$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5338cb2-13a0-3da8-9e5d-721193d0be3c.roa File: f5338cb2-13a0-3da8-9e5d-721193d0be3c.roa (raw, json) Hash identifier: cyTW7TC03MwjIxSW1uKzer4ohJZjlCP7VrXnEjYmjvQ= Subject key identifier: 12:2C:49:F1:1E:74:33:84:43:16:E5:57:48:CB:93:48:08:54:2D:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584967EAFF01FDBA8AE7ED5DEA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5338cb2-13a0-3da8-9e5d-721193d0be3c.roa Signing time: Thu 03 Apr 2025 18:15:34 +0000 ROA not before: Thu 03 Apr 2025 18:15:34 +0000 ROA not after: Wed 02 Jul 2025 18:15:34 +0000 asID: 30036 IP address blocks: 150.195.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:ea:ff:01:fd:ba:8a:e7:ed:5d:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 3 18:15:34 2025 GMT Not After : Jul 2 18:15:34 2025 GMT Subject: CN=a1b5f5c9-b04f-42a8-9ed5-cd3b621cb052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:29:d5:43:dc:5e:ba:0c:63:24:0c:c8:4a: 33:f3:ee:a1:56:be:d9:2b:98:c8:2f:95:0d:7f:e5: ea:bc:ff:a6:40:4c:39:38:be:84:7b:e4:18:96:50: e3:fe:7a:4e:18:c4:83:6d:ae:40:76:73:07:e8:2d: c8:64:58:a5:72:66:0d:e6:16:b3:1b:35:e3:74:dc: 2c:5a:63:2b:df:7b:41:b6:3e:0c:1d:24:46:14:e3: c6:9d:4d:2f:8f:cd:f0:d2:1c:43:3e:78:7a:36:a4: 93:b9:f9:f6:97:6d:54:d9:77:54:0f:43:fa:64:4f: 53:db:34:70:0c:39:c5:07:70:d6:f3:39:b5:17:92: 2c:98:f8:a1:33:7e:c7:f2:28:ad:7b:18:16:45:31: 76:25:02:ee:87:53:b4:03:4d:aa:2c:2a:62:ec:fb: 40:c2:9e:c7:57:31:65:12:c4:99:45:78:ca:1b:29: 13:4a:cb:87:b9:92:b6:cc:83:ee:d3:da:8e:02:22: f9:ef:86:d8:07:d1:b8:77:c8:6f:85:54:a6:44:57: e0:81:3f:99:64:c2:41:30:c3:c4:28:2d:fe:c0:0a: 22:48:92:99:76:6e:46:a6:05:3c:c7:86:7a:63:0c: a5:87:e7:e8:72:dc:9b:63:a9:36:d2:98:3a:39:c8: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2C:49:F1:1E:74:33:84:43:16:E5:57:48:CB:93:48:08:54:2D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5338cb2-13a0-3da8-9e5d-721193d0be3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ca:26:12:8a:1e:20:77:bb:de:44:98:db:d1:00:b9:2d:7a: 71:88:1b:da:a0:82:e3:d3:61:1a:fa:f0:e8:68:9f:9e:d1:6b: 72:ee:8d:3e:b0:7f:c1:fd:da:07:51:bf:29:ed:cc:2d:6a:18: 9a:1c:dc:5b:99:f0:86:8c:60:a5:30:39:e7:8b:46:9c:ab:8c: 3a:a7:86:13:63:d6:8e:53:94:3e:bf:13:49:cf:22:cf:ad:b5: 49:53:22:1f:c5:be:7c:bf:ca:f9:08:17:fe:69:70:84:6e:8b: 9d:a3:fb:5a:b3:2f:b8:27:05:bc:76:c8:a6:95:fd:5f:cb:fe: 99:16:c7:eb:98:45:73:c4:4f:9d:79:b0:16:80:c7:1d:58:5d: c7:81:15:3f:68:fd:cb:b2:d0:ec:0b:6d:63:4e:17:c5:6f:a0: bf:02:71:c8:c7:89:ca:93:bf:9b:e0:37:d4:55:48:bb:69:20: 6c:64:37:6e:3b:74:be:b6:b7:46:c7:ec:f6:48:f5:87:dc:94: 6b:70:ee:9a:81:1c:76:78:0c:cd:fb:bb:2d:50:d1:22:12:cd: 9e:2d:3f:86:09:04:aa:1c:f0:8a:c8:f4:38:01:a3:69:88:db: 7a:56:fe:e5:f7:de:77:6c:4a:47:31:04:03:e3:be:6f:ec:9e: 6e:64:a9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEln6v8B/bqK5+1d6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQwMzE4MTUzNFoXDTI1MDcwMjE4MTUzNFowLzEtMCsGA1UEAxMk YTFiNWY1YzktYjA0Zi00MmE4LTllZDUtY2QzYjYyMWNiMDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Ap1UPcXroMYyQMyEoz8+6hVr7ZK5jIL5UN f+XqvP+mQEw5OL6Ee+QYllDj/npOGMSDba5AdnMH6C3IZFilcmYN5hazGzXjdNws WmMr33tBtj4MHSRGFOPGnU0vj83w0hxDPnh6NqSTufn2l21U2XdUD0P6ZE9T2zRw DDnFB3DW8zm1F5IsmPihM37H8iitexgWRTF2JQLuh1O0A02qLCpi7PtAwp7HVzFl EsSZRXjKGykTSsuHuZK2zIPu09qOAiL574bYB9G4d8hvhVSmRFfggT+ZZMJBMMPE KC3+wAoiSJKZdm5GpgU8x4Z6Ywylh+foctybY6k20pg6OchtZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIsSfEedDOEQxblV0jLk0gIVC1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjUzMzhjYjItMTNhMC0z ZGE4LTllNWQtNzIxMTkzZDBiZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHKJhKKHiB3u95EmNvRALktenGIG9qgguPTYRr68Ohon57Ra3LujT6w f8H92gdRvyntzC1qGJoc3FuZ8IaMYKUwOeeLRpyrjDqnhhNj1o5TlD6/E0nPIs+t tUlTIh/Fvny/yvkIF/5pcIRui52j+1qzL7gnBbx2yKaV/V/L/pkWx+uYRXPET515 sBaAxx1YXceBFT9o/cuy0OwLbWNOF8VvoL8CccjHicqTv5vgN9RVSLtpIGxkN247 dL62t0bH7PZI9YfclGtw7pqBHHZ4DM37uy1Q0SISzZ4tP4YJBKoc8IrI9DgBo2mI 23pW/uX33ndsSkcxBAPjvm/snm5kqV8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:00 2025 by rpki-client