$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa File: bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa (raw, json) Hash identifier: MRyvY360NR/XhEt7ljuB5+hEzeqSGoo+4idQsXiZwg0= Subject key identifier: F7:BF:97:73:EA:C9:F5:5D:CB:5A:E6:81:D1:A5:55:8E:84:0F:D8:81 Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F43285849B2E4A94CE3970424EC23C840 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa Signing time: Wed 30 Apr 2025 14:48:26 +0000 ROA not before: Wed 30 Apr 2025 14:48:26 +0000 ROA not after: Tue 29 Jul 2025 14:48:26 +0000 asID: 398446 IP address blocks: 143.246.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:e4:a9:4c:e3:97:04:24:ec:23:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Apr 30 14:48:26 2025 GMT Not After : Jul 29 14:48:26 2025 GMT Subject: CN=d40ec3e8-f4e1-48c6-9153-a89e9e95f232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0b:5b:09:a6:0b:25:a2:49:11:ea:cf:d0:36: 41:8f:b3:70:18:43:7f:04:8f:df:bd:ea:17:c7:3a: 13:4e:5c:f6:4b:b6:8a:ea:a5:45:44:66:ad:c6:26: 9a:d8:40:44:67:7e:d1:f3:4c:97:29:cf:7c:3f:c7: 45:3e:b0:42:76:cf:fb:28:ff:2a:cc:b6:fb:53:74: 57:ab:23:d6:16:39:cf:d7:0f:8a:2e:53:91:ec:10: b9:ba:0b:b2:ae:6f:ca:47:15:9c:a8:94:24:49:2c: 5d:5a:30:f1:c2:31:eb:34:b5:81:2d:9a:a1:48:57: 12:40:16:50:42:65:26:da:db:01:5c:22:42:6e:f2: 0a:cb:5f:3b:92:a4:b9:13:e6:2b:d8:51:8c:11:45: d1:34:46:0a:e7:3d:28:67:62:90:a3:3a:83:c7:d5: b6:db:b6:ae:0f:bb:8e:7b:64:d9:eb:b3:3d:bf:bc: 2d:a2:59:f9:df:83:51:4a:c4:b4:29:4e:92:20:65: 16:8b:86:d1:57:36:82:bf:1e:e0:07:0c:05:79:fa: 9e:d1:01:f2:ae:04:92:b9:af:2a:cf:fd:e8:ff:41: 8b:26:33:67:23:13:02:41:eb:87:cc:39:31:86:bc: 5d:41:3b:ef:0e:65:04:d5:0a:53:73:35:b8:aa:20: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BF:97:73:EA:C9:F5:5D:CB:5A:E6:81:D1:A5:55:8E:84:0F:D8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 143.246.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:18:86:94:40:f7:80:a0:4a:96:15:86:9c:9c:ef:09:f9:04: 04:a7:e3:c5:d3:b9:4e:59:57:5a:ee:9f:33:b2:59:2c:63:eb: 43:cf:d8:bf:f0:c3:a1:68:48:e8:26:3a:c6:2f:37:3c:84:8a: 1c:62:20:9a:19:d5:fe:4b:e8:8f:9a:19:dc:1e:31:5b:66:a7: ce:17:2c:c8:62:80:9c:48:2f:fd:30:aa:5b:c1:f8:6d:53:5e: 24:d3:bf:94:99:38:59:a0:62:91:0d:5f:e2:66:91:04:3a:c3: 19:ee:9c:2b:46:4f:75:0c:93:a3:4f:c7:f3:f7:24:4f:99:4a: 00:04:03:08:69:46:76:ad:72:3c:7b:04:27:f0:ed:d8:7a:be: 64:00:51:eb:51:c3:10:63:90:ee:fc:02:60:f7:04:67:8b:82: 1e:e5:19:1c:12:da:0a:ee:c7:ab:4f:26:ea:29:f6:ad:c9:5f: d6:72:21:3f:c2:9e:be:43:d3:fa:9b:79:14:8d:ea:ea:e4:0e: 40:88:74:60:5c:b5:9f:96:92:35:e5:c1:e7:09:f1:f8:e8:5c: 67:6b:df:2b:c7:bc:c4:cf:4b:dc:6b:9a:42:74:ec:bf:e0:7f: 8d:9b:5d:40:84:74:4a:0e:3b:77:b3:82:ca:e4:7d:84:e3:77: ce:cc:13:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmy5KlM45cEJOwjyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI1MDQzMDE0NDgyNloXDTI1MDcyOTE0NDgyNlowLzEtMCsGA1UEAxMk ZDQwZWMzZTgtZjRlMS00OGM2LTkxNTMtYTg5ZTllOTVmMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgtbCaYLJaJJEerP0DZBj7NwGEN/BI/fveoX xzoTTlz2S7aK6qVFRGatxiaa2EBEZ37R80yXKc98P8dFPrBCds/7KP8qzLb7U3RX qyPWFjnP1w+KLlOR7BC5uguyrm/KRxWcqJQkSSxdWjDxwjHrNLWBLZqhSFcSQBZQ QmUm2tsBXCJCbvIKy187kqS5E+Yr2FGMEUXRNEYK5z0oZ2KQozqDx9W227auD7uO e2TZ67M9v7wtoln534NRSsS0KU6SIGUWi4bRVzaCvx7gBwwFefqe0QHyrgSSua8q z/3o/0GLJjNnIxMCQeuHzDkxhrxdQTvvDmUE1QpTczW4qiAPvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe/l3PqyfVdy1rmgdGlVY6ED9iBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvYmRkMWRlZTYtYTc0OC0z YmNkLWE4MTctMWI2MTdlMmNiMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoYhpRA94CgSpYVhpyc7wn5BASn48XTuU5ZV1runzOyWSxj60PP2L/w w6FoSOgmOsYvNzyEihxiIJoZ1f5L6I+aGdweMVtmp84XLMhigJxIL/0wqlvB+G1T XiTTv5SZOFmgYpENX+JmkQQ6wxnunCtGT3UMk6NPx/P3JE+ZSgAEAwhpRnatcjx7 BCfw7dh6vmQAUetRwxBjkO78AmD3BGeLgh7lGRwS2grux6tPJuop9q3JX9ZyIT/C nr5D0/qbeRSN6urkDkCIdGBctZ+WkjXlwecJ8fjoXGdr3yvHvMTPS9xrmkJ07L/g f42bXUCEdEoOO3ezgsrkfYTjd87MEyA= -----END CERTIFICATE-----Generated at Sat May 10 20:16:11 2025 by rpki-client