:af:3c:42:ac:3a:d7:c3:54:be: 30:92:07:fa:00:db:a3:e3:00:d2:1d:1c:20:a6:0f: 5b:53:0c:a5:f8:b9:11:49:6c:39:29:b8:5a:e5:f9: 78:5f:ef:40:65:7e:a6:5c:95:4a:a3:37:f3:dc:23: bc:50:2f:93:a5:3d:5b:aa:ad:5e:45:a7:88:c1:30: 40:08:b3:ba:85:cf:b2:61:8c:93:88:16:be:ce:a1: 86:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:71:8D:63:FE:9E:5A:4E:91:AF:AB:9C:46:01:9D:63:E5:47:F8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.204.0/23 156.37.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:42:85:d0:a2:d2:ec:fa:69:ae:88:71:3c:0b:24:c7:87:00: 9e:d6:87:66:68:18:15:54:15:d9:9c:b5:82:24:9f:e6:37:48: 43:0f:a4:34:5d:b0:61:2c:f0:f2:85:db:11:65:fb:bc:40:60: d3:73:64:51:4b:52:bc:c7:24:74:f2:fc:1c:5d:1a:3b:3e:43: d0:89:27:15:44:4a:3d:b1:8f:44:5a:1f:ac:15:d9:11:16:01: 39:11:7d:94:6b:0a:a8:15:56:61:5b:84:b2:ca:15:43:1c:e5: f8:03:a3:44:3a:8b:36:b9:43:7e:a4:fa:a1:2c:b2:3c:ac:56: a3:87:6a:5c:94:30:bf:f1:89:57:0c:09:a1:b8:f4:7e:d3:f3: b8:33:1f:91:ed:8f:17:a9:81:e9:10:af:3b:dc:93:0c:a0:2a: 10:d9:49:02:41:3d:72:e2:f5:4c:f9:3d:a2:e3:df:e5:d9:90: e0:87:f6:46:bd:d1:21:23:0c:66:87:aa:6f:e6:25:04:cf:d2: e5:d0:93:ef:7c:1b:c7:17:57:8b:12:7f:38:eb:93:8a:71:45: ee:c3:02:6d:15:47:30:4c:89:80:91:e5:69:f6:b6:b2:90:93: a3:e5:d9:79:7c:8e:61:eb:69:ef:dc:28:5d:5b:52:90:b5:b0: f5:18:cf:4d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEn4ep/Ona7ExYSsDFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MjA5YWMyNGItZTY1Ny00Yzg3LTkyODktZDM0N2YxNTczMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifv+QognfWSmcoK7VN3Y0n9TQmbZLX27XKvn 0G9R9P/mZegN4J++k1NIpt3hw7AEa1d95mQe5Lnt8SlbETwnq3ibOhU6is9A0mDf gcxXZ+iV72CjbQtxg/+hrpMQAixO5LvbGN03rcIzfBo4a8qAhChRepZBZ5/ZSP8V 6MC+/E4y3i+wZUV1f0aCsPVWjgGW/2ETysgpfwSblU4YTxU2/Uqo5UykFP6JBmSv PEKsOtfDVL4wkgf6ANuj4wDSHRwgpg9bUwyl+LkRSWw5Kbha5fl4X+9AZX6mXJVK ozfz3CO8UC+TpT1bqq1eRaeIwTBACLO6hc+yYYyTiBa+zqGGeQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNxxjWP+nlpOka+rnEYBnWPlR/jxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYzdhNzhiYTAtMTA0OC0z ODVmLWEzYTktZDgyZTdiNzc1M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnCXMAwQB nCXgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEdChdCi0uz6aa6IcTwLJMeHAJ7Wh2ZoGBVUFdmctYIkn+Y3 SEMPpDRdsGEs8PKF2xFl+7xAYNNzZFFLUrzHJHTy/BxdGjs+Q9CJJxVESj2xj0Ra H6wV2REWATkRfZRrCqgVVmFbhLLKFUMc5fgDo0Q6iza5Q36k+qEssjysVqOHalyU ML/xiVcMCaG49H7T87gzH5HtjxepgekQrzvckwygKhDZSQJBPXLi9Uz5PaLj3+XZ kOCH9ka90SEjDGaHqm/mJQTP0uXQk+98G8cXV4sSfzjrk4pxRe7DAm0VRzBMiYCR 5Wn2trKQk6Pl2Xl8jmHrae/cKF1bUpC1sPUYz00= -----END CERTIFICATE-----Generated at Mon Jun 16 01:29:54 2025 by rpki-client