$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a16f8097-e993-3f93-b9f6-319f77da9a19.roa File: a16f8097-e993-3f93-b9f6-319f77da9a19.roa (raw, json) Hash identifier: 0fPqrKRIdeaej/v1Z//qNvJe2T+KZLEi2LadZAOi5Sk= Subject key identifier: 48:F8:10:14:B2:B2:F1:F2:75:33:AC:BC:AA:60:AC:1F:0A:3A:1D:71 Certificate issuer: /CN=f25c48f2-c7df-4c6b-b214-2e741959995d Certificate serial: 010D0C9F432858499DBF3905B9E4FBF6A7AEA400 Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a16f8097-e993-3f93-b9f6-319f77da9a19.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 398427 IP address blocks: 185.178.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:39:05:b9:e4:fb:f6:a7:ae:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=d966db9a-ac60-4518-a5dd-13cc3198b39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:7d:44:16:c3:bc:64:88:0d:8d:c6:1e:6d: 4d:78:da:f2:6d:85:e6:7d:da:65:07:e0:e0:28:84: 88:b0:b9:e9:e1:3c:5b:ee:6d:e6:7b:a9:a6:42:01: 80:a3:e9:f5:4d:2e:f5:6c:22:9c:f2:2f:89:12:d6: cf:05:7e:b5:04:f2:c4:9b:07:b8:21:2a:3c:e5:17: e7:61:c4:99:e4:9b:fa:62:69:fd:ef:81:77:e6:67: e1:cf:d5:0e:cf:ee:f9:0a:73:19:6a:b8:c9:be:f3: 39:f9:5e:a4:46:25:89:0d:b0:5b:5d:c9:ec:cc:d2: cc:03:a6:89:4f:f1:88:62:30:11:04:cc:ac:cb:63: 32:4a:e5:03:25:52:6a:d4:2d:e3:6f:10:a8:56:1d: 13:c8:2c:1d:0a:45:10:d3:da:8d:37:7a:8f:e8:e3: b7:4a:3f:bb:f5:ba:27:e7:f8:1f:e3:cd:52:3b:f6: 7f:75:3b:e5:52:04:48:b2:37:50:ad:36:d0:18:d8: c0:ad:8e:e5:df:09:b9:f8:b7:ad:05:b8:e1:b3:20: 1d:48:4e:88:f5:67:4d:d9:cd:3d:03:08:26:ba:ad: e2:8a:7e:aa:77:cc:ce:eb:b1:cd:6f:f2:c9:7c:0c: 27:98:fe:25:8b:6b:ab:a5:c6:90:9e:41:e8:1a:66: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:10:14:B2:B2:F1:F2:75:33:AC:BC:AA:60:AC:1F:0A:3A:1D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a16f8097-e993-3f93-b9f6-319f77da9a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl X509v3 Authority Key Identifier: keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer sbgp-ipAddrBlock: critical IPv4: 185.178.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b1:f8:17:94:a4:05:a6:63:da:6f:73:55:f9:fb:76:1f:c5: 09:02:26:77:16:ab:d6:d0:31:27:0d:a9:ad:28:8f:24:14:c3: 35:83:75:07:a0:84:37:fd:38:56:69:24:97:90:b9:90:6f:a7: 58:76:03:1a:b4:84:4e:ee:cc:6d:ee:88:dc:79:0f:72:09:42: 58:f5:84:31:11:0b:69:e8:a3:6f:7c:36:71:ee:61:6f:16:05: 76:f7:4c:c8:6c:46:a1:73:79:d5:46:86:4e:da:8f:f7:3a:40: 51:a2:e6:b6:a7:44:bb:3c:5c:bb:e2:2b:03:bb:59:ba:aa:56: 52:56:4d:18:b2:bc:d4:05:5a:97:60:b4:27:e4:8a:e8:71:af: ac:31:38:7b:70:41:cf:e2:d4:71:89:f4:36:67:c7:56:ee:8a: fa:f6:e7:95:21:69:01:39:d9:f3:8e:3d:96:da:c0:37:0c:c8: 0b:66:4f:45:2c:ac:6c:f9:e4:87:11:3d:1b:88:6c:2a:b9:c8: 64:bc:64:7a:ad:bd:59:cb:8a:32:78:97:ca:bc:1a:9d:be:3f: bb:df:a4:91:d9:fe:b4:ed:7e:98:dc:dc:ff:b2:d6:39:61:f7: 9f:65:55:ac:d3:9b:f4:6f:6d:1d:06:c8:0b:1a:6c:96:05:a1: c2:ee:4c:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzkFueT79qeupAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5 OTVkMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZDk2NmRiOWEtYWM2MC00NTE4LWE1ZGQtMTNjYzMxOThiMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmad9RBbDvGSIDY3GHm1NeNrybYXmfdplB+Dg KISIsLnp4Txb7m3me6mmQgGAo+n1TS71bCKc8i+JEtbPBX61BPLEmwe4ISo85Rfn YcSZ5Jv6Ymn974F35mfhz9UOz+75CnMZarjJvvM5+V6kRiWJDbBbXcnszNLMA6aJ T/GIYjARBMysy2MySuUDJVJq1C3jbxCoVh0TyCwdCkUQ09qNN3qP6OO3Sj+79bon 5/gf481SO/Z/dTvlUgRIsjdQrTbQGNjArY7l3wm5+LetBbjhsyAdSE6I9WdN2c09 Awgmuq3iin6qd8zO67HNb/LJfAwnmP4li2urpcaQnkHoGmaN/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj4EBSysvHydTOsvKpgrB8KOh1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvYTE2ZjgwOTctZTk5My0z ZjkzLWI5ZjYtMzE5Zjc3ZGE5YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5 OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0 MTk1OTk5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+x+BeUpAWmY9pvc1X5+3YfxQkCJncWq9bQMScNqa0ojyQUwzWDdQeg hDf9OFZpJJeQuZBvp1h2Axq0hE7uzG3uiNx5D3IJQlj1hDERC2noo298NnHuYW8W BXb3TMhsRqFzedVGhk7aj/c6QFGi5ranRLs8XLviKwO7WbqqVlJWTRiyvNQFWpdg tCfkiuhxr6wxOHtwQc/i1HGJ9DZnx1buivr255UhaQE52fOOPZbawDcMyAtmT0Us rGz55IcRPRuIbCq5yGS8ZHqtvVnLijJ4l8q8Gp2+P7vfpJHZ/rTtfpjc3P+y1jlh 959lVazTm/RvbR0GyAsabJYFocLuTGA= -----END CERTIFICATE-----Generated at Sun May 11 09:06:26 2025 by rpki-client