$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa File: 3836105c-1ccf-3277-909b-3220537c6f32.roa (raw, json) Hash identifier: aGtliYG+Kz7zTi1hv7a48kvNBun1cxEJvIPgXFZm8M8= Subject key identifier: 4A:B5:63:79:65:BB:9E:F0:59:AF:74:E3:08:FB:A3:D5:95:CE:D7:25 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285848D4DB925569FC365DD21CDD80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa Signing time: Mon 10 Feb 2025 02:00:38 +0000 ROA not before: Mon 10 Feb 2025 02:00:38 +0000 ROA not after: Sun 11 May 2025 01:00:38 +0000 asID: 54994 IP address blocks: 157.185.143.0/24 maxlen: 24 157.185.146.0/24 maxlen: 24 157.185.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:db:92:55:69:fc:36:5d:d2:1c:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 10 02:00:38 2025 GMT Not After : May 11 01:00:38 2025 GMT Subject: CN=f0c912e5-7c02-4fa1-b832-d9dde9987043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3b:37:cb:a6:db:5a:65:63:f2:36:cd:54:ff: f2:2c:6f:d1:fa:6b:1f:a4:75:25:f6:44:13:d2:cc: fa:95:0c:32:83:97:5c:ec:5a:3e:b5:d9:27:cc:45: 2e:18:94:17:42:69:3d:49:e7:ee:6e:13:7d:9a:fe: 69:6a:2d:83:f3:75:8d:ed:ac:d9:11:b5:0e:a3:51: 12:ec:b1:ff:30:26:9e:d3:7b:82:69:c7:f2:71:9b: f4:0a:f0:a1:b4:92:a0:ba:5b:c9:e8:6a:3d:e2:59: 2a:2b:6a:a6:bf:ab:1a:64:05:6e:69:20:f3:3f:28: fd:d7:d4:17:6f:24:d2:f2:1d:65:e6:22:86:b9:50: 66:7a:f7:47:33:df:43:dd:27:50:83:95:58:b9:af: 56:fd:06:7d:bc:60:b9:38:22:fb:88:ca:52:22:41: 51:10:54:49:11:7c:ac:45:a7:de:f3:29:98:c0:77: 02:fc:67:ee:04:c3:ea:6e:e7:f7:89:ca:2e:0e:96: 9f:6e:b2:52:8f:f4:d9:c7:99:62:7e:3f:da:2b:5e: f5:7f:83:43:46:50:18:12:03:43:5d:66:68:27:ee: 72:c0:0f:ab:df:68:c1:16:59:e3:e5:e8:32:39:f1: dd:80:df:35:18:12:2a:b3:f1:5f:9e:27:45:62:cd: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:63:79:65:BB:9E:F0:59:AF:74:E3:08:FB:A3:D5:95:CE:D7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.143.0/24 157.185.146.0/24 157.185.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e3:01:dc:56:a6:10:ff:48:b9:12:31:2a:52:6a:79:1c:a0: f9:17:72:d2:7b:ea:4e:9d:17:72:2f:bb:cc:5e:f9:21:4e:5a: 79:d1:d9:12:1b:96:ea:b2:e7:ca:30:9b:06:d4:ad:92:aa:45: c4:0a:6b:3a:00:e7:ca:4a:63:3f:3d:ae:2b:bd:92:f1:a6:4e: e2:45:83:ae:ae:d4:c4:55:7f:35:d3:97:6e:79:e3:1a:25:71: 2e:d0:4b:7a:e5:88:0b:d2:a9:14:43:7a:21:64:47:d0:2c:33: 1a:09:cd:d1:f0:f7:13:b7:c8:31:5c:8b:98:b8:71:4b:c1:fd: 14:c9:76:1a:81:5f:ca:b3:92:0c:f2:34:67:7a:04:ca:c6:76: 18:72:c0:f6:9f:06:72:31:2e:fb:4e:bf:2f:a3:c2:98:22:4c: 23:c2:8d:62:5d:bb:17:43:d6:da:a0:71:53:98:fe:f2:73:33: 2a:a2:58:ef:20:25:1b:60:27:9c:44:66:a7:16:a5:50:4a:4a: d7:a6:34:49:a0:a7:78:5b:91:28:fa:4f:fd:9e:6c:f2:9d:34: 4e:d0:da:23:5a:3c:0d:0b:d8:2f:86:50:23:5f:ae:28:ce:6a: 90:68:ca:17:71:7b:2c:6b:13:4b:83:e3:56:dd:a1:cc:28:0d: 71:64:d6:ce -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjU25JVafw2XdIc3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDIxMDAyMDAzOFoXDTI1MDUxMTAxMDAzOFowLzEtMCsGA1UEAxMk ZjBjOTEyZTUtN2MwMi00ZmExLWI4MzItZDlkZGU5OTg3MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDs3y6bbWmVj8jbNVP/yLG/R+msfpHUl9kQT 0sz6lQwyg5dc7Fo+tdknzEUuGJQXQmk9SefubhN9mv5pai2D83WN7azZEbUOo1ES 7LH/MCae03uCacfycZv0CvChtJKgulvJ6Go94lkqK2qmv6saZAVuaSDzPyj919QX byTS8h1l5iKGuVBmevdHM99D3SdQg5VYua9W/QZ9vGC5OCL7iMpSIkFREFRJEXys Rafe8ymYwHcC/GfuBMPqbuf3icouDpafbrJSj/TZx5lifj/aK171f4NDRlAYEgND XWZoJ+5ywA+r32jBFlnj5egyOfHdgN81GBIqs/FfnidFYs2QaQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEq1Y3llu57wWa904wj7o9WVztclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzgzNjEwNWMtMWNjZi0z Mjc3LTkwOWItMzIyMDUzN2M2ZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnbmPAwQA nbmSAwQAnbm6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFHjAdxWphD/SLkSMSpSankcoPkXctJ76k6dF3Iv u8xe+SFOWnnR2RIbluqy58owmwbUrZKqRcQKazoA58pKYz89riu9kvGmTuJFg66u 1MRVfzXTl2554xolcS7QS3rliAvSqRRDeiFkR9AsMxoJzdHw9xO3yDFci5i4cUvB /RTJdhqBX8qzkgzyNGd6BMrGdhhywPafBnIxLvtOvy+jwpgiTCPCjWJduxdD1tqg cVOY/vJzMyqiWO8gJRtgJ5xEZqcWpVBKStemNEmgp3hbkSj6T/2ebPKdNE7Q2iNa PA0L2C+GUCNfrijOapBoyhdxeyxrE0uD41bdocwoDXFk1s4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:42:47 2025 by rpki-client