$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a3687e94-c929-3cd0-a5ed-6703677f89f5.roa File: a3687e94-c929-3cd0-a5ed-6703677f89f5.roa (raw, json) Hash identifier: H2EnYhif0bUTHFnD4PXEYw1VKS9dRHq4uqiVqnVtedA= Subject key identifier: A3:4F:C3:4F:09:0A:07:67:97:75:5A:47:53:69:69:75:4C:3F:4D:DF Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285849F9DFC7F614A2B61777169740 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a3687e94-c929-3cd0-a5ed-6703677f89f5.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 21774 IP address blocks: 159.18.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c7:f6:14:a2:b6:17:77:16:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=90d347d9-9842-4fd1-b0dc-2a334f7dc5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:fd:77:fa:52:f4:9e:89:64:6e:79:32:99: 6b:2f:34:c0:d9:5e:74:89:3a:53:db:7a:f3:28:fc: 3b:cc:07:c4:72:e4:ed:bd:0a:3e:40:21:d4:f6:69: 1c:9a:27:0e:f9:9b:91:00:e6:73:33:ee:8a:5b:59: 2a:d3:2e:dd:c9:74:3f:16:56:14:8e:55:b8:4f:b6: 80:d5:8a:34:64:1d:cd:85:3a:f8:d1:f1:37:d8:b4: 8c:12:c7:24:6d:f2:8c:4e:54:2e:cf:36:ee:1e:84: 0b:4c:1b:eb:56:64:54:e4:ff:dc:4e:9d:9a:3a:dc: db:09:09:c5:e3:d0:ec:74:18:c4:0f:4b:62:15:38: 60:b6:ce:f0:6c:6c:c3:34:72:47:bb:dc:8d:88:14: b2:67:9e:3c:f1:4c:c2:c5:1d:81:5b:5a:78:d8:24: 0f:ff:fe:11:8d:21:83:fc:55:75:29:b1:14:12:5c: 0f:5b:94:f6:90:b0:5d:e7:b1:c9:a0:51:f2:48:c9: df:d2:70:96:3a:3c:46:a7:ee:1c:53:9e:8a:82:2c: c2:e5:1d:9b:e5:cc:4c:5d:02:5f:24:32:9f:49:e0: eb:24:31:3b:f3:6d:f1:c1:ee:3a:9e:55:44:5c:05: 3f:d5:50:54:68:0a:15:9f:fd:58:7f:c0:78:81:84: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4F:C3:4F:09:0A:07:67:97:75:5A:47:53:69:69:75:4C:3F:4D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a3687e94-c929-3cd0-a5ed-6703677f89f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 159.18.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1b:3b:98:b5:81:b1:1b:76:8c:34:b4:d7:f1:5b:7f:37:dc: 27:a6:9d:32:24:d5:61:7b:7a:01:5d:d4:3e:c8:ee:31:95:73: 0e:2d:0a:ff:84:49:5c:fe:ab:c6:ae:87:88:b5:0a:ce:c2:66: d9:33:90:ba:2b:8b:e8:31:85:d0:bc:44:89:d7:74:76:a8:1f: a7:00:68:e3:69:c1:4f:30:3c:00:ad:da:27:e4:e6:a6:bf:d1: 53:a0:75:04:6c:e1:fb:87:e3:e0:f6:26:49:9f:4d:00:15:ee: 7c:08:1a:4b:6e:7e:54:cd:f0:aa:16:c8:17:74:3e:bc:1e:7f: 3f:bd:2b:6b:e5:fb:16:85:02:dd:10:44:0d:b3:29:cd:ef:82: 1f:72:e7:e3:c5:94:a9:4d:c1:00:27:e6:8e:1e:79:91:55:90: 90:92:99:85:a7:78:42:23:66:db:73:bd:a9:e1:cc:9e:e2:03: 53:2c:e3:b1:ec:93:99:79:43:3a:35:ae:0c:1e:f2:d4:9a:7f: 36:c1:9d:4a:d9:ae:b8:bd:84:10:8f:64:af:1f:b5:0e:83:f0: d3:96:60:f0:95:60:9a:e1:be:e2:46:d6:62:e4:ee:b2:cb:c1: 02:d8:46:f5:e6:c9:63:80:05:2f:54:24:27:ca:f4:e7:33:25: c6:a5:75:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538f2FKK2F3cWl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk OTBkMzQ3ZDktOTg0Mi00ZmQxLWIwZGMtMmEzMzRmN2RjNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfT9d/pS9J6JZG55MplrLzTA2V50iTpT23rz KPw7zAfEcuTtvQo+QCHU9mkcmicO+ZuRAOZzM+6KW1kq0y7dyXQ/FlYUjlW4T7aA 1Yo0ZB3NhTr40fE32LSMEsckbfKMTlQuzzbuHoQLTBvrVmRU5P/cTp2aOtzbCQnF 49DsdBjED0tiFThgts7wbGzDNHJHu9yNiBSyZ5488UzCxR2BW1p42CQP//4RjSGD /FV1KbEUElwPW5T2kLBd57HJoFHySMnf0nCWOjxGp+4cU56KgizC5R2b5cxMXQJf JDKfSeDrJDE7823xwe46nlVEXAU/1VBUaAoVn/1Yf8B4gYQdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNPw08JCgdnl3VaR1NpaXVMP03fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYTM2ODdlOTQtYzkyOS0z Y2QwLWE1ZWQtNjcwMzY3N2Y4OWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABobO5i1gbEbdow0tNfxW3833CemnTIk1WF7egFd1D7I7jGVcw4tCv+E SVz+q8auh4i1Cs7CZtkzkLori+gxhdC8RInXdHaoH6cAaONpwU8wPACt2ifk5qa/ 0VOgdQRs4fuH4+D2JkmfTQAV7nwIGktuflTN8KoWyBd0Prwefz+9K2vl+xaFAt0Q RA2zKc3vgh9y5+PFlKlNwQAn5o4eeZFVkJCSmYWneEIjZttzvanhzJ7iA1Ms47Hs k5l5Qzo1rgwe8tSafzbBnUrZrri9hBCPZK8ftQ6D8NOWYPCVYJrhvuJG1mLk7rLL wQLYRvXmyWOABS9UJCfK9OczJcaldVk= -----END CERTIFICATE-----Generated at Fri Jun 6 18:20:00 2025 by rpki-client