$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/3d2d0f60-864f-3ebd-80b7-199708bc59b9.roa File: 3d2d0f60-864f-3ebd-80b7-199708bc59b9.roa (raw, json) Hash identifier: z1xplSiaVYGefA2UivgcXv6IxCg4RfugayIQs/vB1VI= Subject key identifier: D7:B5:8D:6B:BD:02:72:6B:3D:C5:21:EB:03:CE:69:A3:0D:15:5D:2F Certificate issuer: /CN=da61168f-5649-4fda-acc2-e65f377d2592 Certificate serial: 010D0C9F432858495EEED8FF8F7AA584C1A7A640 Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/3d2d0f60-864f-3ebd-80b7-199708bc59b9.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16509 IP address blocks: 155.46.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:d8:ff:8f:7a:a5:84:c1:a7:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=22ca67bd-1205-4d80-b802-77130aa3b0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:76:ef:75:ad:f2:04:27:2e:9d:66:14:8d: a6:3d:4b:3d:f3:22:59:c1:f7:48:d0:5a:91:8f:1b: 7a:86:81:3f:61:4a:02:1b:d2:ef:88:35:65:bb:5f: 3e:15:ce:98:ac:a2:da:c2:36:1c:cf:d5:e5:10:08: a2:e4:f8:6a:6f:16:95:65:0b:a7:f5:33:db:c4:ef: d1:f3:4b:02:39:b8:fe:9e:ab:38:a8:30:81:cf:4c: ff:fb:51:b6:43:bd:e0:80:a5:81:8f:3e:c4:65:3a: 22:3b:2f:bf:6b:f8:2f:35:fc:00:28:97:54:77:12: 14:f1:6e:41:10:17:65:cc:04:68:51:2d:11:c7:d7: 2b:2d:fd:5f:0c:ea:3f:3e:9a:a9:f4:ca:a7:9c:52: b1:92:63:bb:85:f8:a6:e3:de:5d:a7:1d:1a:5f:64: 37:a9:5c:7d:fb:a3:47:cc:8d:06:f2:02:fd:09:1c: 81:eb:7e:8d:65:6a:2c:22:04:55:0b:85:eb:3f:9f: c9:20:3e:f4:c4:03:ef:e5:20:7a:02:2b:d7:ea:00: bb:3f:1e:28:e6:e3:f7:fc:69:e6:98:37:2f:67:99: e5:30:36:13:1d:68:f9:3d:aa:6f:30:75:b8:c5:5e: 9b:81:79:24:69:d6:6d:24:b2:c2:7b:73:37:15:ae: b8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B5:8D:6B:BD:02:72:6B:3D:C5:21:EB:03:CE:69:A3:0D:15:5D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/3d2d0f60-864f-3ebd-80b7-199708bc59b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl X509v3 Authority Key Identifier: keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer sbgp-ipAddrBlock: critical IPv4: 155.46.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e4:99:1c:76:e3:59:0f:ea:b8:8e:39:f5:8b:2f:10:97:86: a6:af:93:95:f1:39:e7:13:80:9f:35:30:04:b3:93:05:14:39: f1:f5:c0:b2:4a:5c:8e:7f:d8:73:eb:c6:36:f3:b8:c1:9d:9f: 82:33:c4:6e:01:c0:53:eb:7a:de:39:d5:b0:94:16:a7:7a:4d: 58:19:f7:7d:43:7b:a7:a9:7e:45:ee:f6:a1:ef:a9:3b:82:6d: b6:97:51:47:c8:f5:99:77:94:fa:f0:bd:5d:34:e9:49:b5:e6: 77:34:92:c2:39:44:6c:a1:ff:e7:f6:20:46:c4:67:f4:da:4e: 7b:f5:96:84:49:ca:79:63:d1:44:6c:c0:8b:73:bc:95:b5:e5: bb:10:d4:2a:37:59:43:00:11:97:08:e3:47:15:ae:30:60:04: 00:c1:49:bb:f0:c6:9c:bf:be:9c:ed:5d:09:53:83:f5:b6:0e: 23:73:15:8e:71:41:6d:e2:48:07:75:34:07:05:5f:41:70:92: 3f:16:83:71:93:88:13:84:9c:26:de:36:3b:09:ad:05:9e:02: 0f:dc:21:07:16:34:e6:95:8a:af:9e:2a:3d:29:82:0a:9e:4e: c7:5d:23:5e:d1:aa:eb:34:65:bd:82:fa:8f:2c:c8:7a:13:95: db:0a:b5:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7tj/j3qlhMGnpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MTE2OGYtNTY0OS00ZmRhLWFjYzItZTY1ZjM3N2Qy NTkyMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MjJjYTY3YmQtMTIwNS00ZDgwLWI4MDItNzcxMzBhYTNiMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ9273Wt8gQnLp1mFI2mPUs98yJZwfdI0FqR jxt6hoE/YUoCG9LviDVlu18+Fc6YrKLawjYcz9XlEAii5PhqbxaVZQun9TPbxO/R 80sCObj+nqs4qDCBz0z/+1G2Q73ggKWBjz7EZToiOy+/a/gvNfwAKJdUdxIU8W5B EBdlzARoUS0Rx9crLf1fDOo/Ppqp9MqnnFKxkmO7hfim495dpx0aX2Q3qVx9+6NH zI0G8gL9CRyB636NZWosIgRVC4XrP5/JID70xAPv5SB6AivX6gC7Px4o5uP3/Gnm mDcvZ5nlMDYTHWj5PapvMHW4xV6bgXkkadZtJLLCe3M3Fa64ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNe1jWu9AnJrPcUh6wPOaaMNFV0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYx MTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3ZDI1OTIvM2QyZDBmNjAtODY0Zi0z ZWJkLTgwYjctMTk5NzA4YmM1OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGE2MTE2OGYtNTY0OS00ZmRhLWFj YzItZTY1ZjM3N2QyNTkyL2RhNjExNjhmLTU2NDktNGZkYS1hY2MyLWU2NWYzNzdk MjU5Mi5jcmwwHwYDVR0jBBgwFoAU4GOzDFMmOtVqA1p0jJMUFc8ADFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVm Mzc3ZDI1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmy7FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErkmRx241kP6riOOfWLLxCXhqavk5XxOecTgJ81MASzkwUUOfH1wLJK XI5/2HPrxjbzuMGdn4IzxG4BwFPret451bCUFqd6TVgZ931De6epfkXu9qHvqTuC bbaXUUfI9Zl3lPrwvV006Um15nc0ksI5RGyh/+f2IEbEZ/TaTnv1loRJynlj0URs wItzvJW15bsQ1Co3WUMAEZcI40cVrjBgBADBSbvwxpy/vpztXQlTg/W2DiNzFY5x QW3iSAd1NAcFX0Fwkj8Wg3GTiBOEnCbeNjsJrQWeAg/cIQcWNOaViq+eKj0pggqe TsddI17Rqus0Zb2C+o8syHoTldsKtT8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:08:15 2025 by rpki-client