$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e8513718-46b4-33a3-a542-4a9804b2b4dc.roa File: e8513718-46b4-33a3-a542-4a9804b2b4dc.roa (raw, json) Hash identifier: mjAG6FEHfuZXzDWaB7Po1vz4HxINqLMYeWf5OwoYy+s= Subject key identifier: 90:9B:3C:BF:3E:EC:3E:82:E3:BF:44:09:D5:87:26:BB:22:F2:8B:47 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F432858491915528ADCC49665508D7498 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e8513718-46b4-33a3-a542-4a9804b2b4dc.roa Signing time: Thu 06 Mar 2025 12:32:00 +0000 ROA not before: Thu 06 Mar 2025 12:32:00 +0000 ROA not after: Wed 04 Jun 2025 11:32:00 +0000 asID: 23473 IP address blocks: 153.33.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:15:52:8a:dc:c4:96:65:50:8d:74:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 6 12:32:00 2025 GMT Not After : Jun 4 11:32:00 2025 GMT Subject: CN=d84acaab-4d23-4ff6-955d-361ced342b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:65:5c:d2:18:7a:3d:b6:eb:29:2b:e1:2c: 01:d0:ef:b6:c8:a4:a6:b7:8b:a2:45:02:3f:4a:c8: 7b:ec:6c:1c:82:23:51:fb:62:26:e8:0f:10:a4:ac: 6a:10:c6:6c:5d:7d:4e:ee:bb:3f:18:45:f4:44:52: 94:4d:83:1b:44:48:f5:43:02:13:da:f4:48:4b:8e: 24:07:7a:1a:00:0b:28:77:7e:59:53:b2:13:f7:c5: de:16:5f:03:43:8c:85:78:7e:0e:7d:31:09:1c:57: a9:e9:0e:9b:c4:fd:47:43:50:be:47:03:4e:00:b4: c8:29:54:ad:c6:03:ed:5a:ab:4d:1a:d4:53:ff:27: 78:bf:75:6b:5a:ca:fe:0b:89:5b:d0:7d:be:ba:70: b4:d1:35:d2:8d:25:b7:36:21:c8:16:45:fe:57:ec: 0d:15:84:5e:b6:6a:35:52:08:65:d8:a5:65:22:1e: d5:17:43:f0:f8:c7:1f:b7:8c:61:df:5c:36:87:07: 0b:e5:94:b7:74:c0:03:b9:85:1a:fd:4a:52:63:41: 3e:bf:e9:99:74:36:7d:60:50:a3:89:29:4f:17:d0: b4:78:92:41:2f:9d:83:03:8f:b1:aa:59:af:a8:e6: e2:e9:a9:f0:d3:7f:17:f4:9f:62:6c:e6:55:d1:9b: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9B:3C:BF:3E:EC:3E:82:E3:BF:44:09:D5:87:26:BB:22:F2:8B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e8513718-46b4-33a3-a542-4a9804b2b4dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:74:7a:7e:d5:5e:08:2e:9b:9f:1a:6a:d8:04:fc:34:e8:c6: b0:56:77:6a:61:d7:49:a2:5d:34:49:a6:68:be:2c:ca:c6:c1: 93:f6:86:68:b3:e0:b2:32:44:69:cd:8e:94:1d:00:25:d3:0a: d9:1d:3b:a6:36:80:89:3f:41:16:50:bf:ef:ed:c3:33:79:e6: d1:35:06:b1:2e:d6:2b:1d:57:98:31:0f:94:5e:da:6a:f7:05: 75:a0:38:23:67:b7:f3:e2:b4:8d:cb:15:66:41:c9:97:f2:a7: 11:2b:5d:59:a0:4a:65:a0:9d:9a:d8:08:89:7d:23:01:5f:f7: a4:52:7d:2b:d3:64:05:ac:b1:99:29:f5:7c:01:a7:64:78:4d: a2:42:1f:24:da:a7:cc:f7:6f:a2:ba:92:17:6c:a5:0a:3c:5d: f2:13:dd:13:63:78:3e:d4:33:0b:d7:5b:9d:7d:15:e6:14:14: 9b:f5:ca:9b:53:a9:14:b1:b9:7b:57:8c:1d:6f:21:b1:04:b4: d7:d5:58:f8:c1:67:09:40:93:64:f1:4b:29:d6:40:16:b5:cb: d2:84:d9:f7:11:df:bd:0b:61:89:fa:d9:6c:69:74:99:d4:71: 87:ec:5f:6b:e2:9a:9d:98:af:cc:55:e7:2a:1b:d3:24:8d:5f: 36:e2:90:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZFVKK3MSWZVCNdJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDMwNjEyMzIwMFoXDTI1MDYwNDExMzIwMFowLzEtMCsGA1UEAxMk ZDg0YWNhYWItNGQyMy00ZmY2LTk1NWQtMzYxY2VkMzQyYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrZlXNIYej226ykr4SwB0O+2yKSmt4uiRQI/ Ssh77GwcgiNR+2Im6A8QpKxqEMZsXX1O7rs/GEX0RFKUTYMbREj1QwIT2vRIS44k B3oaAAsod35ZU7IT98XeFl8DQ4yFeH4OfTEJHFep6Q6bxP1HQ1C+RwNOALTIKVSt xgPtWqtNGtRT/yd4v3VrWsr+C4lb0H2+unC00TXSjSW3NiHIFkX+V+wNFYRetmo1 Ughl2KVlIh7VF0Pw+Mcft4xh31w2hwcL5ZS3dMADuYUa/UpSY0E+v+mZdDZ9YFCj iSlPF9C0eJJBL52DA4+xqlmvqObi6anw038X9J9ibOZV0Zsc3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCbPL8+7D6C479ECdWHJrsi8otHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZTg1MTM3MTgtNDZiNC0z M2EzLWE1NDItNGE5ODA0YjJiNGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp0en7VXggum58aatgE/DToxrBWd2ph10miXTRJpmi+LMrGwZP2hmiz 4LIyRGnNjpQdACXTCtkdO6Y2gIk/QRZQv+/twzN55tE1BrEu1isdV5gxD5Re2mr3 BXWgOCNnt/PitI3LFWZByZfypxErXVmgSmWgnZrYCIl9IwFf96RSfSvTZAWssZkp 9XwBp2R4TaJCHyTap8z3b6K6khdspQo8XfIT3RNjeD7UMwvXW519FeYUFJv1yptT qRSxuXtXjB1vIbEEtNfVWPjBZwlAk2TxSynWQBa1y9KE2fcR370LYYn62WxpdJnU cYfsX2vimp2Yr8xV5yob0ySNXzbikEQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:00:19 2025 by rpki-client