$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa File: bef358d3-0363-30e8-aa38-d97259f0f8bc.roa (raw, json) Hash identifier: r7Nx2znXm5NYXLdUnyQ/mLxeSJmPzka5Sg9oGmg4ryo= Subject key identifier: 32:B2:5A:13:FF:DF:F3:1D:53:0B:B5:95:A7:F7:D8:8B:31:76:74:0E Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285848CDE1122360BE725880B61B40 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 33442 IP address blocks: 157.235.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:12:23:60:be:72:58:80:b6:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=77a34f05-2514-429d-be9b-a243ae4db7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:85:f0:8e:51:c2:d5:a9:5d:46:24:5d:cf: 98:f9:f8:b3:83:83:04:58:aa:52:12:78:20:3b:5a: 6e:5c:e8:53:a4:20:3e:5e:4f:dd:2a:3a:af:07:1b: 39:d3:1d:1f:1c:a3:a7:08:b1:9f:d6:79:6b:82:a8: 1c:04:2e:cc:92:12:25:eb:04:85:c6:d3:78:d4:3d: 9c:50:b4:45:db:de:42:80:c3:6e:a2:28:be:30:77: 23:69:9d:c5:8f:1e:fa:ec:9b:41:f8:be:98:96:9b: bb:17:ce:9c:7f:7d:9c:87:37:34:1b:df:88:b0:54: 88:1f:d6:a4:d5:36:d3:b5:d0:4e:71:c8:2a:76:2a: f8:8e:47:f8:a9:a0:2d:44:b2:b3:ac:97:46:8d:96: c1:be:67:ba:75:a6:1b:c5:e3:a8:e6:ae:27:09:56: 1b:56:71:ca:b1:18:fc:65:a3:79:19:ec:31:ec:cb: c0:e5:4f:7a:21:af:f5:df:e7:a6:ab:da:d0:a8:57: b3:1a:fc:72:f7:4c:45:1a:eb:2b:08:ef:f3:41:e7: de:82:fa:4e:fa:6f:db:87:41:8f:5f:31:9d:40:14: 35:82:2a:c7:93:a7:65:95:2a:c2:a2:62:68:45:26: e1:a3:d3:04:58:8d:47:e4:ef:fd:0b:68:8f:cf:66: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B2:5A:13:FF:DF:F3:1D:53:0B:B5:95:A7:F7:D8:8B:31:76:74:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:44:07:f9:65:09:ab:84:e7:6d:a0:e0:54:12:b3:d9:fd:c6: f9:6b:fe:10:79:1a:69:8a:6e:dc:79:d0:64:93:93:d0:8e:ab: 46:42:8d:5f:10:ce:1f:0a:33:bb:16:89:13:f0:92:1d:ed:9c: 35:e1:42:64:c2:fe:9b:e9:6b:f8:3d:0c:0f:c8:78:ac:34:65: f2:39:9a:1c:54:d4:e5:0d:8f:63:94:fb:c7:a2:9f:59:60:04: 9d:64:e4:a8:55:af:54:97:ba:d1:83:b4:80:a9:6b:41:7c:ec: d3:7f:75:15:3f:cc:9c:09:7d:33:d1:12:ce:c7:23:1b:c5:35: 23:b8:0e:b2:5a:23:90:7d:25:eb:2e:56:5b:fd:14:9f:fb:84: 89:ad:7c:fb:8e:40:82:11:02:12:db:ea:6c:66:12:f9:cb:9e: d9:3a:e7:99:ff:53:b6:f5:57:b9:2f:54:9d:ee:be:cb:14:a5: 80:a8:d5:fe:a3:c7:6d:f1:58:2f:c0:c0:e9:8f:f6:8e:dc:b8: ac:1e:be:f0:30:ef:ad:41:18:1d:dc:1d:9e:48:05:96:fc:e2: 01:bf:d4:ae:8e:21:f4:9d:a4:9b:21:98:7d:8d:2b:d9:6c:2e: a2:eb:3e:36:dd:58:fc:93:03:e7:d4:62:2c:b0:cc:00:24:bf: 9d:96:27:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RIjYL5yWIC2G0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NzdhMzRmMDUtMjUxNC00MjlkLWJlOWItYTI0M2FlNGRiN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQqF8I5RwtWpXUYkXc+Y+fizg4MEWKpSEngg O1puXOhTpCA+Xk/dKjqvBxs50x0fHKOnCLGf1nlrgqgcBC7MkhIl6wSFxtN41D2c ULRF295CgMNuoii+MHcjaZ3Fjx767JtB+L6Ylpu7F86cf32chzc0G9+IsFSIH9ak 1TbTtdBOccgqdir4jkf4qaAtRLKzrJdGjZbBvme6daYbxeOo5q4nCVYbVnHKsRj8 ZaN5Gewx7MvA5U96Ia/13+emq9rQqFezGvxy90xFGusrCO/zQefegvpO+m/bh0GP XzGdQBQ1girHk6dllSrComJoRSbho9MEWI1H5O/9C2iPz2aEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKyWhP/3/MdUwu1laf32IsxdnQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvYmVmMzU4ZDMtMDM2My0z MGU4LWFhMzgtZDk3MjU5ZjBmOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAneuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdEB/llCauE522g4FQSs9n9xvlr/hB5GmmKbtx50GSTk9COq0ZCjV8Q zh8KM7sWiRPwkh3tnDXhQmTC/pvpa/g9DA/IeKw0ZfI5mhxU1OUNj2OU+8ein1lg BJ1k5KhVr1SXutGDtICpa0F87NN/dRU/zJwJfTPREs7HIxvFNSO4DrJaI5B9Jesu Vlv9FJ/7hImtfPuOQIIRAhLb6mxmEvnLntk655n/U7b1V7kvVJ3uvssUpYCo1f6j x23xWC/AwOmP9o7cuKwevvAw761BGB3cHZ5IBZb84gG/1K6OIfSdpJshmH2NK9ls LqLrPjbdWPyTA+fUYiywzAAkv52WJ+Q= -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:41 2025 by rpki-client