$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa File: 09e21013-7b4b-34c1-82cf-d3a46658b996.roa (raw, json) Hash identifier: qhEhtOHhVFZpUKNhLWSpIvpbS7zrh4H4ZugktVb/rrE= Subject key identifier: 6D:1F:52:66:D6:B4:87:CE:CD:07:E3:32:BD:54:89:D1:A5:31:C8:14 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285848F92690AACD83FEDB2F010100 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 143.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:90:aa:cd:83:fe:db:2f:01:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=4fd0135d-d215-4242-9d21-b0cde2dc5714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:e1:75:b1:6e:85:28:e9:58:4d:ac:87:93: a4:39:be:f6:e6:3b:7e:b2:77:e9:f8:40:2d:01:be: a6:1b:d9:ae:8b:be:0e:94:f5:09:94:57:25:72:3f: ba:75:9e:9e:fe:a0:f9:c9:8e:58:58:28:5f:1b:e5: 87:7d:7d:3e:d6:d0:e8:8e:58:30:c3:fc:fd:85:80: 60:da:d1:fe:76:57:90:77:7f:55:ad:1b:ef:c2:f2: e7:a7:c1:bf:89:b9:97:99:82:02:0b:c6:f8:f5:fb: 55:1b:b3:dc:5c:6c:6b:95:1c:4f:bf:5d:ea:c5:43: 7f:18:fa:ab:cb:42:97:d0:a6:db:df:75:09:12:c3: 9d:75:92:48:af:69:d6:9e:6f:93:60:d0:b1:98:53: 4d:c2:e6:93:d4:00:69:6e:5d:68:01:f0:38:6f:b4: be:9c:31:2b:3f:64:65:f9:95:20:c3:04:d9:c4:b5: 18:35:01:7c:e5:9e:cb:21:ec:eb:5e:52:28:a0:d0: e3:1e:26:c4:d8:7d:be:39:42:a4:21:22:4d:95:79: e5:7c:45:83:f8:e6:28:94:34:8e:26:ff:55:c4:c2: bd:03:0a:e7:98:ad:2b:f1:1c:15:95:fe:de:f1:1e: 97:d8:65:dd:6c:85:5a:a1:64:e2:63:60:2e:97:63: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1F:52:66:D6:B4:87:CE:CD:07:E3:32:BD:54:89:D1:A5:31:C8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d1:d1:a5:7c:e7:19:2b:4a:66:b3:f4:6e:2d:6e:6c:a6:94: 30:51:8a:b2:32:d9:6e:ea:92:c0:96:db:86:45:9c:f9:98:15: ad:fb:dc:e5:1f:1a:3b:15:97:3a:80:03:1e:08:10:13:21:b7: cf:0c:fa:a8:e8:2c:78:37:26:61:c3:29:ce:21:0f:85:83:19: fd:31:6f:e5:27:8d:cb:79:24:9b:f0:b1:4c:40:8b:79:ed:f7: c7:7e:83:52:ac:59:7a:34:5d:42:a3:7a:be:f8:eb:0c:43:08: 68:20:cd:7e:de:5d:86:63:7c:3f:9a:f5:3b:b3:a2:1d:51:cf: d2:d0:c7:61:09:68:dd:96:c1:62:87:85:00:28:d9:42:1f:1e: d9:43:80:90:b7:bd:e4:5b:74:f8:60:73:0c:2c:b3:0d:a5:95: 15:03:72:67:91:b2:f6:d9:91:f4:5d:72:0b:8a:c3:5b:01:04: 11:55:f5:0c:bb:28:6f:7b:27:85:d2:ee:83:48:14:a2:c8:c0: 49:e7:f5:20:c1:ed:f9:05:15:92:46:7e:88:72:4b:db:f5:cc: 4f:ca:26:f5:85:75:1c:cf:0d:76:ca:13:17:ef:e8:d0:21:c6: 50:23:d1:16:1d:ed:56:88:86:bb:d3:13:ff:5c:22:3e:4b:02: bc:38:c9:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpCqzYP+2y8BAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NGZkMDEzNWQtZDIxNS00MjQyLTlkMjEtYjBjZGUyZGM1NzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhnhdbFuhSjpWE2sh5OkOb725jt+snfp+EAt Ab6mG9mui74OlPUJlFclcj+6dZ6e/qD5yY5YWChfG+WHfX0+1tDojlgww/z9hYBg 2tH+dleQd39VrRvvwvLnp8G/ibmXmYICC8b49ftVG7PcXGxrlRxPv13qxUN/GPqr y0KX0Kbb33UJEsOddZJIr2nWnm+TYNCxmFNNwuaT1ABpbl1oAfA4b7S+nDErP2Rl +ZUgwwTZxLUYNQF85Z7LIezrXlIooNDjHibE2H2+OUKkISJNlXnlfEWD+OYolDSO Jv9VxMK9AwrnmK0r8RwVlf7e8R6X2GXdbIVaoWTiY2Aul2Nj9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0fUmbWtIfOzQfjMr1UidGlMcgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDllMjEwMTMtN2I0Yi0z NGMxLTgyY2YtZDNhNDY2NThiOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7R0aV85xkrSmaz9G4tbmymlDBRirIy2W7qksCW24ZFnPmYFa373OUf GjsVlzqAAx4IEBMht88M+qjoLHg3JmHDKc4hD4WDGf0xb+Unjct5JJvwsUxAi3nt 98d+g1KsWXo0XUKjer746wxDCGggzX7eXYZjfD+a9Tuzoh1Rz9LQx2EJaN2WwWKH hQAo2UIfHtlDgJC3veRbdPhgcwwssw2llRUDcmeRsvbZkfRdcguKw1sBBBFV9Qy7 KG97J4XS7oNIFKLIwEnn9SDB7fkFFZJGfohyS9v1zE/KJvWFdRzPDXbKExfv6NAh xlAj0RYd7VaIhrvTE/9cIj5LArw4yQ4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:06 2025 by rpki-client