$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa File: e1203c47-8cfb-3b72-aafa-43b08573a640.roa (raw, json) Hash identifier: Irf+22FbU0dtEIuDbrVDW5N8IL4uZySVQ3ZIj/+7qgE= Subject key identifier: EC:28:15:FE:35:EB:9B:78:15:12:3D:84:5F:2E:77:06:6A:27:60:96 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285849F2E54988B1E7F5FCE4CC4300 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 33442 IP address blocks: 157.235.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:49:88:b1:e7:f5:fc:e4:cc:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=22a2be6c-36ac-40c2-ae91-273e11171a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:5d:f2:39:08:51:f4:4c:ef:f6:79:a3:e6: e8:e4:b3:f6:81:1b:94:c2:99:74:d6:70:d8:bf:29: ea:b0:af:b5:81:b4:84:73:80:f5:dd:74:eb:fe:3f: a2:a0:ab:32:02:db:7a:21:3b:df:61:6f:3f:17:d1: b1:06:d9:11:17:07:f5:d8:0d:88:86:ff:c1:63:d1: cb:df:3e:23:ca:65:55:21:3b:63:30:34:0f:c3:01: 4c:12:3b:95:be:ef:9e:69:c6:cf:0a:81:f3:cf:eb: 04:e0:1f:23:23:1c:cb:a7:8b:d7:17:1b:06:81:3a: 2d:93:1d:63:77:46:f8:68:64:20:c2:d2:9f:87:55: 25:c2:c9:52:75:b5:5a:f1:bc:3f:eb:33:ec:45:24: fa:82:68:98:8a:0c:a9:a7:ac:bb:06:87:00:62:99: f0:e3:ae:79:12:6f:41:96:81:54:1d:26:fe:a4:d8: b2:0b:eb:f3:1e:fe:e9:67:76:d1:5d:48:72:19:af: f8:6e:63:41:02:c1:e3:f7:8b:cc:a0:36:0d:63:83: 2b:87:8b:11:3e:96:68:48:68:a3:c4:6c:53:52:a4: a0:c9:62:98:61:91:e8:62:ba:45:3f:81:a9:c4:14: fa:8c:5f:bb:d4:e9:90:1e:6d:65:1a:29:c3:4a:a0: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:28:15:FE:35:EB:9B:78:15:12:3D:84:5F:2E:77:06:6A:27:60:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3d:3d:a2:a6:59:97:9b:5d:45:c5:c7:46:ed:a4:76:4b:e8: 8e:0a:64:07:4e:68:5a:71:d1:b5:dc:5a:16:19:a1:a7:b4:f1: 54:72:ff:67:ef:83:5d:f7:76:56:59:99:fe:af:bc:ff:c5:16: 78:73:f2:74:23:a8:19:8a:d7:7c:0c:ad:90:5f:7c:06:d4:ef: 6f:3c:cd:84:5e:b2:50:9c:2e:48:97:96:22:4b:45:82:81:2e: de:7e:cc:0d:1d:18:b9:60:8e:03:06:0a:76:19:4f:33:16:f6: 23:c5:33:bc:e2:3a:89:f8:03:c6:a8:d8:11:d1:d5:44:5a:94: 17:57:da:3b:4a:1a:52:5e:b8:d2:57:5d:c4:18:ca:ca:b0:2d: 36:4f:26:d7:86:84:2e:8f:bd:0d:3e:6d:89:01:19:77:68:d3: f7:f7:b5:b8:28:c4:38:7c:38:4f:0e:d9:3e:bd:7c:75:83:7d: 26:03:9d:b1:0a:88:55:d5:9e:09:34:63:8f:42:80:e3:42:f4: bb:d6:6d:5c:5c:9b:58:10:2e:34:a9:3b:93:c3:ca:4d:52:33: 25:bb:b1:53:f4:bd:2c:ed:45:15:c1:3f:90:bd:3a:9d:df:48: 63:65:99:0d:41:29:f8:c8:0a:77:ae:2c:9e:dd:ed:eb:c4:5a: a6:ad:64:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5UmIsef1/OTMQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MjJhMmJlNmMtMzZhYy00MGMyLWFlOTEtMjczZTExMTcxYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn01d8jkIUfRM7/Z5o+bo5LP2gRuUwpl01nDY vynqsK+1gbSEc4D13XTr/j+ioKsyAtt6ITvfYW8/F9GxBtkRFwf12A2Ihv/BY9HL 3z4jymVVITtjMDQPwwFMEjuVvu+eacbPCoHzz+sE4B8jIxzLp4vXFxsGgTotkx1j d0b4aGQgwtKfh1UlwslSdbVa8bw/6zPsRST6gmiYigypp6y7BocAYpnw4655Em9B loFUHSb+pNiyC+vzHv7pZ3bRXUhyGa/4bmNBAsHj94vMoDYNY4Mrh4sRPpZoSGij xGxTUqSgyWKYYZHoYrpFP4GpxBT6jF+71OmQHm1lGinDSqC5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwoFf4165t4FRI9hF8udwZqJ2CWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZTEyMDNjNDctOGNmYi0z YjcyLWFhZmEtNDNiMDg1NzNhNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAneuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE89PaKmWZebXUXFx0btpHZL6I4KZAdOaFpx0bXcWhYZoae08VRy/2fv g133dlZZmf6vvP/FFnhz8nQjqBmK13wMrZBffAbU7288zYReslCcLkiXliJLRYKB Lt5+zA0dGLlgjgMGCnYZTzMW9iPFM7ziOon4A8ao2BHR1URalBdX2jtKGlJeuNJX XcQYysqwLTZPJteGhC6PvQ0+bYkBGXdo0/f3tbgoxDh8OE8O2T69fHWDfSYDnbEK iFXVngk0Y49CgONC9LvWbVxcm1gQLjSpO5PDyk1SMyW7sVP0vSztRRXBP5C9Op3f SGNlmQ1BKfjICneuLJ7d7evEWqatZJ0= -----END CERTIFICATE-----Generated at Sat Jun 7 19:07:46 2025 by rpki-client