$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/159a9cc3-c7ce-33aa-bf29-f09e7b4017fb.roa File: 159a9cc3-c7ce-33aa-bf29-f09e7b4017fb.roa (raw, json) Hash identifier: hjlh5jCbjq432TE1TiOAu1Af15tR4eL+9OLu7whL6Sg= Subject key identifier: BE:E8:4E:B3:49:C3:B2:6F:94:BD:DC:58:BA:82:24:1A:F0:06:DA:DF Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584940397F4A7095796678B7F200 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/159a9cc3-c7ce-33aa-bf29-f09e7b4017fb.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 2152 IP address blocks: 205.155.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7f:4a:70:95:79:66:78:b7:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=da9d6125-baee-4b84-8746-09229d6b5452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:72:f5:e9:35:bf:03:86:3e:3a:c6:31:98:88: b3:56:22:73:d7:ae:d7:37:f2:62:4a:b7:b3:c4:e7: 32:7c:81:06:3a:ba:ac:d7:a0:5d:e2:77:41:6c:d2: f2:d1:9c:68:0e:02:46:51:a5:e7:45:74:9f:30:cc: b8:cb:bd:8f:1e:4f:c0:35:0a:8a:47:76:d8:27:0a: ea:99:b5:e6:f1:ca:22:b8:8d:6d:51:94:5d:a3:cb: 03:75:a0:2a:f8:f7:03:d7:b6:1b:e6:c9:72:f1:c2: fd:87:fc:cb:21:e3:10:d9:19:b8:6e:73:65:17:ca: 3e:28:ab:35:e5:3d:b8:42:34:66:e9:5d:46:7e:1d: 8a:8e:f6:af:3d:e1:32:e1:b2:da:82:d8:47:56:12: c3:22:64:58:2a:4b:33:4a:8a:8a:b3:3b:d6:17:64: cb:a9:e3:19:4b:0b:48:7e:05:d6:97:cc:70:ab:ef: 20:a5:fc:a1:75:c5:ee:d8:4d:03:f7:23:3b:ed:59: d0:b7:ba:5d:8a:c6:0a:0f:81:56:72:63:eb:65:5a: 54:00:85:72:1a:55:1c:70:d6:78:5c:e8:49:35:1d: 09:0d:f1:55:40:d0:50:38:0a:79:e5:73:79:86:0e: a8:7e:fd:e2:9f:37:e9:ba:73:fa:b2:73:eb:71:16: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E8:4E:B3:49:C3:B2:6F:94:BD:DC:58:BA:82:24:1A:F0:06:DA:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/159a9cc3-c7ce-33aa-bf29-f09e7b4017fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 205.155.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:35:70:71:a4:d4:9a:a5:d0:22:8d:4e:84:64:0f:4e:1c:7b: 95:6f:ad:42:b2:6f:6a:7b:26:71:e8:4b:b3:8e:9d:89:af:39: 47:8d:e1:f7:f5:3f:54:5a:dc:98:82:7d:95:0f:03:bf:35:c3: e5:08:d7:c5:ad:2c:da:6c:60:ec:15:68:be:23:43:9f:a4:5e: b5:dd:c9:c7:06:74:22:02:95:67:73:95:6d:7e:36:e9:de:4d: 55:f0:63:9a:f6:64:b3:61:49:71:83:ad:06:5a:9e:a5:25:48: c5:0d:56:e0:76:0f:f9:7a:da:53:41:da:c4:7e:1f:3c:2f:05: 30:90:03:d0:81:97:31:45:a2:61:0e:6f:0f:43:fd:0d:0e:0c: dc:94:f2:ad:20:91:ef:8b:4b:fd:2c:4e:61:0e:2d:7c:59:e4: 24:a6:8c:e8:00:fc:d1:38:8c:3a:64:49:62:1a:df:e3:4b:17: 60:7b:aa:29:db:eb:0c:b9:90:20:0e:48:19:5e:17:35:23:78: f0:3a:ac:f5:1e:37:fb:15:8a:5c:6a:ca:17:2a:77:fe:75:8f: 45:b9:fd:2b:88:96:f8:6c:0f:62:58:0f:55:90:b3:63:7b:cb: 2a:e5:1b:c6:6c:96:87:1e:5d:73:f7:78:c3:dd:88:76:d1:cc: 4a:3c:50:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX9KcJV5Zni38gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZGE5ZDYxMjUtYmFlZS00Yjg0LTg3NDYtMDkyMjlkNmI1NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3L16TW/A4Y+OsYxmIizViJz167XN/JiSrez xOcyfIEGOrqs16Bd4ndBbNLy0ZxoDgJGUaXnRXSfMMy4y72PHk/ANQqKR3bYJwrq mbXm8coiuI1tUZRdo8sDdaAq+PcD17Yb5sly8cL9h/zLIeMQ2Rm4bnNlF8o+KKs1 5T24QjRm6V1Gfh2KjvavPeEy4bLagthHVhLDImRYKkszSoqKszvWF2TLqeMZSwtI fgXWl8xwq+8gpfyhdcXu2E0D9yM77VnQt7pdisYKD4FWcmPrZVpUAIVyGlUccNZ4 XOhJNR0JDfFVQNBQOAp55XN5hg6ofv3inzfpunP6snPrcRaoJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7oTrNJw7JvlL3cWLqCJBrwBtrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMTU5YTljYzMtYzdjZS0z M2FhLWJmMjktZjA5ZTdiNDAxN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZuzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ1cHGk1Jql0CKNToRkD04ce5VvrUKyb2p7JnHoS7OOnYmvOUeN4ff1 P1Ra3JiCfZUPA781w+UI18WtLNpsYOwVaL4jQ5+kXrXdyccGdCIClWdzlW1+Nune TVXwY5r2ZLNhSXGDrQZanqUlSMUNVuB2D/l62lNB2sR+HzwvBTCQA9CBlzFFomEO bw9D/Q0ODNyU8q0gke+LS/0sTmEOLXxZ5CSmjOgA/NE4jDpkSWIa3+NLF2B7qinb 6wy5kCAOSBleFzUjePA6rPUeN/sVilxqyhcqd/51j0W5/SuIlvhsD2JYD1WQs2N7 yyrlG8ZsloceXXP3eMPdiHbRzEo8UMg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:55 2025 by rpki-client