$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa File: 20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa (raw, json) Hash identifier: bfy514MA4FQzwfx2l1Q9aAINSyImJILZC60UEtWUEIQ= Subject key identifier: 10:33:33:69:5E:17:41:9E:69:DA:06:21:3C:37:CC:FC:B9:72:55:85 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285848F926AFCB22BAC0E299675780 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 54994 IP address blocks: 157.185.131.0/24 maxlen: 24 157.185.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:af:cb:22:ba:c0:e2:99:67:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=151a5859-08ac-4757-841c-7ef422a32abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:8a:26:bd:f0:99:25:02:e3:e1:a2:50:56: 66:c4:83:4d:17:f0:80:96:4b:1a:d4:90:a0:65:f7: 63:72:8c:9c:d0:8f:e1:89:77:94:60:d0:41:71:ce: d8:8f:d2:6e:a1:ea:4e:58:be:1e:79:40:68:ab:28: 61:8f:59:a1:2c:57:c2:fd:15:e1:cd:15:96:3a:f4: b1:50:ee:a0:c3:79:01:fa:7d:9b:cf:54:3b:ae:69: 67:99:84:45:05:75:2e:0a:6e:fa:2e:cb:b5:dc:14: 30:e0:73:fd:93:cf:9c:63:14:2c:5f:e9:ed:48:53: 0f:56:d5:53:1d:16:1e:af:11:53:e2:73:72:25:ce: 88:e8:ef:56:8a:f7:73:f9:45:e9:4a:89:fb:9b:e0: 98:ea:63:59:9f:6d:bf:b1:8a:01:95:ac:15:79:00: 1b:66:12:16:77:71:89:3a:9a:3c:4a:98:6c:4a:13: 32:e4:92:bb:98:8e:f7:fa:e3:c1:d9:1b:0d:3c:8b: 52:1b:1a:62:ae:ac:eb:bc:66:37:f2:4f:14:4b:90: 5a:2d:c4:68:64:29:e1:87:d3:a4:fc:35:c8:df:00: 4f:ad:08:be:e0:da:f9:dc:fd:9c:be:c8:3e:cd:b7: 42:80:ba:5f:af:21:c4:3b:fe:f9:a9:35:53:6a:66: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:33:69:5E:17:41:9E:69:DA:06:21:3C:37:CC:FC:B9:72:55:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.131.0-157.185.132.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d5:09:fb:56:26:60:03:a9:7b:57:92:98:15:7f:11:f9:73: b5:5f:d4:fb:6c:9f:1f:8e:65:35:5a:64:d4:85:71:88:7b:e4: da:6f:f3:67:ac:15:e2:89:e1:50:83:7d:ca:1a:64:09:df:52: 57:2d:e8:08:1c:90:16:52:a8:2c:ab:d2:c1:f3:44:30:2d:8f: f9:3b:77:30:56:3d:07:30:91:95:13:ea:1f:15:61:c9:c4:fd: 6f:3f:14:2d:27:99:70:20:55:6a:52:80:e2:ce:d6:7c:61:c3: 79:75:2a:1f:df:99:99:70:f7:0d:70:1e:d4:88:a5:22:ab:97: af:a5:5b:e5:1b:31:f8:89:12:ae:b2:d2:92:5e:07:88:62:36: 6f:f0:e7:ff:75:8b:17:42:47:18:ac:a3:91:c7:4c:ab:43:7f: d1:7f:42:c0:f8:ce:86:c9:ad:49:4f:07:ec:8e:89:f5:41:f7: e3:64:15:e9:5b:80:f5:ce:62:77:fa:07:46:96:b4:6e:c3:b3: 91:e8:ea:23:5d:2f:fd:b1:f2:af:6b:a9:9e:40:cf:a8:8e:cd: 2c:59:ab:3d:d1:fe:40:a7:bb:d9:12:d8:a8:85:00:3d:57:16: 4a:00:3b:69:95:14:6e:ae:53:10:bf:4a:62:20:08:2a:1a:cd: b4:a4:b1:68 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEj5Jq/LIrrA4plnV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTUxYTU4NTktMDhhYy00NzU3LTg0MWMtN2VmNDIyYTMyYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY6KJr3wmSUC4+GiUFZmxINNF/CAlksa1JCg Zfdjcoyc0I/hiXeUYNBBcc7Yj9JuoepOWL4eeUBoqyhhj1mhLFfC/RXhzRWWOvSx UO6gw3kB+n2bz1Q7rmlnmYRFBXUuCm76Lsu13BQw4HP9k8+cYxQsX+ntSFMPVtVT HRYerxFT4nNyJc6I6O9Wivdz+UXpSon7m+CY6mNZn22/sYoBlawVeQAbZhIWd3GJ Opo8SphsShMy5JK7mI73+uPB2RsNPItSGxpirqzrvGY38k8US5BaLcRoZCnhh9Ok /DXI3wBPrQi+4Nr53P2cvsg+zbdCgLpfryHEO/75qTVTama3WwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBAzM2leF0GeadoGITw3zPy5clWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjBlYjlhOGQtYmFiNS0z ZTVjLWEwMzYtNzlhODM0OWFiODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACduYMD BACduYQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAbNUJ+1YmYAOpe1eSmBV/EflztV/U+2yfH45lNVpk1IVx iHvk2m/zZ6wV4onhUIN9yhpkCd9SVy3oCByQFlKoLKvSwfNEMC2P+Tt3MFY9BzCR lRPqHxVhycT9bz8ULSeZcCBValKA4s7WfGHDeXUqH9+ZmXD3DXAe1IilIquXr6Vb 5Rsx+IkSrrLSkl4HiGI2b/Dn/3WLF0JHGKyjkcdMq0N/0X9CwPjOhsmtSU8H7I6J 9UH342QV6VuA9c5id/oHRpa0bsOzkejqI10v/bHyr2upnkDPqI7NLFmrPdH+QKe7 2RLYqIUAPVcWSgA7aZUUbq5TEL9KYiAIKhrNtKSxaA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:25 2025 by rpki-client