$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json) Hash identifier: mhx45RDRqxO0kS4D0+K4I9B/pD0M5ZOypeLHI3VR97M= Subject key identifier: A2:1D:90:D7:0A:38:E7:DC:9D:FF:EA:D8:12:52:8A:16:43:79:92:75 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584900215F7F38162075F95E2600 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 212238 IP address blocks: 158.115.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5f:7f:38:16:20:75:f9:5e:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=29a14509-ebc6-433e-878c-4f987c2f2d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:c4:91:31:12:25:22:17:e8:2c:7b:3f:72: 39:46:a2:ea:72:3f:2e:36:4d:96:4f:fc:c2:12:67: ca:f4:ad:8e:d5:9a:d4:1f:63:eb:41:47:39:79:61: ca:a7:89:aa:68:3c:59:89:2b:fc:c9:0d:87:d2:5d: 56:fa:20:ad:0b:63:c4:ff:12:28:d0:35:01:5f:26: b4:e0:3c:bb:51:54:03:b7:9b:0f:fd:f5:24:4e:c6: b5:e7:15:16:de:42:ae:2e:82:a9:2e:c9:b7:54:fa: 61:75:6b:4b:55:bf:a6:19:09:61:ee:00:28:b0:2f: f6:e3:c1:78:95:6d:9d:c5:c5:ae:cb:da:6b:c3:17: 89:81:ba:87:aa:db:25:6f:ec:f3:40:47:66:18:bf: cb:f2:64:7f:be:6c:aa:4f:72:9f:34:01:e2:19:bc: eb:98:76:b7:08:fc:09:06:28:71:62:ea:c7:8f:38: 23:33:8d:33:cd:7c:79:78:6c:42:5a:9a:7b:a4:72: a0:8c:df:07:99:b9:e2:f4:ca:9a:27:89:c8:4e:68: 60:5f:af:7e:06:62:3d:1c:77:04:36:b2:df:ff:b2: 3e:32:e8:12:89:06:e5:70:41:22:4b:67:10:e9:e0: b0:84:ba:e3:1d:0e:0d:ad:11:a2:c0:8a:aa:32:e8: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1D:90:D7:0A:38:E7:DC:9D:FF:EA:D8:12:52:8A:16:43:79:92:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:26:e7:e1:60:bf:11:33:e8:fb:dd:94:f7:1d:55:81:a7:07: 05:bf:71:b9:9d:7d:2e:2c:31:ba:e1:db:9c:22:52:8f:07:8b: c9:67:06:c6:50:2c:ba:da:83:5d:cf:ab:fa:21:ce:38:5a:f7: b4:55:a8:9a:2f:b6:4b:a8:9b:0c:21:d2:d5:f0:d7:f2:e0:38: 02:8d:f0:6c:1d:39:5d:f5:5e:fb:1b:d4:9f:23:a1:db:5b:d2: b8:b1:0e:98:6e:e1:9a:9c:a9:5f:c9:e1:e5:27:78:c4:92:e5: 4c:40:8e:84:71:64:c4:33:93:76:21:da:34:fe:70:96:75:0b: 45:db:72:03:1e:09:ea:1b:a8:97:24:ec:4a:c6:af:42:9e:c8: f3:6c:09:ee:29:01:76:59:5e:3c:c9:08:d4:0c:8e:5f:57:9b: 4d:53:fc:42:c4:26:3b:ec:5d:0f:76:2c:a7:61:0d:f5:a6:20: b1:0d:92:a2:a6:ac:f1:68:ac:16:43:d9:fb:f0:c7:07:7c:f0: df:99:fe:65:83:45:82:5c:67:34:2b:58:c4:07:ad:b9:b3:14: 9c:0b:d1:72:42:18:0c:66:d0:a7:23:71:58:8a:5a:3b:63:4f: ec:f6:ec:45:74:68:b0:25:5e:ab:58:87:47:fd:16:b6:ea:6b: 13:05:2b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV9/OBYgdfleJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MjlhMTQ1MDktZWJjNi00MzNlLTg3OGMtNGY5ODdjMmYyZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyTEkTESJSIX6Cx7P3I5RqLqcj8uNk2WT/zC EmfK9K2O1ZrUH2PrQUc5eWHKp4mqaDxZiSv8yQ2H0l1W+iCtC2PE/xIo0DUBXya0 4Dy7UVQDt5sP/fUkTsa15xUW3kKuLoKpLsm3VPphdWtLVb+mGQlh7gAosC/248F4 lW2dxcWuy9prwxeJgbqHqtslb+zzQEdmGL/L8mR/vmyqT3KfNAHiGbzrmHa3CPwJ BihxYurHjzgjM40zzXx5eGxCWpp7pHKgjN8Hmbni9MqaJ4nITmhgX69+BmI9HHcE NrLf/7I+MugSiQblcEEiS2cQ6eCwhLrjHQ4NrRGiwIqqMuj3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIdkNcKOOfcnf/q2BJSihZDeZJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU3MjA3YWEtMzNiYS0z NTE3LWJhOTItZGJlYWU3NTZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsm5+FgvxEz6PvdlPcdVYGnBwW/cbmdfS4sMbrh25wiUo8Hi8lnBsZQ LLrag13Pq/ohzjha97RVqJovtkuomwwh0tXw1/LgOAKN8GwdOV31Xvsb1J8jodtb 0rixDphu4ZqcqV/J4eUneMSS5UxAjoRxZMQzk3Yh2jT+cJZ1C0XbcgMeCeobqJck 7ErGr0KeyPNsCe4pAXZZXjzJCNQMjl9Xm01T/ELEJjvsXQ92LKdhDfWmILENkqKm rPForBZD2fvwxwd88N+Z/mWDRYJcZzQrWMQHrbmzFJwL0XJCGAxm0KcjcViKWjtj T+z27EV0aLAlXqtYh0f9FrbqaxMFK1o= -----END CERTIFICATE-----Generated at Sun Apr 6 17:54:21 2025 by rpki-client