$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa File: 24587719-f7eb-3cb8-a957-e23dd29ef600.roa (raw, json) Hash identifier: EtU2z1CMMIdui7OFMJMOwOHTXf7cy+gnlei0plRpapo= Subject key identifier: 1C:96:00:C6:2F:2A:05:AF:2E:08:BE:C4:A0:D7:1F:26:51:81:03:33 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584A4C3B1A429B679A47E4E80080 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 400104 IP address blocks: 157.185.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1a:42:9b:67:9a:47:e4:e8:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=e23d2e9e-cb20-46d6-b590-85466da3d351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:d8:3f:ca:3b:e5:70:74:02:ea:66:ff:38: d3:51:74:6b:71:89:f1:57:84:f5:b9:f5:93:e6:e3: 6f:2d:da:95:3e:b0:27:19:15:7b:42:56:bf:0b:7e: 07:cd:a7:ab:20:27:8c:f3:6f:9c:da:76:5d:38:5c: 68:9f:c9:74:9e:93:93:6b:50:a9:9b:26:be:22:83: ce:7c:5a:d2:2b:99:8a:12:6e:7b:f4:5d:bf:ad:4c: 26:80:7f:09:a9:4b:b5:6c:4c:0c:3e:5b:40:80:53: 01:78:3f:91:54:ae:c5:ee:f4:5e:0e:52:0e:3e:9a: 30:32:e6:df:3a:63:ad:2e:9a:3f:6d:aa:be:f2:94: eb:1d:a3:99:54:da:1c:c3:94:31:06:90:4f:d2:5d: 97:68:a8:4b:c7:ab:f4:8d:63:ae:c6:a9:40:a9:a2: ee:54:8d:38:37:c0:8f:a2:e0:53:a2:0b:69:09:4d: 40:87:4f:98:63:f4:04:08:c0:f2:0c:7d:6e:1e:8f: 3a:bc:de:66:2d:31:21:1c:1c:c4:05:ae:83:0a:67: cb:34:50:18:d0:e2:46:26:3b:87:72:df:91:f6:bd: 45:de:cc:fe:f7:a0:1e:d1:47:da:bf:bd:f2:5d:3a: 55:f9:52:08:91:82:b6:f9:e3:3c:84:6f:78:c1:05: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:00:C6:2F:2A:05:AF:2E:08:BE:C4:A0:D7:1F:26:51:81:03:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c3:cc:63:bf:93:48:6d:84:38:31:92:77:82:6a:ea:7a:20: b7:3c:8c:94:e4:60:4f:37:09:47:b2:cf:52:4e:6b:fa:75:d7: cb:e5:fd:8f:fa:2f:63:03:61:96:52:2b:5e:ed:ff:70:5e:c5: f6:87:14:2d:ec:b8:71:64:86:69:63:14:66:c1:1d:e0:85:dd: e4:28:7d:31:9c:2d:49:3d:0a:dd:00:c2:54:88:79:d9:be:32: a2:6b:34:f4:35:8c:ca:4e:ee:69:52:4b:62:11:93:eb:f6:57: a3:16:df:6b:0e:79:81:77:11:f5:ec:d1:b2:5d:69:c3:51:6e: 33:33:9e:7a:2b:65:84:22:2c:bf:bf:de:6e:64:a7:52:6d:4b: 29:85:6a:97:db:50:c2:72:df:13:65:9a:10:48:f1:3d:da:62: 67:d1:83:91:ce:ef:25:db:1b:2a:f8:1e:60:13:dc:73:e1:1e: 6a:1b:df:c6:1f:4b:33:4c:89:34:54:74:be:3e:84:a2:87:89: d9:f9:77:ff:35:42:21:20:98:aa:0a:0e:91:5a:00:ba:91:6c: 1c:06:f0:7f:31:85:26:8b:cd:5b:5a:f5:0f:24:50:3b:5c:42: dc:29:f1:40:70:78:3a:bb:bc:d3:79:e0:06:99:59:4f:96:a3: cb:89:8b:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxpCm2eaR+ToAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZTIzZDJlOWUtY2IyMC00NmQ2LWI1OTAtODU0NjZkYTNkMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/rYP8o75XB0Aupm/zjTUXRrcYnxV4T1ufWT 5uNvLdqVPrAnGRV7Qla/C34HzaerICeM82+c2nZdOFxon8l0npOTa1Cpmya+IoPO fFrSK5mKEm579F2/rUwmgH8JqUu1bEwMPltAgFMBeD+RVK7F7vReDlIOPpowMubf OmOtLpo/baq+8pTrHaOZVNocw5QxBpBP0l2XaKhLx6v0jWOuxqlAqaLuVI04N8CP ouBTogtpCU1Ah0+YY/QECMDyDH1uHo86vN5mLTEhHBzEBa6DCmfLNFAY0OJGJjuH ct+R9r1F3sz+96Ae0Ufav73yXTpV+VIIkYK2+eM8hG94wQXWTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByWAMYvKgWvLgi+xKDXHyZRgQMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjQ1ODc3MTktZjdlYi0z Y2I4LWE5NTctZTIzZGQyOWVmNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjDzGO/k0hthDgxkneCaup6ILc8jJTkYE83CUeyz1JOa/p118vl/Y/6 L2MDYZZSK17t/3BexfaHFC3suHFkhmljFGbBHeCF3eQofTGcLUk9Ct0AwlSIedm+ MqJrNPQ1jMpO7mlSS2IRk+v2V6MW32sOeYF3EfXs0bJdacNRbjMznnorZYQiLL+/ 3m5kp1JtSymFapfbUMJy3xNlmhBI8T3aYmfRg5HO7yXbGyr4HmAT3HPhHmob38Yf SzNMiTRUdL4+hKKHidn5d/81QiEgmKoKDpFaALqRbBwG8H8xhSaLzVta9Q8kUDtc Qtwp8UBweDq7vNN54AaZWU+Wo8uJi+I= -----END CERTIFICATE-----Generated at Sun Jun 29 12:39:10 2025 by rpki-client