$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2899bf57-c466-3185-8b49-b967c6136031.roa File: 2899bf57-c466-3185-8b49-b967c6136031.roa (raw, json) Hash identifier: k3umwqF3Y1yrCmH5YQVCCKPibmG2mDuGijLtcuB/Y4g= Subject key identifier: C6:E8:A8:FE:3C:51:58:14:C7:2C:C5:3C:79:67:4F:8A:5A:01:7D:4B Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584A560054CDCA8D7A49067D7640 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2899bf57-c466-3185-8b49-b967c6136031.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 11377 IP address blocks: 159.183.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:54:cd:ca:8d:7a:49:06:7d:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=c53f2f45-be9b-4ec1-8022-b65287165109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:70:a9:a3:63:38:dc:da:c5:11:90:b1:fc: 26:e7:fc:72:ff:88:ae:79:19:ed:ea:89:32:b0:aa: e8:b6:02:89:1d:69:e5:1e:23:01:bc:a3:64:ba:2b: 67:02:1f:04:bd:e3:e6:b6:1f:bd:90:af:e7:3d:0a: 62:63:02:e9:eb:bc:9e:ad:30:d1:a1:53:84:28:02: 75:00:d0:b8:e3:66:8c:a5:4a:5d:6b:07:66:e1:ce: 3e:f3:24:7e:5e:6b:91:60:8e:f3:bd:4e:23:f7:23: 18:82:e7:e2:21:26:7a:08:58:e8:9f:a6:9e:10:51: 98:99:d5:c0:29:e0:5f:dc:f2:6c:c7:25:ea:16:fb: a9:26:6c:a2:e4:9d:8e:bf:70:bf:a8:a4:af:a5:44: 32:6a:8b:68:96:5f:54:21:81:20:b2:e4:69:6c:9f: 49:48:da:64:22:26:ea:ac:d5:25:7a:98:04:18:2d: a6:ed:8d:e4:85:2e:b8:c6:de:d7:e7:fd:53:54:57: 1e:e8:07:b0:f5:e2:e8:bf:66:fd:55:46:50:c5:9d: 65:36:ac:6d:76:5d:5f:44:0f:67:8f:9a:7a:84:9b: 66:1f:7c:1a:ee:b8:59:2d:8b:ed:0e:8b:3b:86:96: d2:57:88:2a:95:76:4c:3d:3e:43:d5:66:31:25:1c: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:A8:FE:3C:51:58:14:C7:2C:C5:3C:79:67:4F:8A:5A:01:7D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2899bf57-c466-3185-8b49-b967c6136031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.183.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:df:36:2a:3a:8b:52:f4:d2:b6:28:f6:16:8b:ce:d2:2c:bf: 56:51:b8:89:1c:1d:b4:ad:ed:ea:14:9c:56:07:7d:a4:80:71: ec:dc:90:b2:2d:bd:4f:97:0b:97:80:59:43:1a:01:c9:3b:70: cf:cb:77:e9:7f:1d:69:89:65:77:fb:50:90:bb:2d:9a:3e:d0: 9f:a5:de:5a:90:d5:22:3a:95:72:3f:31:78:a7:9e:34:09:74: 4a:53:b1:42:b4:d7:81:48:26:25:73:19:42:8f:4d:11:c1:a1: d8:bb:07:7e:1b:55:00:c0:9f:65:92:47:29:51:99:97:a0:78: da:4c:c9:4d:58:08:83:b3:13:8c:34:d3:8a:cd:3c:c2:68:84: 47:44:fd:37:38:92:b1:94:6f:54:b8:76:d0:a1:ec:9f:81:84: ac:85:be:90:f9:b5:49:15:53:2b:e2:92:49:9e:01:97:86:bb: f6:3b:8e:42:ad:00:3b:47:eb:78:a1:55:74:7a:ae:2b:ca:bb: b0:27:2b:1c:fe:fb:04:35:82:5f:e4:32:3b:30:5d:73:95:57: 2a:ae:a5:f6:6e:9b:3e:d6:4a:aa:26:ab:8c:01:43:15:b9:cf: 93:47:e1:2a:1a:bf:cf:22:e0:d1:2c:e7:24:10:c2:a9:15:86: 5a:22:68:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFTNyo16SQZ9dkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk YzUzZjJmNDUtYmU5Yi00ZWMxLTgwMjItYjY1Mjg3MTY1MTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY1wqaNjONzaxRGQsfwm5/xy/4iueRnt6oky sKrotgKJHWnlHiMBvKNkuitnAh8EvePmth+9kK/nPQpiYwLp67yerTDRoVOEKAJ1 ANC442aMpUpdawdm4c4+8yR+XmuRYI7zvU4j9yMYgufiISZ6CFjon6aeEFGYmdXA KeBf3PJsxyXqFvupJmyi5J2Ov3C/qKSvpUQyaotoll9UIYEgsuRpbJ9JSNpkIibq rNUlepgEGC2m7Y3khS64xt7X5/1TVFce6Aew9eLov2b9VUZQxZ1lNqxtdl1fRA9n j5p6hJtmH3wa7rhZLYvtDos7hpbSV4gqlXZMPT5D1WYxJRzMYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMboqP48UVgUxyzFPHlnT4paAX1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMjg5OWJmNTctYzQ2Ni0z MTg1LThiNDktYjk2N2M2MTM2MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7crMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIffNio6i1L00rYo9haLztIsv1ZRuIkcHbSt7eoUnFYHfaSAcezckLIt vU+XC5eAWUMaAck7cM/Ld+l/HWmJZXf7UJC7LZo+0J+l3lqQ1SI6lXI/MXinnjQJ dEpTsUK014FIJiVzGUKPTRHBodi7B34bVQDAn2WSRylRmZegeNpMyU1YCIOzE4w0 04rNPMJohEdE/Tc4krGUb1S4dtCh7J+BhKyFvpD5tUkVUyvikkmeAZeGu/Y7jkKt ADtH63ihVXR6rivKu7AnKxz++wQ1gl/kMjswXXOVVyqupfZumz7WSqomq4wBQxW5 z5NH4Soav88i4NEs5yQQwqkVhloiaHo= -----END CERTIFICATE-----Generated at Tue Jul 1 13:16:23 2025 by rpki-client