$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4422852e-0841-37e0-b542-103ec6a2205c.roa File: 4422852e-0841-37e0-b542-103ec6a2205c.roa (raw, json) Hash identifier: Eef8y16Aq9HBXDv8bgRB9tnoI0BJS/GsuW+dfQEglXM= Subject key identifier: F6:6D:68:2F:D5:18:61:29:33:3D:47:C3:72:85:E0:39:33:6D:FD:E1 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F432858495ABECDB0AF3A2A1F3AC00E80 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4422852e-0841-37e0-b542-103ec6a2205c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 9084 IP address blocks: 154.1.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:cd:b0:af:3a:2a:1f:3a:c0:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=6bb25942-7411-423d-b9a5-571bdaa4ddff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:42:e8:0e:d8:95:f1:48:26:29:bb:7d:c5: ac:62:f5:ea:f6:f3:9b:48:67:ce:6d:04:2d:33:45: 84:7a:f5:ab:8e:9e:ba:c6:08:c2:20:74:c5:4e:8a: 05:ae:cb:5a:88:25:e5:e0:73:ad:49:f3:d2:7f:e3: 12:97:04:10:4c:1e:42:1d:2a:4d:c6:53:70:2b:d6: 70:26:8d:01:4c:5c:5c:c8:3b:8c:f6:9a:cd:18:17: c0:38:66:55:50:18:ed:c1:22:34:50:38:b1:8e:b3: 3b:b3:a1:34:1f:46:1f:07:5b:0c:5c:82:93:b0:f9: 68:c5:b6:6f:00:5c:10:96:9c:aa:0d:65:4a:4c:73: 1c:8b:9d:15:8c:e1:86:22:5c:91:8e:21:36:6d:b2: 37:24:93:98:2a:32:f6:be:a8:be:9c:64:68:19:9a: 47:29:c4:a7:17:e7:c7:98:71:5e:e4:1d:1a:35:ae: fb:b5:d8:f8:d6:c2:49:70:3a:1e:e0:00:02:49:25: 6c:75:ae:25:d2:bf:87:5b:a7:eb:fa:33:3a:f4:79: 76:be:dc:83:e5:ef:03:75:37:6e:79:3f:3b:0d:05: 7d:38:2f:15:f1:e1:fa:15:5a:76:cd:41:04:54:02: bf:77:d7:62:38:c5:b8:be:24:ad:56:96:bf:52:1c: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6D:68:2F:D5:18:61:29:33:3D:47:C3:72:85:E0:39:33:6D:FD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4422852e-0841-37e0-b542-103ec6a2205c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 154.1.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e9:d3:3f:22:16:fc:0f:c0:69:bc:24:09:fa:f6:d5:c2:35: 9a:02:c8:bf:b5:ef:0d:38:e8:9e:2d:61:f7:63:fb:68:44:7c: 64:c1:ee:74:55:70:e1:c0:07:e3:17:4b:c0:bb:af:75:eb:22: 67:70:d1:ab:3f:60:d3:d5:e1:c6:1c:bc:e0:22:2f:ce:9a:ac: b8:42:7d:97:42:ab:98:76:31:1a:f7:dd:f1:dc:88:d0:46:4b: cc:a8:fd:dd:df:af:39:a1:bf:77:b8:74:67:c5:b5:f0:04:09: a7:a4:ac:fc:9e:bc:87:4f:5a:b5:cf:30:fd:fa:0c:f1:ed:4d: a6:88:11:01:5d:dc:f7:89:f7:9b:31:77:a7:7c:ae:6e:75:c3: 58:de:71:da:67:19:2e:25:4f:89:cc:c3:5c:aa:63:12:6b:c5: 8e:37:a5:b7:29:13:7d:1a:21:5a:ee:ca:8f:99:66:73:b2:1c: 90:46:d8:19:df:58:fd:c1:fd:f9:96:f3:b7:49:69:be:03:c5: a8:6e:dd:f5:f4:eb:bf:e1:56:01:34:b0:6e:cb:e3:d1:a3:28: d8:19:d6:65:de:47:1d:b9:ad:cf:53:99:87:0b:64:c3:81:a2: 9b:73:4c:cf:73:65:05:a5:4b:07:f8:6c:44:8b:be:58:4e:d4: 40:70:2f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavs2wrzoqHzrADoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NmJiMjU5NDItNzQxMS00MjNkLWI5YTUtNTcxYmRhYTRkZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIBC6A7YlfFIJim7fcWsYvXq9vObSGfObQQt M0WEevWrjp66xgjCIHTFTooFrstaiCXl4HOtSfPSf+MSlwQQTB5CHSpNxlNwK9Zw Jo0BTFxcyDuM9prNGBfAOGZVUBjtwSI0UDixjrM7s6E0H0YfB1sMXIKTsPloxbZv AFwQlpyqDWVKTHMci50VjOGGIlyRjiE2bbI3JJOYKjL2vqi+nGRoGZpHKcSnF+fH mHFe5B0aNa77tdj41sJJcDoe4AACSSVsda4l0r+HW6fr+jM69Hl2vtyD5e8DdTdu eT87DQV9OC8V8eH6FVp2zUEEVAK/d9diOMW4viStVpa/UhzcxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZtaC/VGGEpMz1Hw3KF4Dkzbf3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNDQyMjg1MmUtMDg0MS0z N2UwLWI1NDItMTAzZWM2YTIyMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmgG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHp0z8iFvwPwGm8JAn69tXCNZoCyL+17w046J4tYfdj+2hEfGTB7nRV cOHAB+MXS8C7r3XrImdw0as/YNPV4cYcvOAiL86arLhCfZdCq5h2MRr33fHciNBG S8yo/d3frzmhv3e4dGfFtfAECaekrPyevIdPWrXPMP36DPHtTaaIEQFd3PeJ95sx d6d8rm51w1jecdpnGS4lT4nMw1yqYxJrxY43pbcpE30aIVruyo+ZZnOyHJBG2Bnf WP3B/fmW87dJab4Dxahu3fX067/hVgE0sG7L49GjKNgZ1mXeRx25rc9TmYcLZMOB optzTM9zZQWlSwf4bESLvlhO1EBwL/Y= -----END CERTIFICATE-----Generated at Mon Apr 7 23:51:09 2025 by rpki-client