$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: Ws3kRA13LnK9xONkHhSDeuCeEr+CNiiCLp02GT2uaFw= Subject key identifier: 5B:49:C9:44:41:4E:60:C6:E6:BF:C6:52:EF:D9:5A:6E:25:6F:3C:02 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285849B9AA02B7F061885C0BC1B580 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:02:b7:f0:61:88:5c:0b:c1:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=6e3a8b83-de1e-43cd-bc61-0967c4d27c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f8:ca:74:51:5b:65:08:b6:97:3a:7b:36:f8: b6:08:dc:e7:83:ce:a4:4e:7a:6a:ef:26:5c:0f:8c: 06:e0:f5:87:bd:b5:b4:b4:9f:8c:02:cf:d9:fb:7a: 35:a2:27:7c:10:b6:c4:d3:e8:c4:95:8f:97:9a:b1: 42:87:f7:f9:56:cd:bb:0a:5b:a7:17:62:a1:6e:66: 10:2b:06:8b:0c:6b:a8:f7:e5:43:80:80:39:ae:f8: 8d:79:ea:f0:0f:27:c5:20:69:7c:98:4f:ec:27:71: a5:26:a1:a4:22:73:70:f3:bf:b8:6f:ce:95:ab:04: c2:85:42:82:80:3a:42:76:3d:42:32:dc:ee:21:9a: c1:93:9b:32:18:9b:66:2a:0a:f5:38:0c:c8:d2:d3: 7b:87:34:4e:68:3d:3e:4a:74:87:09:55:2b:f2:70: 63:1a:11:38:c7:91:bc:c7:1f:6c:fa:36:99:2a:5e: 3a:a1:8c:ba:c0:45:af:57:6a:23:9c:7f:53:9e:6c: 54:00:aa:33:4e:cd:c2:60:c3:45:f8:3d:a1:54:c5: 71:ff:43:80:3c:2a:66:ed:e5:14:5e:23:e9:f3:66: f4:b8:71:19:a5:9d:30:54:05:68:c4:49:df:12:a5: 75:50:c0:f2:df:13:4e:2c:0d:f3:ec:ff:b0:2e:e1: 9e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:49:C9:44:41:4E:60:C6:E6:BF:C6:52:EF:D9:5A:6E:25:6F:3C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cd:17:71:90:8c:ad:a7:0b:23:d1:da:0b:61:56:8c:f8:84: 44:62:35:60:8d:92:f8:ba:33:a8:c6:4c:42:d1:43:67:93:31: 13:4d:43:98:f5:81:ab:13:e9:ad:a9:db:62:d5:00:03:f0:d3: 50:75:31:d8:10:a8:17:19:1c:ab:31:64:fd:00:9b:21:fc:7c: 0e:93:a3:cc:07:77:8a:0a:f2:34:88:15:71:1f:35:df:98:ca: 6e:9b:e9:ae:90:28:0c:18:5a:e4:a2:55:cb:97:fd:75:70:52: 1a:35:2f:5c:36:d8:6a:f7:83:d7:e0:d2:7c:14:1e:af:12:c7: 14:5b:a9:54:a9:3f:76:ec:92:d5:32:91:fd:30:0a:78:d2:7f: 3a:2f:7e:40:e8:58:22:b8:3e:3a:2f:7e:10:e8:ac:40:51:0e: 0e:bb:9c:bb:3b:e5:68:8f:ff:f9:5b:80:cf:a8:4d:3b:2d:b3: f3:b6:c3:fb:37:3f:77:c0:4f:bf:fe:d2:51:bf:25:c4:e4:30: 73:0c:77:96:8d:23:a3:81:39:4c:bf:94:68:68:8a:e3:e8:54: cd:a8:97:ce:a0:ec:8f:f3:df:cc:fe:6a:c4:c6:3c:f5:80:22: ba:57:7c:62:ad:25:4c:62:af:ab:7f:1e:f9:17:e8:ea:75:75: af:23:53:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgK38GGIXAvBtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NmUzYThiODMtZGUxZS00M2NkLWJjNjEtMDk2N2M0ZDI3YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfjKdFFbZQi2lzp7Nvi2CNzng86kTnpq7yZc D4wG4PWHvbW0tJ+MAs/Z+3o1oid8ELbE0+jElY+XmrFCh/f5Vs27ClunF2KhbmYQ KwaLDGuo9+VDgIA5rviNeerwDyfFIGl8mE/sJ3GlJqGkInNw87+4b86VqwTChUKC gDpCdj1CMtzuIZrBk5syGJtmKgr1OAzI0tN7hzROaD0+SnSHCVUr8nBjGhE4x5G8 xx9s+jaZKl46oYy6wEWvV2ojnH9TnmxUAKozTs3CYMNF+D2hVMVx/0OAPCpm7eUU XiPp82b0uHEZpZ0wVAVoxEnfEqV1UMDy3xNOLA3z7P+wLuGeNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtJyURBTmDG5r/GUu/ZWm4lbzwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfNF3GQjK2nCyPR2gthVoz4hERiNWCNkvi6M6jGTELRQ2eTMRNNQ5j1 gasT6a2p22LVAAPw01B1MdgQqBcZHKsxZP0AmyH8fA6To8wHd4oK8jSIFXEfNd+Y ym6b6a6QKAwYWuSiVcuX/XVwUho1L1w22Gr3g9fg0nwUHq8SxxRbqVSpP3bsktUy kf0wCnjSfzovfkDoWCK4PjovfhDorEBRDg67nLs75WiP//lbgM+oTTsts/O2w/s3 P3fAT7/+0lG/JcTkMHMMd5aNI6OBOUy/lGhoiuPoVM2ol86g7I/z38z+asTGPPWA IrpXfGKtJUxir6t/HvkX6Op1da8jUxc= -----END CERTIFICATE-----Generated at Sat May 10 20:33:40 2025 by rpki-client