$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa File: 3f55e722-9371-3246-8ecf-83ad16b69b2e.roa (raw, json) Hash identifier: VH1IvnjDAG1NV/RBGxmPguwMy78PxPMAukDNJT5A6Zw= Subject key identifier: 76:FB:63:EE:47:0B:21:3D:B0:84:EF:88:32:85:24:54:E8:BA:64:C8 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285849C0A4D3521294604499FD9CB0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 33442 IP address blocks: 157.235.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d3:52:12:94:60:44:99:fd:9c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=a62f1ffc-ca9a-45fd-a69d-ae1b41b56950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:a3:3c:46:5c:0d:0b:ac:38:3a:a6:54:8c: 4f:46:c3:06:98:5c:23:af:c5:f5:cb:b3:83:57:d8: 20:d2:a8:fe:c7:65:84:bb:36:8a:21:c6:a5:30:33: fb:7f:08:ca:cc:84:3e:62:f6:e1:fb:d6:85:cf:4f: 1b:41:43:c6:d7:f2:1b:07:a5:8d:a6:20:98:da:11: 5a:0c:55:2a:21:92:41:d4:70:11:cf:6e:b9:08:9b: a7:42:34:28:87:1a:e4:19:dc:1c:8d:f6:01:ac:d8: 48:7b:b4:be:13:f9:3a:57:a3:70:15:cf:56:25:99: e9:77:00:dc:a5:fb:f5:81:1d:74:3c:13:cd:90:8b: 92:b4:43:cf:ca:83:31:cc:6a:7f:aa:c0:7b:3d:00: 9d:ec:82:47:5e:1c:88:07:a2:cb:d4:6c:46:d5:92: 50:fb:c7:84:19:0d:23:b0:a8:7d:7f:9e:34:00:57: f5:c0:a2:de:87:2a:77:36:be:2b:d6:02:2e:75:4b: 62:fc:5c:ca:fd:37:b4:6f:62:59:84:3e:fa:64:04: 5f:bb:20:7d:78:0d:e8:13:9a:c1:0d:13:42:c0:83: 80:d3:80:f2:57:5c:1d:53:8a:ee:e4:f3:fb:5d:89: 58:99:30:66:db:30:73:8d:f3:23:8a:99:ee:57:75: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:63:EE:47:0B:21:3D:B0:84:EF:88:32:85:24:54:E8:BA:64:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f8:21:c3:10:fe:6e:4e:59:bc:07:f5:76:57:00:1b:04:98: 0a:64:25:15:67:09:1a:27:a0:1c:79:1f:5c:25:55:99:5b:02: a0:42:ac:b3:f0:9c:9f:e7:b9:9a:a9:82:75:98:3e:77:b9:ee: 1b:57:38:55:53:db:ce:96:0e:d1:d9:56:34:2c:f9:ee:07:b0: 7b:04:42:3c:27:ed:7b:e2:8f:df:36:e8:7d:d6:5d:8a:a2:f8: 79:33:1a:ed:66:98:80:ba:67:20:2f:03:5a:3f:bb:74:13:ca: ea:f6:05:53:3e:8b:6e:ab:db:f8:11:f1:80:19:0f:5a:4b:9b: ee:bc:50:3c:e1:46:5d:ce:94:cd:fc:0a:af:fe:32:fb:13:97: 1b:23:6c:25:f3:d6:9d:28:ff:74:fc:b7:fb:ce:8b:bd:bb:d7: fb:aa:90:0f:f9:b6:3a:90:9b:93:31:26:73:28:30:6d:8b:6a: d6:e7:84:4f:aa:51:ab:92:3c:a6:37:3d:9e:b3:54:b8:79:ad: 4e:03:48:9a:1e:54:5a:75:b3:cf:14:7c:ae:55:14:84:ee:3a: 78:86:9b:85:92:fe:43:aa:a5:1f:d4:16:12:df:f7:86:d6:87: 14:48:79:d3:06:c2:e5:21:34:51:1d:1a:a6:ea:43:25:00:f6: 9a:05:b4:18 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnApNNSEpRgRJn9nLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YTYyZjFmZmMtY2E5YS00NWZkLWE2OWQtYWUxYjQxYjU2OTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxCjPEZcDQusODqmVIxPRsMGmFwjr8X1y7OD V9gg0qj+x2WEuzaKIcalMDP7fwjKzIQ+Yvbh+9aFz08bQUPG1/IbB6WNpiCY2hFa DFUqIZJB1HARz265CJunQjQohxrkGdwcjfYBrNhIe7S+E/k6V6NwFc9WJZnpdwDc pfv1gR10PBPNkIuStEPPyoMxzGp/qsB7PQCd7IJHXhyIB6LL1GxG1ZJQ+8eEGQ0j sKh9f540AFf1wKLehyp3Nr4r1gIudUti/FzK/Te0b2JZhD76ZARfuyB9eA3oE5rB DRNCwIOA04DyV1wdU4ru5PP7XYlYmTBm2zBzjfMjipnuV3UoAwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHb7Y+5HCyE9sITviDKFJFToumTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvM2Y1NWU3MjItOTM3MS0z MjQ2LThlY2YtODNhZDE2YjY5YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAneswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdvghwxD+bk5ZvAf1dlcAGwSYCmQlFWcJGiegHHkfXCVVmVsCoEKss/Cc n+e5mqmCdZg+d7nuG1c4VVPbzpYO0dlWNCz57gewewRCPCfte+KP3zbofdZdiqL4 eTMa7WaYgLpnIC8DWj+7dBPK6vYFUz6Lbqvb+BHxgBkPWkub7rxQPOFGXc6UzfwK r/4y+xOXGyNsJfPWnSj/dPy3+86LvbvX+6qQD/m2OpCbkzEmcygwbYtq1ueET6pR q5I8pjc9nrNUuHmtTgNImh5UWnWzzxR8rlUUhO46eIabhZL+Q6qlH9QWEt/3htaH FEh50wbC5SE0UR0apupDJQD2mgW0GA== -----END CERTIFICATE-----Generated at Sat May 10 14:38:55 2025 by rpki-client