$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa File: c0271d02-e45f-3dda-8c9a-2468641ab27b.roa (raw, json) Hash identifier: bWCQ9x01zjrUi6NkX9utJ6qBJoyOcaDzUCt8UNl3beA= Subject key identifier: A8:18:E5:3A:31:52:5B:18:E6:A2:02:62:A2:1C:F1:31:86:33:79:DD Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285848F9267F42B592CDD34C166180 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 11426 IP address blocks: 158.115.236.0/23 maxlen: 23 158.115.238.0/23 maxlen: 23 207.230.100.0/23 maxlen: 23 207.230.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:7f:42:b5:92:cd:d3:4c:16:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=225513bf-14c5-480e-9b62-969770d1dac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:f9:37:ee:e6:be:b2:59:34:43:f6:d9:95: 2b:f2:ca:41:9c:45:98:e5:9b:ae:3a:2b:34:ac:e1: bc:ba:ca:8c:3c:01:2e:17:e2:78:08:be:63:36:2b: 04:05:06:62:0b:c1:b1:32:4d:64:0d:13:1d:78:45: 14:b8:c5:33:af:57:7e:73:e1:9a:05:a1:94:45:47: fb:27:85:c4:60:b7:06:4d:c8:e9:1c:25:07:59:0f: ef:8c:5f:54:57:54:71:70:75:98:f3:7a:b2:fe:ec: 78:81:a6:f4:a7:06:64:66:71:8f:6c:2f:cb:ba:9b: 5e:2c:e5:96:cb:50:00:4a:34:32:b3:aa:10:25:bb: 8b:b4:16:cd:5c:9a:92:de:2b:7c:42:b7:d8:78:23: da:f9:04:11:d4:71:60:ce:65:88:fe:71:69:68:13: c7:89:4e:06:ee:f6:83:1c:c3:41:d4:ee:50:4f:b0: 0f:ee:09:88:81:74:6f:27:03:81:9c:34:d5:63:dd: a5:b8:54:06:80:19:5a:cc:c0:7c:a5:23:1e:2b:27: b8:23:17:c7:a8:f5:04:d1:80:57:e1:60:0d:e4:e1: 51:72:92:38:2b:60:a3:3c:40:c1:07:60:fe:79:5f: 8a:02:ac:bd:0e:15:85:6d:4f:15:43:dd:ba:79:c3: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:18:E5:3A:31:52:5B:18:E6:A2:02:62:A2:1C:F1:31:86:33:79:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.236.0/22 207.230.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:80:aa:de:cd:31:9a:08:d0:7b:75:d3:cd:27:c6:6c:93:0b: e0:0e:39:7b:44:7f:7e:02:af:f5:e5:df:a9:f7:ec:14:de:9c: 09:fe:d0:aa:98:6b:3f:be:d7:43:12:af:38:30:1b:06:14:ef: b0:cc:7a:b3:c4:bf:14:01:cc:7f:7a:6a:d3:12:be:97:90:bf: 85:9c:de:fb:c0:a9:ff:10:c1:57:94:9b:5f:79:39:74:45:84: bb:45:f3:0f:b1:2c:f4:e7:cf:53:be:33:45:a8:f2:d3:e4:b0: 1f:6f:71:d0:f9:ec:3b:f0:8c:67:62:6a:d5:99:9b:f8:0a:b0: 41:e0:dd:8f:82:77:56:54:c7:96:cf:e5:27:8b:99:72:74:bb: fa:d9:42:0e:4f:18:76:0e:ae:2d:8e:9e:04:09:cd:1f:e4:aa: 6a:8d:41:6a:43:f5:c7:2b:cc:a5:9a:72:65:0e:6b:de:fa:de: 42:ff:eb:e7:56:79:f7:1c:80:38:d5:11:50:81:de:09:5b:41: b7:fe:c6:07:a9:7c:0a:10:b1:43:6d:42:f0:8a:85:69:88:1f: 1f:e6:17:33:5e:6b:23:a8:6b:5d:62:33:09:94:03:44:78:dd: 4e:38:f5:de:3c:50:9a:c8:42:67:bb:11:87:1b:20:2a:86:f7: 72:7b:ec:8a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj5Jn9CtZLN00wWYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MjI1NTEzYmYtMTRjNS00ODBlLTliNjItOTY5NzcwZDFkYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT75N+7mvrJZNEP22ZUr8spBnEWY5ZuuOis0 rOG8usqMPAEuF+J4CL5jNisEBQZiC8GxMk1kDRMdeEUUuMUzr1d+c+GaBaGURUf7 J4XEYLcGTcjpHCUHWQ/vjF9UV1RxcHWY83qy/ux4gab0pwZkZnGPbC/LupteLOWW y1AASjQys6oQJbuLtBbNXJqS3it8QrfYeCPa+QQR1HFgzmWI/nFpaBPHiU4G7vaD HMNB1O5QT7AP7gmIgXRvJwOBnDTVY92luFQGgBlazMB8pSMeKye4IxfHqPUE0YBX 4WAN5OFRcpI4K2CjPEDBB2D+eV+KAqy9DhWFbU8VQ926ecNRBQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKgY5ToxUlsY5qICYqIc8TGGM3ndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYzAyNzFkMDItZTQ1Zi0z ZGRhLThjOWEtMjQ2ODY0MWFiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCnnPsAwQC z+ZkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACSAqt7NMZoI0Ht1080nxmyTC+AOOXtEf34Cr/Xl36n37BTe nAn+0KqYaz++10MSrzgwGwYU77DMerPEvxQBzH96atMSvpeQv4Wc3vvAqf8QwVeU m195OXRFhLtF8w+xLPTnz1O+M0Wo8tPksB9vcdD57DvwjGdiatWZm/gKsEHg3Y+C d1ZUx5bP5SeLmXJ0u/rZQg5PGHYOri2OngQJzR/kqmqNQWpD9ccrzKWacmUOa976 3kL/6+dWefccgDjVEVCB3glbQbf+xgepfAoQsUNtQvCKhWmIHx/mFzNeayOoa11i MwmUA0R43U449d48UJrIQme7EYcbICqG93J77Io= -----END CERTIFICATE-----Generated at Tue May 6 18:09:43 2025 by rpki-client