$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa File: 986a4304-e703-3a3c-a845-7d9c923fe3ef.roa (raw, json) Hash identifier: EdP9hEonCLjmMXqBQ0DtFK2TtsiDyZtEpHrB1fpfhr0= Subject key identifier: FF:55:F7:4E:CE:41:74:09:B2:D0:D0:13:BB:39:5A:44:47:3C:53:66 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285849B84EC3353356D732BAB69D00 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa Signing time: Fri 02 May 2025 13:21:15 +0000 ROA not before: Fri 02 May 2025 13:21:15 +0000 ROA not after: Thu 31 Jul 2025 13:21:15 +0000 asID: 16509 IP address blocks: 159.172.192.0/19 maxlen: 24 159.172.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:4e:c3:35:33:56:d7:32:ba:b6:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: May 2 13:21:15 2025 GMT Not After : Jul 31 13:21:15 2025 GMT Subject: CN=44cb39b7-f505-4845-aa6a-b9510076052d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:d7:72:64:b4:b0:61:19:94:97:01:5c:b7: 27:be:ce:25:09:ec:1b:86:77:69:27:05:6c:f9:36: cb:66:4c:ae:d9:d5:37:ef:ac:b5:f2:ca:c2:99:d4: 0e:a9:72:8d:6f:82:1c:13:65:a1:07:53:eb:05:9b: e2:3b:11:24:29:36:c2:74:10:79:5c:0a:3d:78:ea: 5a:b3:5d:f6:7c:9f:0f:53:e1:7d:a5:cb:29:9a:c8: bf:3b:be:65:cf:0f:a1:36:1f:63:23:d2:87:e1:cf: bd:a5:4b:40:77:ad:7c:2a:48:31:90:66:70:db:ec: 51:8f:f8:66:ae:bb:e8:03:bd:52:4d:31:ce:16:78: 90:85:f0:23:0b:38:42:1a:69:f3:7b:5a:74:96:58: 57:6e:c0:31:1a:cf:c5:1c:98:54:58:d8:e7:cd:b5: a2:80:4b:95:a7:37:08:97:2d:b3:df:5c:8c:59:00: 08:a5:63:dc:9e:4d:09:27:73:2a:77:75:1a:4a:d1: f6:50:01:a8:75:ca:c3:f8:cd:9d:66:3e:3a:c2:6f: 6a:6b:ba:f2:9e:46:c6:1c:0c:35:0b:37:a2:11:53: 0a:ed:f0:0c:a7:f4:49:8a:48:17:47:6a:1b:9d:10: 27:6a:fe:1e:b6:d3:75:ad:a2:e4:05:06:64:7d:68: d0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:F7:4E:CE:41:74:09:B2:D0:D0:13:BB:39:5A:44:47:3C:53:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.192.0-159.172.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:24:44:6e:36:01:8c:1d:b6:cc:ac:67:33:05:d0:23:fa:c8: 8b:ef:3b:c2:e4:b7:9c:f1:6d:bc:8c:4c:79:79:de:e0:b9:c4: 78:97:9c:88:a6:5e:de:50:2b:e6:f2:d5:8f:61:6a:b1:34:09: 63:55:7e:6a:9a:5b:07:05:c0:60:6b:54:81:31:0e:fe:1f:9a: 17:47:7e:33:cd:55:e5:6e:f3:2b:fa:7a:ef:1e:57:0a:82:98: 62:5f:c7:3b:5b:14:ca:8d:c1:e8:03:d1:98:70:12:44:4a:e1: 8d:2d:b4:f9:38:59:09:7e:73:c5:7e:8a:88:e1:d1:73:c5:48: e4:a8:d2:b7:7f:e2:9a:f9:d4:96:20:f8:97:2d:fe:f2:04:f0: a6:81:d6:4d:6d:c8:b9:94:a4:29:a7:21:17:d8:13:ef:90:f8: 1a:57:49:ff:51:23:87:55:5c:d4:da:fa:57:fd:a7:50:a7:2f: 59:49:c3:dd:5e:27:f4:ac:15:09:38:5d:7d:59:fa:fd:92:d8: 56:da:1e:08:58:b3:33:98:17:da:48:53:3f:38:7e:1b:ba:15: f6:fe:7c:90:70:4d:db:09:c2:9b:74:d4:2c:34:2e:a9:d6:9e: e0:fc:c5:3d:a3:d5:78:62:3f:90:4a:40:28:77:07:34:05:ef: 6d:9c:05:6f -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEm4TsM1M1bXMrq2nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDUwMjEzMjExNVoXDTI1MDczMTEzMjExNVowLzEtMCsGA1UEAxMk NDRjYjM5YjctZjUwNS00ODQ1LWFhNmEtYjk1MTAwNzYwNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorXXcmS0sGEZlJcBXLcnvs4lCewbhndpJwVs +TbLZkyu2dU376y18srCmdQOqXKNb4IcE2WhB1PrBZviOxEkKTbCdBB5XAo9eOpa s132fJ8PU+F9pcspmsi/O75lzw+hNh9jI9KH4c+9pUtAd618KkgxkGZw2+xRj/hm rrvoA71STTHOFniQhfAjCzhCGmnze1p0llhXbsAxGs/FHJhUWNjnzbWigEuVpzcI ly2z31yMWQAIpWPcnk0JJ3Mqd3UaStH2UAGodcrD+M2dZj46wm9qa7rynkbGHAw1 CzeiEVMK7fAMp/RJikgXR2obnRAnav4ettN1raLkBQZkfWjQtwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP9V907OQXQJstDQE7s5WkRHPFNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvOTg2YTQzMDQtZTcwMy0z YTNjLWE4NDUtN2Q5YzkyM2ZlM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAafrMAD BASfrOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMSREbjYBjB22zKxnMwXQI/rIi+87wuS3nPFtvIxMeXne 4LnEeJeciKZe3lAr5vLVj2FqsTQJY1V+appbBwXAYGtUgTEO/h+aF0d+M81V5W7z K/p67x5XCoKYYl/HO1sUyo3B6APRmHASRErhjS20+ThZCX5zxX6KiOHRc8VI5KjS t3/imvnUliD4ly3+8gTwpoHWTW3IuZSkKachF9gT75D4GldJ/1Ejh1Vc1Nr6V/2n UKcvWUnD3V4n9KwVCThdfVn6/ZLYVtoeCFizM5gX2khTPzh+G7oV9v58kHBN2wnC m3TULDQuqdae4PzFPaPVeGI/kEpAKHcHNAXvbZwFbw== -----END CERTIFICATE-----Generated at Mon May 5 10:17:16 2025 by rpki-client