$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa File: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (raw, json) Hash identifier: BBMGBXgXM/j+OSNhHv1QZ2MZxvhYH1EJd+YlifhyLSI= Subject key identifier: 5A:BD:A3:BA:07:AB:B0:A6:80:E0:6B:F0:63:68:78:94:E6:09:6A:46 Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F432858498B99D195D189C7062A68C040 Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 397735 IP address blocks: 158.51.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:d1:95:d1:89:c7:06:2a:68:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=31bd2279-48ba-4e0b-aae6-9b2e5d5d2a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f7:1c:ea:38:90:cb:d0:7e:30:5a:01:00:06: 84:1a:18:cf:fb:66:66:8b:33:f8:be:cf:22:55:4e: 71:df:07:cd:48:5d:c4:e4:88:77:6f:14:0c:1f:1b: 29:c4:b8:52:50:8e:21:95:3d:e6:d9:00:04:be:81: 1c:54:c0:e0:fa:67:f1:33:92:6d:c0:60:94:f1:12: b4:bc:be:24:a2:b7:8a:c7:11:72:81:c9:a7:17:d2: f2:97:76:dc:b4:70:08:58:5f:f8:cc:15:23:d2:ce: a7:fe:15:4e:7f:be:ab:58:a6:96:71:f6:5e:26:62: 2b:62:f2:6f:35:8a:3d:a4:5e:b5:b8:46:66:5c:7e: f6:3a:19:fb:83:98:e7:f3:18:88:b7:58:b2:67:7b: a5:09:b3:5c:d8:08:60:45:f2:58:2f:f4:ac:97:f8: 5e:47:2b:a0:96:27:1b:0f:fe:52:25:25:67:2d:7f: 99:5f:6c:c9:9b:eb:14:34:ef:ca:16:74:92:4b:89: 9f:ba:c9:35:92:66:9b:10:2e:00:01:d4:d1:21:0b: 5d:ff:6c:f8:89:28:47:a6:12:e9:f4:9b:25:f5:0d: bb:87:5a:69:34:be:00:19:25:57:f7:92:f6:7a:4c: 6d:d3:d0:29:48:39:62:bb:3c:ae:94:38:41:05:81: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BD:A3:BA:07:AB:B0:A6:80:E0:6B:F0:63:68:78:94:E6:09:6A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:76:81:45:d9:2b:71:cb:b6:c1:5e:6f:24:d7:6b:57:a4:75: 0d:fa:28:e4:9a:37:b8:a4:80:ae:c0:88:a1:b9:fa:c3:34:1f: fc:d1:20:46:bd:d5:d0:e9:4d:61:ed:89:a3:61:ed:0e:0b:3b: 61:fb:48:54:e5:09:9c:f6:a7:0c:24:e4:c3:e8:a1:3d:dd:fe: 63:ac:a7:78:0c:65:71:8c:fe:46:7a:59:37:d9:87:f1:e8:01: 10:ad:05:2a:83:a4:53:5a:f4:10:03:1e:3b:d9:29:45:29:3c: 25:d0:b4:3e:3b:9d:bf:ff:d7:ed:13:9e:fe:55:e5:7e:49:ef: 23:1f:dc:e2:c7:6a:b9:c0:91:e5:fe:c8:96:db:bf:58:dc:b9: e5:61:bc:a8:4c:da:66:a7:47:5d:05:da:8d:be:1c:2d:55:32: 7b:0a:cc:dc:35:e8:d2:e3:df:11:0b:a9:0a:4f:1a:28:1b:20: 48:e9:c8:7e:d9:61:64:4d:2f:db:0f:2e:a7:c2:2f:26:a5:0a: 13:05:63:44:55:7d:89:a6:0f:d2:45:3d:4c:db:a0:37:8a:8f: 3f:28:9b:96:c3:cf:70:f5:02:d8:0f:3e:d0:71:64:8c:63:89: f3:92:00:c0:76:1c:7b:91:f5:f6:8d:8a:30:a1:69:de:a2:52: a6:8a:ad:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLmdGV0YnHBipowEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk MzFiZDIyNzktNDhiYS00ZTBiLWFhZTYtOWIyZTVkNWQyYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPcc6jiQy9B+MFoBAAaEGhjP+2ZmizP4vs8i VU5x3wfNSF3E5Ih3bxQMHxspxLhSUI4hlT3m2QAEvoEcVMDg+mfxM5JtwGCU8RK0 vL4koreKxxFygcmnF9Lyl3bctHAIWF/4zBUj0s6n/hVOf76rWKaWcfZeJmIrYvJv NYo9pF61uEZmXH72Ohn7g5jn8xiIt1iyZ3ulCbNc2AhgRfJYL/Ssl/heRyuglicb D/5SJSVnLX+ZX2zJm+sUNO/KFnSSS4mfusk1kmabEC4AAdTRIQtd/2z4iShHphLp 9Jsl9Q27h1ppNL4AGSVX95L2ekxt09ApSDliuzyulDhBBYEYswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq9o7oHq7CmgOBr8GNoeJTmCWpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvYTRhZTFlYmUtOTg1Yy0z M2M4LWFlOTAtOGNhMzM4YTRlYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt2gUXZK3HLtsFebyTXa1ekdQ36KOSaN7ikgK7AiKG5+sM0H/zRIEa9 1dDpTWHtiaNh7Q4LO2H7SFTlCZz2pwwk5MPooT3d/mOsp3gMZXGM/kZ6WTfZh/Ho ARCtBSqDpFNa9BADHjvZKUUpPCXQtD47nb//1+0Tnv5V5X5J7yMf3OLHarnAkeX+ yJbbv1jcueVhvKhM2manR10F2o2+HC1VMnsKzNw16NLj3xELqQpPGigbIEjpyH7Z YWRNL9sPLqfCLyalChMFY0RVfYmmD9JFPUzboDeKjz8om5bDz3D1AtgPPtBxZIxj ifOSAMB2HHuR9faNijChad6iUqaKrcc= -----END CERTIFICATE-----Generated at Thu Apr 17 17:43:33 2025 by rpki-client