$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa File: 2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa (raw, json) Hash identifier: 49HlZvpTQg0SIzJ9u2orLzqM7NAVkxEDRH16svITcZU= Subject key identifier: 51:0D:FB:90:FE:D9:2A:D2:EE:9F:21:95:F6:E8:8B:61:71:61:89:E2 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F43285849E7BA8065589FF551E43C6F00 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 53991 IP address blocks: 164.152.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:80:65:58:9f:f5:51:e4:3c:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=d0970e84-e16b-4d9f-a25f-012d972c7b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:c8:03:71:e4:2e:3c:2c:2c:73:6a:75:c9: 22:e1:42:6f:68:f5:ea:a0:46:27:ea:08:d2:60:3c: ae:c2:39:ff:aa:53:b4:e1:c4:b0:3c:ff:45:fb:e4: ad:f6:c4:6a:ad:b0:8d:88:73:c6:82:ef:86:6a:85: 53:d8:38:13:bc:2c:54:ac:69:a0:3b:92:07:a7:7d: 58:a6:44:6a:74:85:4c:cc:a5:72:24:10:ec:08:82: 08:f9:7c:f1:53:04:a3:02:bb:1a:9c:6b:9b:e0:ee: 3f:88:15:2f:e7:9c:35:13:c5:11:a2:d9:45:09:bd: b9:06:ac:14:62:29:98:92:10:47:26:f2:18:cc:fe: 94:3a:57:78:0f:c3:c6:5c:15:3a:00:34:23:f5:7e: ae:19:a8:f1:44:e3:5b:de:70:09:c5:a0:42:9b:3d: 01:c7:63:29:20:be:0d:85:21:a7:c6:5c:9e:fb:7e: 4b:76:54:49:f0:d3:70:27:f7:33:8c:45:1b:31:93: 4f:1a:d0:b5:14:27:db:7e:23:d9:e9:49:b2:a2:da: de:cc:ef:2e:db:87:0f:a6:02:cd:af:f1:96:c1:fc: 03:37:77:f1:70:56:20:9a:32:c6:8b:15:64:29:97: 82:02:1b:d9:c5:c4:0b:fb:2c:3d:2c:db:f9:ce:62: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0D:FB:90:FE:D9:2A:D2:EE:9F:21:95:F6:E8:8B:61:71:61:89:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f9:d5:d0:62:f8:7e:f6:d4:4c:76:69:4f:41:10:16:5a:f9: 40:6d:7d:03:05:b5:e5:73:48:fb:15:f9:1a:a7:cd:b1:84:0e: a1:dc:8e:78:65:e3:5b:0f:e1:e7:6e:4c:48:f2:2c:4c:de:09: 48:94:97:4e:4c:7c:aa:7d:37:15:cf:a7:d2:38:f6:26:a0:fc: e5:24:8d:d8:9f:09:2c:97:76:3a:29:46:0e:4e:63:73:63:e2: e0:30:3a:80:d8:03:e0:53:89:01:89:e9:6c:31:9e:e9:a4:5e: 9e:ce:17:51:76:4a:d2:c3:cd:e7:69:64:95:43:07:07:09:3e: 59:6a:3d:38:d5:26:96:4c:b8:a7:a2:f4:d1:02:67:27:ba:3c: 48:8d:f2:95:a9:02:af:90:72:81:24:96:8e:71:83:ba:c4:8c: e6:17:6f:7b:cf:43:19:c0:1f:dc:e5:36:de:24:cf:cc:8d:b8: 58:2d:0b:df:6f:66:1d:7a:29:5c:ec:e5:29:46:e7:fc:b4:9e: 26:50:c4:87:52:d9:ce:a8:ee:1a:4e:b3:0e:7a:4a:59:e1:1f: 2d:3b:47:21:ef:e5:67:61:c4:8d:e1:70:2f:c7:00:69:31:7c: a8:6f:f3:8e:4d:10:8e:c0:8b:82:9f:1a:e8:80:cd:a8:ec:e1: fe:40:3a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoBlWJ/1UeQ8bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZDA5NzBlODQtZTE2Yi00ZDlmLWEyNWYtMDEyZDk3MmM3YjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyjIA3HkLjwsLHNqdcki4UJvaPXqoEYn6gjS YDyuwjn/qlO04cSwPP9F++St9sRqrbCNiHPGgu+GaoVT2DgTvCxUrGmgO5IHp31Y pkRqdIVMzKVyJBDsCIII+XzxUwSjArsanGub4O4/iBUv55w1E8URotlFCb25BqwU YimYkhBHJvIYzP6UOld4D8PGXBU6ADQj9X6uGajxRONb3nAJxaBCmz0Bx2MpIL4N hSGnxlye+35LdlRJ8NNwJ/czjEUbMZNPGtC1FCfbfiPZ6UmyotrezO8u24cPpgLN r/GWwfwDN3fxcFYgmjLGixVkKZeCAhvZxcQL+yw9LNv5zmLUowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEN+5D+2SrS7p8hlfboi2FxYYniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvMjk0M2JmYzQtYTg0OS0z MTIzLTg0ZjYtOTlkNmNlYjc5ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj51dBi+H721Ex2aU9BEBZa+UBtfQMFteVzSPsV+RqnzbGEDqHcjnhl 41sP4eduTEjyLEzeCUiUl05MfKp9NxXPp9I49iag/OUkjdifCSyXdjopRg5OY3Nj 4uAwOoDYA+BTiQGJ6WwxnumkXp7OF1F2StLDzedpZJVDBwcJPllqPTjVJpZMuKei 9NECZye6PEiN8pWpAq+QcoEklo5xg7rEjOYXb3vPQxnAH9zlNt4kz8yNuFgtC99v Zh16KVzs5SlG5/y0niZQxIdS2c6o7hpOsw56SlnhHy07RyHv5WdhxI3hcC/HAGkx fKhv845NEI7Ai4KfGuiAzajs4f5AOpQ= -----END CERTIFICATE-----Generated at Sun Jun 8 00:44:48 2025 by rpki-client