$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/ad2d21e1-f4ad-3265-9fda-66f9a0b46d48.roa File: ad2d21e1-f4ad-3265-9fda-66f9a0b46d48.roa (raw, json) Hash identifier: PgW9hdF4ZfOmaDZ/c6FVr5jPOnSsK+ktmPaSv9OCKpo= Subject key identifier: F8:29:B9:04:93:9A:FE:0E:6B:0B:FB:C9:F0:60:CC:A0:73:69:42:3E Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Certificate serial: 010D0C9F43285849C36F7B398D81AD2099034300 Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/ad2d21e1-f4ad-3265-9fda-66f9a0b46d48.roa Signing time: Tue 06 May 2025 13:01:01 +0000 ROA not before: Tue 06 May 2025 13:01:01 +0000 ROA not after: Mon 04 Aug 2025 13:01:01 +0000 asID: 11032 IP address blocks: 192.139.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:6f:7b:39:8d:81:ad:20:99:03:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Validity Not Before: May 6 13:01:01 2025 GMT Not After : Aug 4 13:01:01 2025 GMT Subject: CN=11752d97-69fb-45c6-a49b-3940d546e28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:4c:45:28:53:ea:2e:f3:35:15:f7:60:4a: 57:66:27:e0:bf:80:ff:72:b5:31:98:3e:20:f7:42: ec:95:64:0f:3a:87:4d:39:2b:66:b5:4d:ed:f2:52: cc:87:d3:4e:69:83:31:f6:60:86:16:d3:60:4f:69: 57:f5:6c:5e:83:54:ab:6c:48:f3:50:7f:e6:60:3a: 73:75:e9:8c:1e:35:de:0e:b0:72:8d:f5:8c:bb:04: 61:6b:bb:a6:d7:e2:ec:27:f7:50:18:aa:a4:84:62: 74:48:0d:ad:c2:be:f9:1d:76:05:c2:48:4b:b1:d2: 24:a2:3b:9c:f2:c7:f6:5c:1b:48:43:f6:20:c4:17: 35:ae:df:2a:3d:77:c9:44:15:a6:fe:51:71:12:4b: 1e:56:1c:c5:d1:db:dc:71:d5:29:e0:74:83:17:a4: 5f:7d:a6:7f:26:7f:d9:a7:f7:82:ce:b6:c9:43:70: bb:ca:ff:0d:5b:76:d1:5c:99:f3:9f:ca:1f:9c:45: 87:cd:27:b1:81:8c:03:97:cd:ec:51:d8:f2:16:4f: e9:84:5d:9f:49:88:4d:9b:c7:8c:f4:4e:41:60:7d: b8:b6:aa:e9:59:1c:87:87:88:70:d6:4b:55:97:dd: 33:56:44:58:b2:bd:49:57:97:c2:26:98:cd:fb:0b: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:29:B9:04:93:9A:FE:0E:6B:0B:FB:C9:F0:60:CC:A0:73:69:42:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/ad2d21e1-f4ad-3265-9fda-66f9a0b46d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl X509v3 Authority Key Identifier: keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer sbgp-ipAddrBlock: critical IPv4: 192.139.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:89:cc:7b:b6:de:20:aa:b7:44:75:c2:a6:98:d4:94:b4:31: a5:ba:8e:56:05:af:9c:a9:8c:27:46:e3:11:98:fd:13:07:c1: 40:5f:d8:43:68:6d:27:9b:7f:88:c4:f6:c5:b7:6f:fc:db:dc: 84:e8:d8:f6:e7:2a:e7:1d:4a:93:b9:3a:25:8d:fb:7f:96:b6: 87:ac:f2:b8:0b:9d:46:e2:8c:50:cc:a6:68:cb:80:12:30:dc: eb:7d:b6:58:fc:3f:56:cd:a4:1b:a9:59:ba:65:d5:df:1e:22: b1:0d:95:c7:49:8f:9e:97:b6:83:19:98:58:8c:bf:53:29:84: 9b:7a:1f:4f:60:75:d6:ff:e6:35:04:95:fe:59:78:80:93:63: c7:df:ff:f7:1a:6a:99:13:e4:ea:e3:f4:1d:f1:76:58:8b:67: a3:18:9a:85:75:37:c0:e7:b5:0e:72:90:be:3e:ee:11:b7:44: a9:70:87:fe:0d:a7:e3:47:73:ca:dd:2c:a4:c2:da:b2:4c:a2: 72:95:b3:d2:38:0a:46:18:1d:6e:42:77:ba:5d:2a:0a:57:1f: b2:3e:7f:31:0f:e1:a5:05:c6:b7:ca:43:14:c5:c5:83:d7:3c: 65:78:72:4f:ff:6e:aa:65:40:f4:60:0f:67:60:0b:e4:62:67: bd:09:a6:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb3s5jYGtIJkDQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi NzIxMB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk MTE3NTJkOTctNjlmYi00NWM2LWE0OWItMzk0MGQ1NDZlMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSdMRShT6i7zNRX3YEpXZifgv4D/crUxmD4g 90LslWQPOodNOStmtU3t8lLMh9NOaYMx9mCGFtNgT2lX9Wxeg1SrbEjzUH/mYDpz demMHjXeDrByjfWMuwRha7um1+LsJ/dQGKqkhGJ0SA2twr75HXYFwkhLsdIkojuc 8sf2XBtIQ/YgxBc1rt8qPXfJRBWm/lFxEkseVhzF0dvccdUp4HSDF6RffaZ/Jn/Z p/eCzrbJQ3C7yv8NW3bRXJnzn8ofnEWHzSexgYwDl83sUdjyFk/phF2fSYhNm8eM 9E5BYH24tqrpWRyHh4hw1ktVl90zVkRYsr1JV5fCJpjN+wvsvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgpuQSTmv4Oawv7yfBgzKBzaUI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1 OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvYWQyZDIxZTEtZjRhZC0z MjY1LTlmZGEtNjZmOWEwYjQ2ZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5 ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3 YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeJzHu23iCqt0R1wqaY1JS0MaW6jlYFr5ypjCdG4xGY/RMHwUBf2ENo bSebf4jE9sW3b/zb3ITo2PbnKucdSpO5OiWN+3+Wtoes8rgLnUbijFDMpmjLgBIw 3Ot9tlj8P1bNpBupWbpl1d8eIrENlcdJj56XtoMZmFiMv1MphJt6H09gddb/5jUE lf5ZeICTY8ff//caapkT5Orj9B3xdliLZ6MYmoV1N8DntQ5ykL4+7hG3RKlwh/4N p+NHc8rdLKTC2rJMonKVs9I4CkYYHW5Cd7pdKgpXH7I+fzEP4aUFxrfKQxTFxYPX PGV4ck//bqplQPRgD2dgC+RiZ70JpnU= -----END CERTIFICATE-----Generated at Wed May 7 07:39:29 2025 by rpki-client