$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa File: 31b1026a-02f7-3fb9-adc3-017f9c13f783.roa (raw, json) Hash identifier: jLl2HX6RSupy39vW237yYYeq5qdbiEY/VN5Dytk3+mI= Subject key identifier: EA:27:46:8D:0F:61:4F:D9:50:5E:41:42:2C:1B:95:11:FD:13:56:BF Certificate issuer: /CN=4e2aa2db-3714-4200-b480-469b49ebedb9 Certificate serial: 010D0C9F43285849BC74AEF9F69B50034A66E900 Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 397913 IP address blocks: 192.153.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ae:f9:f6:9b:50:03:4a:66:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=27cffcb4-0e7c-4d9c-9242-951cd63e5321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:35:61:82:e7:b2:61:be:b4:1d:2a:6b:56: d4:6e:9e:2c:18:61:31:1f:33:f4:e4:aa:ae:e1:0f: 5f:c1:34:9b:4d:66:5b:3e:c0:cd:26:be:79:ea:f1: 5d:b1:43:5d:71:06:dc:ff:a7:8f:90:3b:5b:8e:87: 9d:98:35:e1:83:2e:8c:11:0c:a2:e8:e7:24:77:45: 91:b7:44:7e:c8:7e:94:44:c3:45:d8:65:cb:2d:d6: e7:dd:43:c1:1d:b6:b9:92:ca:bf:13:0f:e4:f3:64: f8:c1:8e:28:41:9d:e0:2e:15:fe:98:b5:e9:36:e2: 6c:f0:86:29:2a:da:75:09:41:d0:fc:bd:20:5f:cf: 7e:12:78:28:9d:93:a7:90:bc:76:f3:6b:30:a7:bd: cb:a2:59:11:84:5d:e9:20:a1:c3:0c:65:8a:64:f5: 78:02:bb:b7:76:a5:86:20:04:75:63:18:0b:30:d0: fe:de:8a:e4:f4:00:87:a7:af:45:55:9f:2f:26:46: d4:26:ef:f1:69:06:03:ed:47:76:30:e2:35:3a:80: a3:3b:ae:af:75:48:03:82:f9:f5:74:0f:b3:dd:21: 28:d4:6e:ca:9a:29:79:75:64:7f:e8:30:e4:f2:c6: 81:80:23:a1:5b:e2:f4:b4:31:37:72:df:b5:40:8a: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:27:46:8D:0F:61:4F:D9:50:5E:41:42:2C:1B:95:11:FD:13:56:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl X509v3 Authority Key Identifier: keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer sbgp-ipAddrBlock: critical IPv4: 192.153.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:be:31:47:02:36:02:7f:b2:b2:a5:3e:2b:f9:a4:c3:f9:89: 9d:a8:bf:ea:cd:2b:f1:fb:4f:f6:a2:92:4f:aa:d3:88:fb:78: a7:aa:b7:71:2a:63:1d:d0:f0:11:6b:d5:37:0a:b7:10:f7:93: e3:f9:24:f2:96:38:7e:62:cf:45:40:06:f5:76:f5:91:74:b4: 18:19:71:09:9f:32:65:ab:a2:0c:c6:48:5a:54:41:a7:4e:6d: e0:ad:04:49:77:55:e0:09:1f:a0:71:5d:3b:30:0f:58:e2:cc: 92:cf:56:d9:4a:ad:3b:a2:f7:93:06:bd:4b:61:c7:2b:40:88: 7c:66:ab:a0:50:ee:a8:7b:98:35:58:46:99:07:cd:12:b3:68: 3d:aa:5e:13:e7:e4:58:85:2a:83:52:4e:b9:37:0e:c6:20:ee: a0:03:6d:97:cd:a3:96:6d:be:bf:9a:ae:43:8f:dc:cf:28:02: 71:89:66:74:4a:87:b3:a4:3a:f7:07:eb:c0:57:9d:fb:00:0e: 63:b3:09:39:d0:5b:18:93:dc:ca:5f:f6:76:cf:42:4e:c5:70: 7e:1d:f0:ba:fd:0b:17:7f:ab:90:cd:99:fa:2a:53:6c:ac:6b: b7:1c:59:a8:1b:44:71:1f:b3:a2:f5:fd:25:29:5f:a6:ee:11: ca:7b:47:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dK759ptQA0pm6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyYWEyZGItMzcxNC00MjAwLWI0ODAtNDY5YjQ5ZWJl ZGI5MB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk MjdjZmZjYjQtMGU3Yy00ZDljLTkyNDItOTUxY2Q2M2U1MzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8Y1YYLnsmG+tB0qa1bUbp4sGGExHzP05Kqu 4Q9fwTSbTWZbPsDNJr556vFdsUNdcQbc/6ePkDtbjoedmDXhgy6MEQyi6Ockd0WR t0R+yH6URMNF2GXLLdbn3UPBHba5ksq/Ew/k82T4wY4oQZ3gLhX+mLXpNuJs8IYp Ktp1CUHQ/L0gX89+EngonZOnkLx282swp73LolkRhF3pIKHDDGWKZPV4Aru3dqWG IAR1YxgLMND+3ork9ACHp69FVZ8vJkbUJu/xaQYD7Ud2MOI1OoCjO66vdUgDgvn1 dA+z3SEo1G7Kmil5dWR/6DDk8saBgCOhW+L0tDE3ct+1QIrTRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOonRo0PYU/ZUF5BQiwblRH9E1a/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTJh YTJkYi0zNzE0LTQyMDAtYjQ4MC00NjliNDllYmVkYjkvMzFiMTAyNmEtMDJmNy0z ZmI5LWFkYzMtMDE3ZjljMTNmNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUyYWEyZGItMzcxNC00MjAwLWI0 ODAtNDY5YjQ5ZWJlZGI5LzRlMmFhMmRiLTM3MTQtNDIwMC1iNDgwLTQ2OWI0OWVi ZWRiOS5jcmwwHwYDVR0jBBgwFoAUdzpMhBm28JKJNR/ATiGRU/G4Pe0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTJhYTJkYi0zNzE0LTQyMDAtYjQ4MC00Njli NDllYmVkYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJm7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS+MUcCNgJ/srKlPiv5pMP5iZ2ov+rNK/H7T/aikk+q04j7eKeqt3Eq Yx3Q8BFr1TcKtxD3k+P5JPKWOH5iz0VABvV29ZF0tBgZcQmfMmWrogzGSFpUQadO beCtBEl3VeAJH6BxXTswD1jizJLPVtlKrTui95MGvUthxytAiHxmq6BQ7qh7mDVY RpkHzRKzaD2qXhPn5FiFKoNSTrk3DsYg7qADbZfNo5Ztvr+arkOP3M8oAnGJZnRK h7OkOvcH68BXnfsADmOzCTnQWxiT3Mpf9nbPQk7FcH4d8Lr9Cxd/q5DNmfoqU2ys a7ccWagbRHEfs6L1/SUpX6buEcp7R+o= -----END CERTIFICATE-----Generated at Sun May 11 02:29:57 2025 by rpki-client