$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa File: a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa (raw, json) Hash identifier: qqOIkSV820Hl3jatOiZxqcEH/iNueaJ2a0M1VoTYTEM= Subject key identifier: 4B:05:33:C7:E6:1B:8E:42:9D:FF:F5:05:E1:DE:64:26:98:A2:99:3D Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584925B3B0E00768A8CCD1685180 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 63293 IP address blocks: 157.240.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:b0:e0:07:68:a8:cc:d1:68:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=dd3cfca3-6cc5-4984-b2b4-77a1280531ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:dc:21:00:44:e4:a3:5a:ff:e4:1f:29:cd: 30:a1:95:ee:e7:52:fa:cf:58:98:c0:0d:25:02:38: db:42:ec:17:5f:d0:58:ed:40:0d:80:05:71:c4:80: 69:20:b9:3e:d4:68:af:f4:a0:82:92:a5:4b:58:d7: 47:b6:33:9e:2e:10:85:75:03:14:21:4d:6a:86:75: 24:59:d7:50:46:1a:f4:12:d3:45:39:b4:5b:4f:d3: 72:9e:37:7a:74:f8:a7:29:4f:86:82:13:94:22:f5: aa:5a:ad:c7:38:3e:a2:ae:e9:2c:ba:66:44:04:ae: 5b:0e:e9:6f:75:72:98:50:6b:1c:4c:ac:ce:e2:46: 47:90:5b:f5:73:38:4b:b2:88:db:89:de:61:27:ba: 40:d0:55:7c:be:3e:19:ab:b6:48:b3:47:bb:82:c6: 1f:6e:27:28:ca:81:91:65:c2:d3:46:a7:ff:85:53: f7:4a:66:78:63:2d:c4:16:98:f8:6d:dc:f1:9e:ad: 3d:1d:de:8a:da:b5:c7:7b:c2:37:df:5b:28:88:a2: e2:39:51:fb:ce:fb:10:37:e2:97:eb:5a:83:05:86: 11:22:e9:42:19:48:fc:20:58:61:51:23:bd:67:bf: f7:99:a0:88:24:49:9f:5f:fb:c7:64:76:84:2f:f1: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:05:33:C7:E6:1B:8E:42:9D:FF:F5:05:E1:DE:64:26:98:A2:99:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c2:2d:56:70:a7:70:6c:e4:cf:6f:6d:ed:3a:87:3f:3c:ba: f9:24:cf:6e:c1:07:8e:fd:b6:41:88:c1:52:b2:40:dd:0f:0a: 76:70:3d:27:ec:8f:86:34:dd:32:be:51:d0:7a:61:d3:77:ce: af:e9:dc:34:2b:00:e6:61:c3:4e:ef:d0:89:be:2f:96:6f:3a: 08:e2:e8:63:a8:5e:03:cb:b8:dd:d3:f8:e5:b5:ef:a2:cb:78: 4c:3d:2e:7a:32:58:26:e8:96:d0:19:dc:f8:b8:d3:82:b2:8d: da:ab:e9:38:ae:61:aa:31:89:bc:19:f4:af:f0:fd:b5:cd:23: a7:40:30:87:f9:7b:b7:e7:fe:df:33:d7:1d:f6:d5:09:b7:35: 08:0c:76:d8:47:fb:ec:57:65:e6:00:c8:09:28:0f:ef:37:d4: cc:37:d5:51:dc:46:c9:fc:0d:14:a7:65:96:78:3b:2a:a5:85: c7:1d:b3:f3:56:87:3a:4b:52:e3:c1:ac:d8:8b:82:80:85:bc: 80:8e:7e:53:01:0a:76:a6:2c:52:b4:51:00:da:32:9f:01:5b: 7a:5f:67:18:42:0b:06:dc:f8:f2:a7:2a:17:16:e5:3e:dc:bf: a1:79:52:8b:ad:da:8e:22:ca:56:6e:a3:7b:1d:71:17:1f:09: 5d:be:a6:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls7DgB2iozNFoUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk ZGQzY2ZjYTMtNmNjNS00OTg0LWIyYjQtNzdhMTI4MDUzMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+DcIQBE5KNa/+QfKc0woZXu51L6z1iYwA0l AjjbQuwXX9BY7UANgAVxxIBpILk+1Giv9KCCkqVLWNdHtjOeLhCFdQMUIU1qhnUk WddQRhr0EtNFObRbT9Nynjd6dPinKU+GghOUIvWqWq3HOD6iruksumZEBK5bDulv dXKYUGscTKzO4kZHkFv1czhLsojbid5hJ7pA0FV8vj4Zq7ZIs0e7gsYfbicoyoGR ZcLTRqf/hVP3SmZ4Yy3EFpj4bdzxnq09Hd6K2rXHe8I331soiKLiOVH7zvsQN+KX 61qDBYYRIulCGUj8IFhhUSO9Z7/3maCIJEmfX/vHZHaEL/HtRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsFM8fmG45Cnf/1BeHeZCaYopk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvYTJjYjMxZGMtZDM3OS0z YzZiLWIyYTMtMjQ2MDVjMmE0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3CLVZwp3Bs5M9vbe06hz88uvkkz27BB479tkGIwVKyQN0PCnZwPSfs j4Y03TK+UdB6YdN3zq/p3DQrAOZhw07v0Im+L5ZvOgji6GOoXgPLuN3T+OW176LL eEw9LnoyWCboltAZ3Pi404Kyjdqr6TiuYaoxibwZ9K/w/bXNI6dAMIf5e7fn/t8z 1x321Qm3NQgMdthH++xXZeYAyAkoD+831Mw31VHcRsn8DRSnZZZ4Oyqlhccds/NW hzpLUuPBrNiLgoCFvICOflMBCnamLFK0UQDaMp8BW3pfZxhCCwbc+PKnKhcW5T7c v6F5Uout2o4iylZuo3sdcRcfCV2+pi0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:13:42 2025 by rpki-client