$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa File: cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa (raw, json) Hash identifier: m+W24Eq1GsqVVFKYylDcbSDwr6Ced8Eo9L9qKS7o2CA= Subject key identifier: 9C:B5:C0:72:45:1B:5E:34:5B:F7:14:8B:68:38:CB:71:EE:66:E4:0B Certificate issuer: /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Certificate serial: 010D0C9F43285849C4D4B663F83059E6043DE980 Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16509 IP address blocks: 147.160.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b6:63:f8:30:59:e6:04:3d:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=3f089d78-de94-4cf1-99e4-0c258754a5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:4c:6b:82:2e:cc:28:3b:73:c9:9d:f7:bb: ca:15:82:6a:ff:c9:b4:e9:4b:98:96:5e:02:e0:2c: f2:75:7a:83:24:45:0e:85:92:b3:d9:b0:4b:d2:20: f1:c6:27:41:93:2b:2e:a2:17:f7:9b:1d:7a:47:e8: c9:7b:56:77:02:b3:c0:a6:33:c9:95:41:23:28:6b: 45:31:f8:2c:8c:38:fc:2d:65:bf:fa:cb:52:9f:0e: 45:81:57:49:f0:de:76:aa:39:66:4c:45:d6:fa:35: 39:26:65:85:95:4b:08:b1:df:79:31:91:ad:35:e4: 26:0a:05:e0:f1:7f:a1:a6:d3:3a:6a:5e:ac:f5:f0: d5:cc:a2:8a:74:4c:f2:1e:f2:9c:3f:78:82:2a:78: 32:30:16:81:7f:10:62:90:52:fb:59:7b:66:ac:38: 72:6e:bd:2f:76:1a:e9:d4:12:06:b8:76:f4:85:1f: 54:f1:b7:f8:ac:bc:49:f4:bb:3f:8a:09:70:4c:90: cf:58:4b:97:3e:32:27:a3:94:aa:93:fc:ab:b0:7c: 8c:a9:1d:15:e3:89:36:3d:06:d5:82:98:9a:83:dd: ee:9d:8b:85:25:aa:1a:be:5f:ca:c2:8b:60:f1:52: e5:35:05:76:ad:8c:75:bb:78:b7:0d:03:cc:e7:f0: 3d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B5:C0:72:45:1B:5E:34:5B:F7:14:8B:68:38:CB:71:EE:66:E4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl X509v3 Authority Key Identifier: keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer sbgp-ipAddrBlock: critical IPv4: 147.160.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b6:65:96:5c:5c:bb:09:8e:97:56:e9:a3:fe:3c:a2:a1:56: 41:d9:47:03:3d:a1:f1:c2:a8:d8:f3:30:ef:81:0c:38:8e:96: b5:1a:07:08:4b:8b:1d:d7:bc:6b:d8:4c:5b:f2:09:69:63:9e: 94:08:3a:e4:55:c4:23:04:a4:39:92:b6:31:3a:70:52:a6:94: b8:58:40:64:e2:f9:87:6b:45:1a:ac:55:fa:30:53:ac:d6:86: b2:e5:d1:39:d4:fd:e8:80:b7:ec:e8:73:c5:34:6a:3d:e0:43: f0:b6:f4:d3:62:a1:dd:af:a2:3f:68:e1:f2:7c:d2:6f:c4:a9: 6e:f0:61:a8:e9:9b:9b:c7:52:9e:c2:0a:4c:74:59:70:b2:1f: da:cc:d0:5b:18:6f:72:3d:07:cb:44:16:5d:9b:60:06:41:9f: 3b:af:a7:f0:bd:8c:e3:cc:3f:3e:e6:00:58:f7:71:f4:28:3f: c0:9e:7c:f8:38:18:a9:c5:94:09:56:96:42:a3:c3:8e:0e:61: c2:be:f0:31:d2:ba:b4:64:f5:c2:ee:92:dd:2c:ce:db:ec:cb: bc:88:99:be:30:5b:a0:ac:85:06:7a:cb:36:3e:14:7a:95:48: 61:9c:f5:72:fd:2a:39:a0:eb:23:e6:ee:d0:9b:3c:c7:8a:72: d1:0e:04:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LZj+DBZ5gQ96YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJiODkxNTYtMmJkNi00OWJlLWEwYTMtYzUzMmEzNDky MmU2MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk M2YwODlkNzgtZGU5NC00Y2YxLTk5ZTQtMGMyNTg3NTRhNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviRMa4IuzCg7c8md97vKFYJq/8m06UuYll4C 4CzydXqDJEUOhZKz2bBL0iDxxidBkysuohf3mx16R+jJe1Z3ArPApjPJlUEjKGtF MfgsjDj8LWW/+stSnw5FgVdJ8N52qjlmTEXW+jU5JmWFlUsIsd95MZGtNeQmCgXg 8X+hptM6al6s9fDVzKKKdEzyHvKcP3iCKngyMBaBfxBikFL7WXtmrDhybr0vdhrp 1BIGuHb0hR9U8bf4rLxJ9Ls/iglwTJDPWEuXPjIno5Sqk/yrsHyMqR0V44k2PQbV gpiag93unYuFJaoavl/Kwotg8VLlNQV2rYx1u3i3DQPM5/A9zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy1wHJFG140W/cUi2g4y3HuZuQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4 OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMyYTM0OTIyZTYvY2Y4ZmU1MmYtNTdhMi0z YmM3LWIyNTEtZDc3MjIxOGE4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGJiODkxNTYtMmJkNi00OWJlLWEw YTMtYzUzMmEzNDkyMmU2LzRiYjg5MTU2LTJiZDYtNDliZS1hMGEzLWM1MzJhMzQ5 MjJlNi5jcmwwHwYDVR0jBBgwFoAU11ernRiVAjwc5BddnSd5Ptco3fEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMy YTM0OTIyZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6CFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe2ZZZcXLsJjpdW6aP+PKKhVkHZRwM9ofHCqNjzMO+BDDiOlrUaBwhL ix3XvGvYTFvyCWljnpQIOuRVxCMEpDmStjE6cFKmlLhYQGTi+YdrRRqsVfowU6zW hrLl0TnU/eiAt+zoc8U0aj3gQ/C29NNiod2voj9o4fJ80m/EqW7wYajpm5vHUp7C Ckx0WXCyH9rM0FsYb3I9B8tEFl2bYAZBnzuvp/C9jOPMPz7mAFj3cfQoP8CefPg4 GKnFlAlWlkKjw44OYcK+8DHSurRk9cLukt0sztvsy7yImb4wW6CshQZ6yzY+FHqV SGGc9XL9Kjmg6yPm7tCbPMeKctEOBMc= -----END CERTIFICATE-----Generated at Wed May 7 05:54:09 2025 by rpki-client