$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4dd0ec2b-4724-3477-b025-068b5d4b270c.roa File: 4dd0ec2b-4724-3477-b025-068b5d4b270c.roa (raw, json) Hash identifier: 6u6jEKvC9C6vPJDz/hgAR/zUR+Xp534B2PYZ8Orvrm8= Subject key identifier: 9E:0C:98:FF:B0:45:B9:7C:E8:E3:57:31:54:15:D4:C1:73:84:1C:9E Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C438C5A4F426653A17D480 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4dd0ec2b-4724-3477-b025-068b5d4b270c.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 157.52.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:38:c5:a4:f4:26:65:3a:17:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=ce78d9d9-1ef7-4381-b720-318aaff5cf3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:ff:13:f9:f5:d7:e0:25:76:c1:4d:ca:41: 25:21:55:88:eb:e3:4d:76:28:65:3e:52:21:b1:fe: 37:09:45:44:76:4b:62:56:1e:1c:69:d9:00:34:72: 94:c9:1f:f3:1c:bf:7a:e4:68:38:c5:c7:e9:20:0a: e4:60:34:50:9e:c3:75:3c:9a:37:0d:6a:a3:77:ba: 52:33:5d:3c:ed:0f:73:4c:91:08:8a:b2:bb:e7:da: fc:56:20:9a:ca:3d:94:36:49:6a:9e:5b:29:89:c4: 4e:70:e6:0e:af:c7:f4:4c:b4:e8:36:67:65:31:2a: 6e:fd:16:14:40:d1:9e:4d:51:b0:2d:5e:e5:b1:84: b0:ae:64:a8:96:4c:51:01:dd:0d:a0:16:6f:34:15: cd:d8:dd:05:07:c8:d8:2d:7f:30:22:8e:9d:ee:b7: e9:53:d0:3d:de:c8:e5:5c:bc:8e:f2:c9:1d:c7:23: bc:e4:95:b3:a5:b6:b4:05:de:88:83:6f:2e:32:fe: 83:bb:b6:f5:7b:9d:9b:54:26:d9:74:e1:f3:f3:8a: 0f:ec:dc:d1:4e:1d:ed:c5:25:48:c1:8e:05:07:ea: 67:41:10:53:b2:1e:89:e2:c2:f1:f0:91:03:a9:0b: c1:0d:ca:f9:cf:58:e4:4f:27:01:a2:e1:12:e1:f6: 56:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0C:98:FF:B0:45:B9:7C:E8:E3:57:31:54:15:D4:C1:73:84:1C:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4dd0ec2b-4724-3477-b025-068b5d4b270c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 157.52.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:cf:4f:50:db:5a:f7:b4:ca:d6:e8:b3:53:e9:d6:2a:73:e2: b3:a6:32:da:82:4d:1b:cd:18:9e:48:bf:a4:30:da:90:a2:3b: 27:b6:68:6f:1a:05:ad:3c:db:f5:97:3e:a7:e0:d0:3a:39:2a: 3d:0c:4d:aa:7c:33:a5:48:aa:e6:4e:69:6e:8d:98:03:8d:e5: b8:02:50:81:11:b3:ee:9b:f6:60:0f:6a:70:db:f1:65:2a:4c: 43:88:b0:45:cd:a2:91:88:88:24:4f:9b:75:e1:17:7c:56:97: 7e:3b:8b:5c:bf:f2:1f:f7:7f:f7:05:50:56:81:0e:37:8b:c2: 8f:0b:40:e4:c6:c7:b5:6b:78:55:1b:7b:77:67:7d:3a:ab:66: ce:a6:16:2a:7d:f3:c6:ac:a5:c4:d5:12:5e:e3:e2:d6:15:03: 80:cf:ca:58:6a:60:9a:31:ab:76:39:bf:0c:20:26:12:96:23: 7a:84:8c:7e:fa:75:c9:0c:5a:51:f4:05:25:7a:a7:86:6f:77: 43:ac:31:35:d9:a1:ca:17:c7:df:6d:76:0a:53:2d:5a:f7:60: 32:48:12:f8:c9:4b:0c:9d:f5:f5:6f:e5:38:52:d9:35:e6:e1: 44:b1:7e:72:d4:36:5a:e6:d7:22:8e:42:36:c6:e2:39:0f:73: e6:97:d7:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDjFpPQmZToX1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2U3OGQ5ZDktMWVmNy00MzgxLWI3MjAtMzE4YWFmZjVjZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklb/E/n11+AldsFNykElIVWI6+NNdihlPlIh sf43CUVEdktiVh4cadkANHKUyR/zHL965Gg4xcfpIArkYDRQnsN1PJo3DWqjd7pS M1087Q9zTJEIirK759r8ViCayj2UNklqnlspicROcOYOr8f0TLToNmdlMSpu/RYU QNGeTVGwLV7lsYSwrmSolkxRAd0NoBZvNBXN2N0FB8jYLX8wIo6d7rfpU9A93sjl XLyO8skdxyO85JWzpba0Bd6Ig28uMv6Du7b1e52bVCbZdOHz84oP7NzRTh3txSVI wY4FB+pnQRBTsh6J4sLx8JEDqQvBDcr5z1jkTycBouES4fZWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4MmP+wRbl86ONXMVQV1MFzhByeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNGRkMGVjMmItNDcyNC0z NDc3LWIwMjUtMDY4YjVkNGIyNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTRhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPPT1DbWve0ytbos1Pp1ipz4rOmMtqCTRvNGJ5Iv6Qw2pCiOye2aG8a Ba082/WXPqfg0Do5Kj0MTap8M6VIquZOaW6NmAON5bgCUIERs+6b9mAPanDb8WUq TEOIsEXNopGIiCRPm3XhF3xWl347i1y/8h/3f/cFUFaBDjeLwo8LQOTGx7VreFUb e3dnfTqrZs6mFip988aspcTVEl7j4tYVA4DPylhqYJoxq3Y5vwwgJhKWI3qEjH76 dckMWlH0BSV6p4Zvd0OsMTXZocoXx99tdgpTLVr3YDJIEvjJSwyd9fVv5ThS2TXm 4USxfnLUNlrm1yKOQjbG4jkPc+aX1+8= -----END CERTIFICATE-----Generated at Thu Apr 3 02:53:39 2025 by rpki-client