$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa File: 6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa (raw, json) Hash identifier: c9nnqAOHb4Yk6u3io87VJuhV7zL/HU3C5PPSD5aNwpc= Subject key identifier: 60:CA:DD:45:A8:58:F8:1C:E2:59:CD:4C:7D:CB:3B:AC:2A:29:29:C5 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F43285849A1EF797816AF9BB93CF20580 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 63293 IP address blocks: 157.240.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:79:78:16:af:9b:b9:3c:f2:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=5e94d58d-f36b-4490-9934-42fed7993e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:e4:11:9d:9d:61:e2:41:6d:48:4c:3b:e5: 22:99:c3:b7:4e:3a:de:8d:d5:21:c7:6c:3c:55:1b: 89:bb:a9:45:73:10:32:d8:27:03:02:0a:79:02:48: ad:55:41:e0:a1:e8:5d:f1:06:4e:07:b7:f8:a6:4a: 20:a6:30:a8:7f:7f:bd:70:d8:f6:e6:53:ea:fe:5f: 83:2c:e2:22:92:7b:8d:af:12:e0:52:57:56:2d:88: be:73:57:1f:35:36:fe:e1:a8:9d:4c:ac:5b:37:78: f2:ba:de:67:f4:54:93:7c:b1:98:a0:35:7c:ca:24: c1:e7:d5:94:79:3b:c4:cd:43:61:ca:13:9c:cc:7a: 66:55:c2:b9:b6:66:8e:5a:13:a2:e7:e2:35:7d:2a: ec:93:7b:46:bf:5b:ec:a7:b5:62:d2:1a:94:35:80: 26:7a:a6:83:70:fd:bb:6a:27:4b:7e:a8:1a:97:67: 8e:cf:7c:1b:d1:e8:c8:03:05:12:98:5e:8a:8b:18: 70:6a:3c:c6:cf:08:cd:46:c4:c6:e7:36:6f:bc:60: e1:dc:de:8f:a3:55:e2:d8:54:61:35:02:41:4c:a1: bb:aa:0f:15:40:09:a4:d5:ab:c4:63:1d:01:fc:73: 1f:bd:0b:2a:08:b5:6d:18:f4:0a:fa:d7:98:ac:c8: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CA:DD:45:A8:58:F8:1C:E2:59:CD:4C:7D:CB:3B:AC:2A:29:29:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:30:67:9e:d4:0b:21:04:fb:ba:d5:6c:d8:1f:0f:41:fc:fc: ba:4c:5b:4a:64:9e:4d:51:70:12:96:2a:9c:ce:6f:a0:f9:f0: 97:ad:bc:2d:1b:ed:cd:cd:b2:14:e0:2d:ac:d7:82:3d:7c:81: 05:7c:91:58:65:8e:2c:a7:81:33:a6:3d:02:11:e3:fc:90:77: 9d:5e:86:b6:7b:c5:32:0f:4a:04:1f:b8:c3:80:75:1a:77:63: 27:97:74:6c:53:3e:a4:5c:35:8a:94:cf:cd:99:6b:3e:a3:7f: ea:ae:0f:2e:f7:dc:37:d1:ee:2e:77:b2:ab:d1:f0:26:6d:f6: 27:d3:b3:a4:97:36:d7:49:9d:a3:c8:e1:54:3c:a4:77:54:ad: cb:27:b6:21:42:f2:52:2c:5a:83:3d:6f:7a:d8:b0:9e:c1:14: 9c:22:d0:75:7b:be:fb:e1:16:24:76:03:58:f4:94:a2:03:6f: b4:3e:de:73:92:fe:8a:72:fa:18:f1:d7:c6:14:28:d0:c8:4b: 47:6e:97:aa:89:5a:3d:85:02:08:79:24:52:17:9b:84:62:8d: 4a:5d:1a:4d:f3:e1:ae:7e:10:28:0c:bc:b2:89:24:e3:50:85: 2e:ce:1f:0c:e4:e0:46:ef:40:40:93:fd:f0:06:07:09:a8:3b: 39:c7:7f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73l4Fq+buTzyBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NWU5NGQ1OGQtZjM2Yi00NDkwLTk5MzQtNDJmZWQ3OTkzZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLnkEZ2dYeJBbUhMO+UimcO3TjrejdUhx2w8 VRuJu6lFcxAy2CcDAgp5AkitVUHgoehd8QZOB7f4pkogpjCof3+9cNj25lPq/l+D LOIiknuNrxLgUldWLYi+c1cfNTb+4aidTKxbN3jyut5n9FSTfLGYoDV8yiTB59WU eTvEzUNhyhOczHpmVcK5tmaOWhOi5+I1fSrsk3tGv1vsp7Vi0hqUNYAmeqaDcP27 aidLfqgal2eOz3wb0ejIAwUSmF6KixhwajzGzwjNRsTG5zZvvGDh3N6Po1Xi2FRh NQJBTKG7qg8VQAmk1avEYx0B/HMfvQsqCLVtGPQK+teYrMjs9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDK3UWoWPgc4lnNTH3LO6wqKSnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNmYxOGZlZDktNzIwNi0z Yjk4LWEyMTUtNGE2ZmQ0ZmM4M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8wZ57UCyEE+7rVbNgfD0H8/LpMW0pknk1RcBKWKpzOb6D58JetvC0b 7c3NshTgLazXgj18gQV8kVhljiyngTOmPQIR4/yQd51ehrZ7xTIPSgQfuMOAdRp3 YyeXdGxTPqRcNYqUz82Zaz6jf+quDy733DfR7i53sqvR8CZt9ifTs6SXNtdJnaPI 4VQ8pHdUrcsntiFC8lIsWoM9b3rYsJ7BFJwi0HV7vvvhFiR2A1j0lKIDb7Q+3nOS /opy+hjx18YUKNDIS0dul6qJWj2FAgh5JFIXm4RijUpdGk3z4a5+ECgMvLKJJONQ hS7OHwzk4EbvQECT/fAGBwmoOznHf40= -----END CERTIFICATE-----Generated at Tue Apr 29 09:38:23 2025 by rpki-client