$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa File: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (raw, json) Hash identifier: QjA0EFrIZGVT7yzV3MKVFAbb3TF7+NA8MGW8WvPXQAs= Subject key identifier: FE:29:F1:2E:8B:47:5D:EB:6E:EA:53:96:A3:76:B5:CF:FF:65:8E:C0 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584949FEB27A5A518942DE7C6770 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 63293 IP address blocks: 157.240.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:b2:7a:5a:51:89:42:de:7c:67:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=5d81d768-7d51-4a42-9daf-7061575ccb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d6:79:b9:7a:ff:87:52:20:93:35:11:e2:63: 71:e2:8e:42:a6:aa:6f:cf:bb:d0:c1:8a:c3:47:4a: c8:d9:f7:6c:85:04:7a:7f:e8:85:aa:31:88:56:fe: f8:a6:fe:ef:b8:0d:01:be:7b:88:4b:64:ab:38:c4: d0:fe:b2:04:74:db:96:81:a9:55:7e:71:8a:f5:c2: e6:b2:c3:bb:11:2e:08:51:01:fe:fa:c4:06:5e:da: 79:c5:f9:4f:33:3b:4f:95:8a:d1:16:b4:89:bf:c4: ee:0a:a4:fe:76:78:d7:6d:76:be:2e:ac:a0:14:7b: b7:86:fb:ac:0a:87:e9:07:87:f4:73:7b:c1:64:a9: 0a:28:f4:97:c7:c3:a5:e2:80:92:e3:48:be:9d:03: 62:2a:2c:16:4c:cd:78:40:d0:f2:a0:bd:01:4a:2e: 97:4b:c2:71:58:31:d0:ed:8d:d4:03:fa:e1:a5:e7: d1:40:4b:43:97:bd:17:63:2d:98:a6:49:83:83:11: fb:c4:25:d9:f8:a9:40:f0:7d:fa:4b:7c:5d:33:ab: 65:46:bd:98:3f:dc:13:a9:ec:d1:02:fb:9d:56:36: b9:c8:c9:cf:22:99:18:30:57:ff:f5:f1:1e:63:cb: 32:e3:dc:25:ec:83:58:eb:37:81:52:c9:45:8c:ec: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:29:F1:2E:8B:47:5D:EB:6E:EA:53:96:A3:76:B5:CF:FF:65:8E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:57:aa:46:72:79:c0:18:c8:e1:e5:83:d6:8c:21:f7:51:20: 13:f7:ca:76:3f:e1:8c:fa:6a:37:10:6e:03:87:e7:3e:43:25: b6:29:23:6b:1c:e7:cc:43:7f:ec:68:1d:ab:6f:00:e5:93:30: 6c:96:1d:4b:cc:a1:14:b4:8d:59:85:9a:95:40:bb:1c:62:e2: 17:03:30:ab:2c:ee:ac:c4:c8:53:46:9e:47:ad:26:ca:c5:89: fa:f3:de:b9:48:3f:64:52:35:29:fc:67:e2:bf:7c:8d:aa:8d: 21:3c:da:7f:5f:1e:fb:fa:65:88:dc:69:63:5a:25:b6:6a:1f: b5:c4:e7:a7:41:1c:0e:e9:c0:2b:12:28:29:b3:61:d0:10:87: cd:c9:99:3a:0e:2d:e6:47:e1:2e:7b:e9:16:c2:05:3b:ba:4b: 14:8b:2c:4b:2c:fd:87:60:69:37:d6:4e:b0:f3:b1:1f:e0:a8: 8b:fa:b1:18:75:11:66:73:01:ac:7e:07:98:e1:e0:19:58:8c: 32:12:4b:49:42:41:a0:82:bb:aa:a2:2a:e6:f8:75:bb:50:e2: d7:c6:83:38:17:b7:76:20:28:d2:2d:3f:f5:a4:43:fd:ac:59: 9a:7c:25:17:b2:53:00:84:f4:64:c6:ca:64:d2:a4:54:16:04: a5:72:26:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/rJ6WlGJQt58Z3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NWQ4MWQ3NjgtN2Q1MS00YTQyLTlkYWYtNzA2MTU3NWNjYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNZ5uXr/h1IgkzUR4mNx4o5Cpqpvz7vQwYrD R0rI2fdshQR6f+iFqjGIVv74pv7vuA0BvnuIS2SrOMTQ/rIEdNuWgalVfnGK9cLm ssO7ES4IUQH++sQGXtp5xflPMztPlYrRFrSJv8TuCqT+dnjXbXa+LqygFHu3hvus CofpB4f0c3vBZKkKKPSXx8Ol4oCS40i+nQNiKiwWTM14QNDyoL0BSi6XS8JxWDHQ 7Y3UA/rhpefRQEtDl70XYy2YpkmDgxH7xCXZ+KlA8H36S3xdM6tlRr2YP9wTqezR AvudVja5yMnPIpkYMFf/9fEeY8sy49wl7INY6zeBUslFjOwlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4p8S6LR13rbupTlqN2tc//ZY7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMTMxYzJjMjAtNmZjNy0z ZWU0LWFjYmYtZGI5NDJmZDFkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1XqkZyecAYyOHlg9aMIfdRIBP3ynY/4Yz6ajcQbgOH5z5DJbYpI2sc 58xDf+xoHatvAOWTMGyWHUvMoRS0jVmFmpVAuxxi4hcDMKss7qzEyFNGnketJsrF ifrz3rlIP2RSNSn8Z+K/fI2qjSE82n9fHvv6ZYjcaWNaJbZqH7XE56dBHA7pwCsS KCmzYdAQh83JmToOLeZH4S576RbCBTu6SxSLLEss/YdgaTfWTrDzsR/gqIv6sRh1 EWZzAax+B5jh4BlYjDISS0lCQaCCu6qiKub4dbtQ4tfGgzgXt3YgKNItP/WkQ/2s WZp8JReyUwCE9GTGymTSpFQWBKVyJh8= -----END CERTIFICATE-----Generated at Sat May 10 08:19:37 2025 by rpki-client