$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa File: f74fa0c9-0176-30b1-81ff-5ee642002cda.roa (raw, json) Hash identifier: 8+IHq2k+35JQLF9iXcuTZa5IwLRoDd+SkngATpT3zvA= Subject key identifier: 10:F0:0D:CE:EC:01:17:0D:66:C2:24:43:22:D9:5D:F1:6D:FD:B3:6B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64250661A24AB823E0A840 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 396481 IP address blocks: 152.44.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:25:06:61:a2:4a:b8:23:e0:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=3bb9c7a3-d0a3-40c1-a425-d5fec4d4d830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:e5:56:4b:b3:35:17:80:75:1f:30:6f:d2: db:52:2b:18:67:0a:02:fe:56:35:a5:a3:31:53:f3: 6f:82:ec:3a:24:1d:be:6b:41:d1:41:e6:7c:cc:02: 6a:72:75:70:fa:ee:b7:97:c1:82:f8:18:0c:09:50: fc:eb:49:b9:48:52:2f:d0:ba:5c:70:bb:43:eb:ef: 51:ac:18:af:88:83:3f:07:b3:d7:4a:ea:36:92:03: 42:d7:54:a3:3c:fe:d7:68:3b:10:fa:b9:70:b4:49: 6f:39:cb:21:90:4c:18:7c:62:8d:73:05:60:54:d0: a8:7b:95:d4:2c:71:b3:6c:3d:80:fb:00:7f:c2:4a: 14:90:7b:2d:52:2b:58:b5:c5:05:f7:30:c1:b7:1c: d1:dc:62:42:45:7d:bc:d8:2a:5d:89:f2:b9:9d:6f: 35:da:f1:59:d1:d4:f3:cc:0f:d4:33:2f:23:c6:27: eb:c3:f5:46:73:c4:6e:fb:0d:e7:cc:e2:f3:43:0a: f2:1d:59:ca:47:20:ef:c2:83:f9:23:8f:3e:4b:05: 81:06:9c:38:03:f1:73:93:b2:70:8f:88:cb:f9:a4: 1a:06:52:38:f0:5b:87:09:51:67:6b:5e:72:fd:3e: 32:c9:3a:09:ef:f5:9f:cb:52:fd:57:cf:fa:fd:73: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F0:0D:CE:EC:01:17:0D:66:C2:24:43:22:D9:5D:F1:6D:FD:B3:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2f:a7:10:19:1f:9c:0f:46:aa:6c:48:bb:2b:48:d4:fc:f9: bd:6d:82:b0:26:35:e3:0e:92:0a:6d:91:66:17:dc:b5:f0:54: 49:e1:a0:8e:b7:ab:52:ba:80:81:70:27:6d:b9:4e:fa:8b:4b: 6f:83:08:9c:7b:d1:ee:7f:1c:7c:d1:6a:c0:aa:81:df:b3:6d: 1f:7f:7d:32:d6:a9:c8:bb:64:bd:0b:8b:00:c1:1b:20:22:b3: 12:97:9f:55:9d:87:19:ae:76:7a:25:c0:23:ae:b6:e7:c4:19: db:c2:29:d0:31:4d:51:8d:65:71:40:bb:ee:b1:87:9e:79:35: 44:0b:7d:d3:ee:a8:d2:a6:08:9a:94:c8:48:1f:2b:d4:8e:99: e3:50:69:e1:2b:fc:c3:f0:da:6a:70:ca:d7:5b:55:8b:47:21: 8d:17:30:c2:1c:a0:15:a5:a4:db:a2:fb:a8:33:16:d8:f8:fa: 1d:1e:2e:30:fd:fb:86:32:2c:8d:b5:b1:e4:3f:d5:05:1c:0a: cd:5c:59:54:a0:10:30:48:f4:b9:7a:47:21:4c:da:d4:c0:3f: 11:ec:14:c2:54:b2:49:bd:94:dc:a0:62:b6:c6:34:dd:02:23: 62:66:57:f7:86:06:4e:7f:5f:d8:0c:99:1b:f8:42:37:13:60: 94:f3:e6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCUGYaJKuCPgqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk M2JiOWM3YTMtZDBhMy00MGMxLWE0MjUtZDVmZWM0ZDRkODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8DlVkuzNReAdR8wb9LbUisYZwoC/lY1paMx U/Nvguw6JB2+a0HRQeZ8zAJqcnVw+u63l8GC+BgMCVD860m5SFIv0LpccLtD6+9R rBiviIM/B7PXSuo2kgNC11SjPP7XaDsQ+rlwtElvOcshkEwYfGKNcwVgVNCoe5XU LHGzbD2A+wB/wkoUkHstUitYtcUF9zDBtxzR3GJCRX282CpdifK5nW812vFZ0dTz zA/UMy8jxifrw/VGc8Ru+w3nzOLzQwryHVnKRyDvwoP5I48+SwWBBpw4A/Fzk7Jw j4jL+aQaBlI48FuHCVFna15y/T4yyToJ7/Wfy1L9V8/6/XNDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDwDc7sARcNZsIkQyLZXfFt/bNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjc0ZmEwYzktMDE3Ni0z MGIxLTgxZmYtNWVlNjQyMDAyY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAvpxAZH5wPRqpsSLsrSNT8+b1tgrAmNeMOkgptkWYX3LXwVEnhoI63 q1K6gIFwJ225TvqLS2+DCJx70e5/HHzRasCqgd+zbR9/fTLWqci7ZL0LiwDBGyAi sxKXn1WdhxmudnolwCOutufEGdvCKdAxTVGNZXFAu+6xh555NUQLfdPuqNKmCJqU yEgfK9SOmeNQaeEr/MPw2mpwytdbVYtHIY0XMMIcoBWlpNui+6gzFtj4+h0eLjD9 +4YyLI21seQ/1QUcCs1cWVSgEDBI9Ll6RyFM2tTAPxHsFMJUskm9lNygYrbGNN0C I2JmV/eGBk5/X9gMmRv4QjcTYJTz5oI= -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:40 2025 by rpki-client