$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa File: fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa (raw, json) Hash identifier: IQXSWEZTbFhGGexX0yMEtQjWiho5zSy13oaJRlCQP3c= Subject key identifier: C8:63:47:3C:D4:63:01:AE:43:88:A9:E5:BD:40:C2:70:7E:91:78:91 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F43285849F2E543D3BB6400AEE06E6900 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 10430 IP address blocks: 152.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:43:d3:bb:64:00:ae:e0:6e:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=1de5a2b9-1075-4229-9fa2-1b4d2c7cf290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cb:10:e1:22:27:ef:79:e6:ff:40:86:00:51: 5f:40:d8:cb:96:30:3f:2e:0d:7e:0d:ab:49:6c:76: 0d:5a:e1:2e:87:df:10:ab:92:d7:21:54:e1:7d:e6: 40:fe:94:21:ba:ff:0b:69:ec:f6:07:e1:f0:65:9e: 84:c2:a5:de:46:98:1a:09:fe:cf:da:ed:25:00:17: 44:a4:2a:db:f0:f4:fa:7c:a2:2c:86:01:c4:a2:ad: 2a:09:23:59:52:da:a1:97:f8:98:fa:3d:86:31:3a: ba:3d:ef:dd:33:08:08:22:8e:3b:f0:dc:28:c5:26: 5f:98:07:10:e9:81:27:3d:92:13:a8:12:4e:c2:b5: 52:e5:bb:11:2c:7a:d2:f8:26:80:73:86:af:82:bf: da:92:67:78:f5:5b:2a:a4:68:64:77:9f:f9:c2:fe: 28:71:b8:7b:12:d6:ba:f3:7b:5f:1d:5b:a5:74:8f: 02:16:c6:29:a8:67:49:bf:b0:ff:1e:15:41:e8:30: 51:54:78:9b:9b:01:e8:0d:b7:8b:eb:d5:01:ec:85: 66:f2:5f:b4:47:aa:05:76:79:c1:e0:57:b0:54:bb: 76:12:0c:bc:49:6e:78:88:37:d1:5d:db:8f:10:ee: b2:38:35:53:d9:73:c3:e5:52:e5:aa:2d:19:4c:b1: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:63:47:3C:D4:63:01:AE:43:88:A9:E5:BD:40:C2:70:7E:91:78:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:91:89:36:10:b7:6d:d2:68:34:c5:fd:13:f8:c4:83:22:bd: 48:77:b4:9b:a1:6a:fe:d5:95:a9:59:a4:14:97:b1:50:f8:ac: c5:9c:e0:e3:ee:4f:21:15:5c:73:9d:06:29:68:90:67:a2:3b: 83:c5:30:c9:6b:83:5d:7d:61:66:95:d9:db:c4:4e:c5:b3:6d: 53:93:ac:92:fd:94:af:69:ad:be:46:3b:06:f4:e3:6f:36:63: b2:1a:22:9a:14:fd:c3:df:45:84:25:7f:aa:b6:69:14:f4:ed: a6:90:66:ab:e6:f4:f1:27:8e:01:f7:1f:74:5e:7b:ed:61:19: 8f:33:42:64:da:b3:d4:ad:97:2d:23:f7:93:5b:cc:23:a9:a8: 1f:c5:b9:72:0c:fa:e0:a8:83:3a:5b:ee:15:b4:44:e5:b5:a2: ee:a4:4d:f7:bf:67:9b:ee:94:fe:30:3b:88:94:1a:e8:38:f0: 67:c5:d3:d7:77:30:85:a0:0c:a9:27:43:37:89:2e:f6:a5:95: 83:a0:58:55:9d:b2:55:6c:7f:2b:bf:c7:f9:0f:42:d5:05:ef: ee:0f:74:57:6a:e2:31:a1:fa:74:96:20:c6:da:8b:87:a8:68: 66:32:b3:5d:86:ba:6e:e4:6d:bb:9c:49:dc:29:12:f9:5b:c6: 64:99:f7:04 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEny5UPTu2QAruBuaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MWRlNWEyYjktMTA3NS00MjI5LTlmYTItMWI0ZDJjN2NmMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMsQ4SIn73nm/0CGAFFfQNjLljA/Lg1+DatJ bHYNWuEuh98Qq5LXIVThfeZA/pQhuv8Laez2B+HwZZ6EwqXeRpgaCf7P2u0lABdE pCrb8PT6fKIshgHEoq0qCSNZUtqhl/iY+j2GMTq6Pe/dMwgIIo478NwoxSZfmAcQ 6YEnPZITqBJOwrVS5bsRLHrS+CaAc4avgr/akmd49VsqpGhkd5/5wv4ocbh7Eta6 83tfHVuldI8CFsYpqGdJv7D/HhVB6DBRVHibmwHoDbeL69UB7IVm8l+0R6oFdnnB 4FewVLt2Egy8SW54iDfRXduPEO6yODVT2XPD5VLlqi0ZTLFeNQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMhjRzzUYwGuQ4ip5b1AwnB+kXiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZmM3MWJiYzUtNTE2ZS0z YWQ5LWIzMzAtMzc2YjdkOGJkYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmJ0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZJGJNhC3bdJoNMX9E/jEgyK9SHe0m6Fq/tWVqVmkFJexUPisxZzg4+5P IRVcc50GKWiQZ6I7g8UwyWuDXX1hZpXZ28ROxbNtU5Oskv2Ur2mtvkY7BvTjbzZj shoimhT9w99FhCV/qrZpFPTtppBmq+b08SeOAfcfdF577WEZjzNCZNqz1K2XLSP3 k1vMI6moH8W5cgz64KiDOlvuFbRE5bWi7qRN979nm+6U/jA7iJQa6DjwZ8XT13cw haAMqSdDN4ku9qWVg6BYVZ2yVWx/K7/H+Q9C1QXv7g90V2riMaH6dJYgxtqLh6ho ZjKzXYa6buRtu5xJ3CkS+VvGZJn3BA== -----END CERTIFICATE-----Generated at Fri Jun 6 23:37:28 2025 by rpki-client