$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa File: 4947827a-81e3-3c67-8152-d53e2abb4dab.roa (raw, json) Hash identifier: vf5FwaBRsy40KQTl53IUEPwdM9zV3ui/r90RZ4oqxRU= Subject key identifier: 63:5D:B0:5B:90:AE:12:A5:E0:17:61:B4:81:F2:6C:AF:5D:A5:C0:27 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584965E97BDE83C56F9FC307F1C0 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 46450 IP address blocks: 158.106.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7b:de:83:c5:6f:9f:c3:07:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=c0166ad8-5412-4440-a0f3-0313b6e951dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:97:9a:15:a2:1a:06:99:14:6e:83:61:83: 38:24:8e:56:f7:f8:65:8c:5a:de:5c:dd:51:0c:9a: 38:58:0f:cd:1b:a3:c4:86:87:68:c7:5d:bb:e9:3a: fd:e2:71:1f:e7:72:99:85:fa:7d:42:5a:66:3f:73: 3b:93:15:d6:b3:ca:e0:38:54:83:d2:3e:a4:e3:36: 45:60:f8:40:3f:af:c0:fa:fc:82:4c:8e:54:33:bc: 0c:42:de:c7:f8:a9:3c:78:f9:54:70:9d:d4:a0:ab: 65:71:a8:18:40:17:49:de:9c:e5:58:4f:f8:91:68: 7c:7b:b3:be:8b:e0:cc:f8:f2:c8:86:9e:31:49:55: c0:5c:54:19:7c:4c:71:e2:db:84:21:9d:10:5e:c2: 2e:b1:28:1e:85:b6:d0:a2:ce:98:0a:4d:98:44:e6: 7e:59:51:c0:97:88:a6:95:f4:8a:4c:be:ce:d5:12: 7c:75:8d:97:32:b4:1f:0e:38:4a:f6:f2:5c:d7:6f: 23:2e:bc:c6:93:67:b5:29:89:8d:c0:6e:7c:1c:40: 0f:ac:a8:02:da:97:8e:ee:74:a3:13:1b:9b:f8:bd: b6:a9:80:6b:7b:15:97:51:0e:b7:af:28:35:4c:f9: 4c:99:4a:8a:e4:2d:95:f6:fd:78:25:20:bf:75:e1: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5D:B0:5B:90:AE:12:A5:E0:17:61:B4:81:F2:6C:AF:5D:A5:C0:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 158.106.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:d4:b8:6b:de:17:76:d0:6d:cb:96:f9:58:c1:f4:e9:e4:9a: 7c:09:01:76:59:66:45:7b:81:8c:45:8e:e5:cc:86:83:71:95: 50:44:86:ee:dd:a5:6a:a3:94:c8:f8:90:46:b5:3d:b4:52:9d: b5:f3:82:f1:5d:ed:c2:77:7e:b4:db:42:05:37:d3:73:93:02: 4e:e8:d2:c0:44:f1:58:40:09:10:88:62:31:60:1b:82:c2:09: 51:c8:98:28:9d:92:3d:2e:b4:0a:9d:89:6e:03:14:03:45:d0: 2a:32:4b:15:19:43:3a:82:df:e5:7f:d7:70:ab:df:9a:5a:46: 92:3f:08:ce:4f:e2:6c:ca:10:23:d3:e6:cc:95:2c:9a:69:bc: 75:30:e7:40:b3:a1:c7:d0:2a:8a:cd:a4:35:a1:fe:59:4c:76: 0e:62:e2:55:2d:78:73:90:a9:22:e2:7a:f4:bd:5e:8d:e5:2d: 54:84:ab:1b:75:3e:e0:47:79:c3:a5:7f:e9:15:71:1c:73:ff: 35:16:18:82:d2:58:3d:08:8d:0d:6e:34:0d:18:89:fe:10:25: 43:32:8a:b3:fd:ef:70:cd:3b:5e:5a:18:f1:3e:5b:a0:9c:9d: 51:ba:78:47:6d:a4:55:19:f9:3b:cf:1e:d4:5f:58:ae:72:c7: 53:8c:27:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6Xveg8Vvn8MH8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YzAxNjZhZDgtNTQxMi00NDQwLWEwZjMtMDMxM2I2ZTk1MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3CXmhWiGgaZFG6DYYM4JI5W9/hljFreXN1R DJo4WA/NG6PEhodox1276Tr94nEf53KZhfp9QlpmP3M7kxXWs8rgOFSD0j6k4zZF YPhAP6/A+vyCTI5UM7wMQt7H+Kk8ePlUcJ3UoKtlcagYQBdJ3pzlWE/4kWh8e7O+ i+DM+PLIhp4xSVXAXFQZfExx4tuEIZ0QXsIusSgehbbQos6YCk2YROZ+WVHAl4im lfSKTL7O1RJ8dY2XMrQfDjhK9vJc128jLrzGk2e1KYmNwG58HEAPrKgC2peO7nSj Exub+L22qYBrexWXUQ63ryg1TPlMmUqK5C2V9v14JSC/deEtBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNdsFuQrhKl4BdhtIHybK9dpcAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvNDk0NzgyN2EtODFlMy0z YzY3LTgxNTItZDUzZTJhYmI0ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7UuGveF3bQbcuW+VjB9OnkmnwJAXZZZkV7gYxFjuXMhoNxlVBEhu7d pWqjlMj4kEa1PbRSnbXzgvFd7cJ3frTbQgU303OTAk7o0sBE8VhACRCIYjFgG4LC CVHImCidkj0utAqdiW4DFANF0CoySxUZQzqC3+V/13Cr35paRpI/CM5P4mzKECPT 5syVLJppvHUw50CzocfQKorNpDWh/llMdg5i4lUteHOQqSLievS9Xo3lLVSEqxt1 PuBHecOlf+kVcRxz/zUWGILSWD0IjQ1uNA0Yif4QJUMyirP973DNO15aGPE+W6Cc nVG6eEdtpFUZ+TvPHtRfWK5yx1OMJ64= -----END CERTIFICATE-----Generated at Mon Apr 28 15:09:16 2025 by rpki-client