$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa File: cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa (raw, json) Hash identifier: mU11w7ZIpRWTmy5q+eq9CxM0OAwg/Tw6A8S+jOmcKGc= Subject key identifier: B3:95:7D:5A:13:C0:01:7A:01:4F:39:31:56:A5:EA:AC:98:C5:FB:54 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F43285849CBCFACCBBD2B180D26FC5780 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 63293 IP address blocks: 157.240.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:ac:cb:bd:2b:18:0d:26:fc:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=9f4f468b-d697-4d50-8bac-a5d019186024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:c0:92:5b:6c:2b:df:4a:20:67:f8:63:59: b6:c5:7f:51:6a:7b:b5:20:45:16:a9:e3:98:82:7a: 87:a9:30:dd:2d:7a:a8:d6:21:b3:ac:6d:24:bb:3e: 22:9e:f3:dd:e1:6e:b7:ac:ac:53:e9:88:60:e1:b7: da:fe:11:99:4b:6e:0f:22:a2:a1:d3:d8:ab:1e:bf: 71:b6:cb:2f:9e:74:56:5b:12:09:38:ed:c8:b5:c0: 19:59:bc:0c:cf:9b:52:34:04:60:e7:45:15:d8:e0: b5:75:b1:08:5e:e0:94:6d:cb:20:16:0e:48:95:54: 60:0e:93:44:40:8f:a0:b6:e9:9c:4d:f6:b7:54:8e: ba:eb:72:ae:67:a7:c5:ff:10:2d:eb:ad:13:de:fa: 4f:8f:52:64:22:e6:fe:65:c6:5a:6f:d0:66:5c:a2: e5:33:fe:08:74:e6:d8:25:0d:5c:74:fd:e0:07:d9: 05:8e:8f:af:e1:fa:39:e6:47:f9:78:86:6b:b0:58: be:f4:e4:97:1c:86:69:a9:df:57:78:5d:c3:82:14: 05:3d:76:8e:b2:3f:51:14:40:ef:03:61:0a:91:3b: 49:c3:ae:f5:2b:85:2b:01:7d:42:73:a6:4a:88:d8: 7b:fd:04:35:22:84:a4:9d:ab:89:3e:a0:3b:3c:95: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:95:7D:5A:13:C0:01:7A:01:4F:39:31:56:A5:EA:AC:98:C5:FB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d0:e0:6f:09:da:51:8f:41:5c:93:ac:97:db:e3:5e:85:7a: e3:7e:af:5b:74:81:e0:6f:cd:f7:0a:7f:e1:93:a4:c3:2c:93: 2a:7d:d4:0f:b1:03:f9:c4:c2:1b:4b:3e:c6:04:c9:4d:4b:ea: 64:6a:2d:9e:80:48:a2:26:32:31:de:ec:ff:ae:10:50:8e:c3: cf:a8:74:da:66:f2:d2:24:f5:25:b7:c4:15:82:6b:ae:8f:64: a2:35:d9:27:53:af:55:e8:ae:62:6e:cd:ba:b4:6f:3d:56:a2: 7c:99:f7:51:4d:c6:b3:3b:6c:17:f7:05:6e:39:f1:8c:34:c8: 0c:cd:73:84:2e:d4:a5:76:8d:8b:77:68:5d:ad:68:e2:74:f5: b3:f5:d9:a7:7f:80:43:6a:b8:c8:a7:b8:aa:b9:6b:8b:f2:bb: ea:af:86:cb:15:81:a8:55:63:42:eb:7c:2e:8d:e7:e5:08:7a: 28:f2:67:55:bf:38:91:d8:6f:97:2b:bb:ca:ba:3b:e8:28:bc: 30:34:c9:9f:62:87:6d:d6:41:7b:a1:bc:b4:b4:2d:c2:17:06: 4c:27:8e:f3:6d:78:c3:43:56:c2:c5:0f:57:ef:9e:91:dd:9b: c3:e5:ba:97:28:88:d9:55:ca:72:75:ab:12:16:af:28:11:85: c5:e3:e9:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6zLvSsYDSb8V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk OWY0ZjQ2OGItZDY5Ny00ZDUwLThiYWMtYTVkMDE5MTg2MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oLAkltsK99KIGf4Y1m2xX9Ranu1IEUWqeOY gnqHqTDdLXqo1iGzrG0kuz4invPd4W63rKxT6Yhg4bfa/hGZS24PIqKh09irHr9x tssvnnRWWxIJOO3ItcAZWbwMz5tSNARg50UV2OC1dbEIXuCUbcsgFg5IlVRgDpNE QI+gtumcTfa3VI6663KuZ6fF/xAt660T3vpPj1JkIub+ZcZab9BmXKLlM/4IdObY JQ1cdP3gB9kFjo+v4fo55kf5eIZrsFi+9OSXHIZpqd9XeF3DghQFPXaOsj9RFEDv A2EKkTtJw671K4UrAX1Cc6ZKiNh7/QQ1IoSknauJPqA7PJVjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOVfVoTwAF6AU85MVal6qyYxftUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvY2I2ZjcwNmMtZWViMS0z ZTdhLThkOTEtZmE4ODBkZDIzMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPQ4G8J2lGPQVyTrJfb416FeuN+r1t0geBvzfcKf+GTpMMskyp91A+x A/nEwhtLPsYEyU1L6mRqLZ6ASKImMjHe7P+uEFCOw8+odNpm8tIk9SW3xBWCa66P ZKI12SdTr1XormJuzbq0bz1WonyZ91FNxrM7bBf3BW458Yw0yAzNc4Qu1KV2jYt3 aF2taOJ09bP12ad/gENquMinuKq5a4vyu+qvhssVgahVY0LrfC6N5+UIeijyZ1W/ OJHYb5cru8q6O+govDA0yZ9ih23WQXuhvLS0LcIXBkwnjvNteMNDVsLFD1fvnpHd m8PlupcoiNlVynJ1qxIWrygRhcXj6bU= -----END CERTIFICATE-----Generated at Sun Jun 8 09:02:16 2025 by rpki-client