$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa File: 0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa (raw, json) Hash identifier: TdwC3d8OludZ38d5CMQldGN5AxVXlHjpfullkrE7+x0= Subject key identifier: 29:7B:08:72:AC:95:71:29:13:1D:53:38:C6:45:90:8F:63:42:97:F0 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285849C0A4D340B944D61D3747B540 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 33442 IP address blocks: 157.235.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d3:40:b9:44:d6:1d:37:47:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=3b326e8f-7373-4993-b905-157ccc17234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:25:8b:9b:0a:ed:4e:02:c3:b5:50:6d:90: 59:2c:3d:30:12:86:04:3b:60:8c:4e:52:fd:58:3e: 3b:cc:bf:d4:f6:05:0d:95:bf:69:b8:92:96:c9:e1: d6:b8:f0:32:9d:27:f7:01:99:5f:4b:08:1b:71:d5: 22:8a:e1:c9:b0:52:10:c9:9e:78:83:2e:43:df:2b: ef:8f:e4:f8:10:7b:fd:49:f3:63:47:b2:c1:ab:f5: 84:58:1b:45:aa:f2:63:77:8d:ee:76:14:53:9a:5e: b7:3e:79:a8:93:b7:39:bf:b6:cc:fc:8b:f4:18:77: 7c:b8:48:d5:03:fe:a1:ba:db:de:11:37:5f:de:bb: 3b:db:35:53:9e:c7:14:82:9e:83:3c:ac:22:bf:e2: 65:48:38:86:0d:49:0a:0e:e0:f4:04:e1:12:e0:5c: 2b:a1:42:21:65:3d:ae:70:6a:b8:f0:7d:83:6f:03: da:07:b8:01:ef:bf:a2:62:9a:a0:d9:cc:9d:4b:0b: b4:88:9b:ce:51:0d:7d:05:3e:23:84:18:da:10:ef: d3:f0:fc:51:3a:f4:e6:0b:45:9f:c0:5b:1f:8b:ef: b8:7f:7d:95:07:4b:5a:02:e4:3e:d6:f8:99:0e:b2: e4:18:2c:40:75:d8:a1:77:d5:ea:03:39:4a:be:60: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7B:08:72:AC:95:71:29:13:1D:53:38:C6:45:90:8F:63:42:97:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fe:98:1c:ec:a0:63:b1:72:4c:e5:81:10:ff:bf:21:b0:f3: af:03:ae:e7:5f:66:83:eb:65:96:35:ce:87:88:4f:e6:c2:1e: 7f:f1:49:a2:5e:9c:18:1c:98:2c:82:e2:23:f4:15:bd:50:b7: 51:5e:63:aa:7e:08:f6:5f:fc:61:77:7e:93:eb:fc:c5:53:e8: dd:53:02:87:58:bd:59:aa:83:f9:78:86:08:d4:55:67:e4:3d: f8:1c:da:cc:d5:ba:ab:2f:91:3e:11:63:bd:ed:61:0a:1f:51: 31:c7:d0:4a:d9:ea:16:ae:05:0c:1b:d2:87:ef:c6:2e:84:89: 28:ee:3c:84:88:82:8f:fc:be:77:7c:f4:8b:01:8a:30:89:52: 8e:e6:7f:4c:9f:e4:f3:13:db:c1:10:fa:8d:02:e5:91:19:44: 3c:b9:59:e0:70:72:34:59:55:e7:08:ae:b1:0a:c5:a6:44:ec: 1b:c4:ca:35:1f:3a:6b:ac:c7:fa:fe:14:7c:67:d1:45:07:74: e8:fd:a9:10:ef:3f:6a:61:e2:1d:e9:ed:96:4c:23:eb:13:ed: e4:db:a5:c0:07:39:ca:f0:54:59:2f:49:7f:f7:8a:65:69:b5: 39:14:6d:06:23:94:60:ad:76:d8:8f:51:15:a5:ed:1c:79:16: d7:00:7a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNNAuUTWHTdHtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk M2IzMjZlOGYtNzM3My00OTkzLWI5MDUtMTU3Y2NjMTcyMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNkli5sK7U4Cw7VQbZBZLD0wEoYEO2CMTlL9 WD47zL/U9gUNlb9puJKWyeHWuPAynSf3AZlfSwgbcdUiiuHJsFIQyZ54gy5D3yvv j+T4EHv9SfNjR7LBq/WEWBtFqvJjd43udhRTml63Pnmok7c5v7bM/Iv0GHd8uEjV A/6hutveETdf3rs72zVTnscUgp6DPKwiv+JlSDiGDUkKDuD0BOES4FwroUIhZT2u cGq48H2DbwPaB7gB77+iYpqg2cydSwu0iJvOUQ19BT4jhBjaEO/T8PxROvTmC0Wf wFsfi++4f32VB0taAuQ+1viZDrLkGCxAddihd9XqAzlKvmCLAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl7CHKslXEpEx1TOMZFkI9jQpfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGI1OWViMmYtNzQyZi0z NzkyLWE4NjUtYTBiZTQwZjFlM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnevzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn+mBzsoGOxckzlgRD/vyGw868DrudfZoPrZZY1zoeIT+bCHn/xSaJe nBgcmCyC4iP0Fb1Qt1FeY6p+CPZf/GF3fpPr/MVT6N1TAodYvVmqg/l4hgjUVWfk Pfgc2szVuqsvkT4RY73tYQofUTHH0ErZ6hauBQwb0ofvxi6EiSjuPISIgo/8vnd8 9IsBijCJUo7mf0yf5PMT28EQ+o0C5ZEZRDy5WeBwcjRZVecIrrEKxaZE7BvEyjUf Omusx/r+FHxn0UUHdOj9qRDvP2ph4h3p7ZZMI+sT7eTbpcAHOcrwVFkvSX/3imVp tTkUbQYjlGCtdtiPURWl7Rx5FtcAejI= -----END CERTIFICATE-----Generated at Sat May 10 08:30:21 2025 by rpki-client