$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa File: 24587719-f7eb-3cb8-a957-e23dd29ef600.roa (raw, json) Hash identifier: soFK698KJVLHvtUKT7EcRFwdHYi4qDDtqA/OroB8dyI= Subject key identifier: FE:9E:3D:55:1A:FD:7C:FC:74:C4:14:69:A7:3B:25:03:84:4D:99:2E Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F432858496CE459D9251F8166F81209C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 400104 IP address blocks: 157.185.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:59:d9:25:1f:81:66:f8:12:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=9d08f4ef-d440-4c83-8229-4191866fff51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:8e:40:6f:bb:a5:9a:f3:a1:57:ae:67:26: ab:66:1b:a1:6a:a4:1d:5d:37:13:f8:6c:6d:fa:b6: 8b:1b:1b:4d:2a:aa:35:86:f7:cf:61:96:fa:7c:8f: 19:49:00:c0:1b:cd:55:80:db:cf:d3:9b:12:75:a0: b6:b6:5d:cf:e0:a8:ed:eb:38:48:e1:a8:d3:82:59: 77:01:88:e0:0c:1f:8d:44:bf:5a:2b:af:f5:e5:1c: b7:67:92:f2:94:de:13:e7:a7:00:f1:63:33:7d:86: d5:cf:5a:89:84:39:44:2c:46:c7:0f:bd:11:dd:c1: 01:93:76:56:6f:cb:6e:b1:b1:33:4a:a3:56:3e:d8: fc:3d:87:65:68:7a:f6:72:da:3e:cb:a0:eb:b2:12: 9f:25:a3:5a:d3:a7:2d:09:24:c5:cc:93:18:1d:1f: 41:10:e5:da:59:7f:fc:fc:41:03:b8:62:83:c1:97: 63:2c:a8:2c:b1:9b:d9:ed:a9:11:34:5e:f8:ef:63: 0c:13:69:9c:55:93:48:60:63:00:4e:47:3f:0c:cd: 38:35:4a:7d:fe:1a:99:7d:05:97:a1:c2:61:52:d4: 3b:54:a1:b3:66:1d:e4:0b:95:a0:4d:05:fd:75:d0: 7f:c3:82:e7:35:d6:4e:5a:e3:69:e4:59:4f:fb:00: af:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9E:3D:55:1A:FD:7C:FC:74:C4:14:69:A7:3B:25:03:84:4D:99:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:93:d0:21:0b:94:fd:7e:82:56:f6:f1:f6:a7:87:2b:3f:60: 98:0c:3d:fb:60:2c:f0:6b:0f:27:8e:54:08:52:fc:e7:09:d8: 9d:3b:32:ff:c4:e2:0d:63:c4:2f:ce:6e:7c:5f:05:3f:41:14: 58:69:de:51:61:98:6b:c4:aa:c6:63:0b:19:10:c3:4d:91:2a: be:19:d9:03:63:a6:2c:eb:a0:ee:ce:89:cc:69:67:11:d5:a2: de:7e:f2:1b:14:ea:18:57:e9:f6:94:0a:32:83:17:ad:79:b3: 77:91:b0:42:a3:58:93:96:a7:7c:03:b7:14:91:cd:a7:04:4e: c6:29:6a:e8:e1:a8:72:f1:6b:64:af:ec:9d:c6:bc:9a:33:6f: ff:c5:cb:dc:9f:4e:c6:de:d4:e3:f9:4e:3b:08:a2:53:40:06: af:d4:a4:c0:ae:7e:f8:2a:db:a0:fb:81:9a:0d:ef:d0:44:10: ee:31:d0:a3:83:d1:dd:90:61:4f:36:2a:24:da:17:b9:48:ad: e0:69:1c:20:3d:01:6e:42:0e:e7:be:62:22:cb:0f:56:fd:61: 4f:b0:90:ac:58:3e:03:4a:1e:c3:16:5d:7e:e5:eb:32:d1:27: d4:f9:18:47:5c:71:45:cd:a4:5f:8c:37:67:fd:72:78:df:20: c7:dc:3b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FnZJR+BZvgSCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk OWQwOGY0ZWYtZDQ0MC00YzgzLTgyMjktNDE5MTg2NmZmZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre6OQG+7pZrzoVeuZyarZhuhaqQdXTcT+Gxt +raLGxtNKqo1hvfPYZb6fI8ZSQDAG81VgNvP05sSdaC2tl3P4Kjt6zhI4ajTgll3 AYjgDB+NRL9aK6/15Ry3Z5LylN4T56cA8WMzfYbVz1qJhDlELEbHD70R3cEBk3ZW b8tusbEzSqNWPtj8PYdlaHr2cto+y6DrshKfJaNa06ctCSTFzJMYHR9BEOXaWX/8 /EEDuGKDwZdjLKgssZvZ7akRNF7472MME2mcVZNIYGMATkc/DM04NUp9/hqZfQWX ocJhUtQ7VKGzZh3kC5WgTQX9ddB/w4LnNdZOWuNp5FlP+wCv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6ePVUa/Xz8dMQUaac7JQOETZkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjQ1ODc3MTktZjdlYi0z Y2I4LWE5NTctZTIzZGQyOWVmNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeT0CELlP1+glb28fanhys/YJgMPftgLPBrDyeOVAhS/OcJ2J07Mv/E 4g1jxC/ObnxfBT9BFFhp3lFhmGvEqsZjCxkQw02RKr4Z2QNjpizroO7OicxpZxHV ot5+8hsU6hhX6faUCjKDF615s3eRsEKjWJOWp3wDtxSRzacETsYpaujhqHLxa2Sv 7J3GvJozb//Fy9yfTsbe1OP5TjsIolNABq/UpMCufvgq26D7gZoN79BEEO4x0KOD 0d2QYU82KiTaF7lIreBpHCA9AW5CDue+YiLLD1b9YU+wkKxYPgNKHsMWXX7l6zLR J9T5GEdccUXNpF+MN2f9cnjfIMfcOwU= -----END CERTIFICATE-----Generated at Sun Apr 6 13:24:29 2025 by rpki-client