$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa File: e21944ab-ea3d-350f-abf2-e875e5f58e73.roa (raw, json) Hash identifier: h3eJPNIy+bc8BWVMSdFXCGiBtIdM/II0nK3E0VJ4SEY= Subject key identifier: FE:36:D9:68:AA:5E:AE:0A:81:69:AE:BA:C5:97:20:3C:D1:1D:79:97 Certificate issuer: /CN=0abec8f8-ce42-427b-82b4-7accd51f9db8 Certificate serial: 010D0C9F432858487FB5DAC8AC1D14083F646D80 Authority key identifier: B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 142.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:da:c8:ac:1d:14:08:3f:64:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0abec8f8-ce42-427b-82b4-7accd51f9db8 Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=4f420eff-0ef4-4883-910a-c63dd1a6c2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:19:77:2e:02:6f:a5:f3:0e:c0:e4:84:c9:85: a3:03:1a:0d:1f:aa:15:0d:77:4a:31:79:85:45:e5: bc:93:2b:ca:e7:72:6a:64:f3:5a:77:1e:48:d5:36: 38:47:e5:66:27:bc:7f:ce:b3:20:a9:17:35:5d:f8: 7a:41:c1:5b:56:4e:6d:50:c3:7d:bd:57:cb:9b:09: 5e:fd:80:c0:52:14:04:ed:c9:22:80:5f:f5:59:44: 23:29:1a:eb:da:72:ce:b5:dd:8b:36:ef:f1:4e:bd: 3b:96:48:4a:ea:fd:f3:6c:b9:8e:0f:d5:b7:63:26: 8a:41:af:ac:77:3c:51:c7:75:52:fc:e6:4a:c2:dd: 07:58:46:71:87:8c:3b:b6:13:38:12:e2:b9:1d:b3: 92:14:fd:4b:65:68:36:13:c2:16:30:88:aa:df:17: 78:01:15:21:bc:93:47:cd:1b:ce:2a:96:56:f9:e0: d3:ae:87:07:b8:26:2f:69:e2:a8:4a:0e:8d:9e:4d: 07:92:15:21:63:11:c8:67:cd:37:44:54:74:32:ad: d3:ed:ea:94:cb:e3:b1:49:06:2f:aa:33:f2:d9:0f: c7:0e:de:57:b6:50:e6:4b:ba:27:b3:bc:82:58:f2: f8:5a:c4:fc:5a:a4:e1:e8:d3:a9:7e:2a:c0:64:90: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:36:D9:68:AA:5E:AE:0A:81:69:AE:BA:C5:97:20:3C:D1:1D:79:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl X509v3 Authority Key Identifier: keyid:B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer sbgp-ipAddrBlock: critical IPv4: 142.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:54:ac:7f:0c:d5:45:83:27:59:14:57:c5:9d:90:43:10:4f: 52:41:99:6a:df:b2:08:0a:63:de:a5:d1:d1:16:94:59:b8:7a: 12:1a:73:64:92:0d:44:52:1d:09:11:4a:01:21:8e:1f:32:fd: e9:34:10:45:42:7d:71:6c:ba:79:c5:d6:bf:6a:8b:07:64:63: db:95:58:16:ce:f2:da:98:86:2a:52:96:6e:5d:aa:59:59:68: 89:d1:85:24:2b:1c:e4:5a:1a:1a:2b:dc:70:6f:d2:27:c0:8c: 61:46:45:bb:b8:60:e8:2c:a6:28:60:5b:e4:e1:5a:e4:c4:8d: f4:bc:7c:09:ec:d7:4f:b3:b0:19:29:54:68:97:49:a6:83:ce: 9b:e0:63:32:be:3d:24:d2:dc:32:8d:4c:1b:9b:f4:7c:c2:d3: 47:d5:a0:29:f1:69:a0:69:8d:3e:6e:03:f7:1d:14:4f:8f:8f: bf:4a:7e:e9:bb:cf:aa:20:9e:e7:c4:3d:b4:38:96:15:de:b5: cf:ab:8a:49:97:3e:ff:08:c0:39:f2:ff:d3:a1:46:2f:47:e3: d1:ea:18:cc:9f:ae:dc:95:d0:7f:23:e4:7f:3f:e2:9b:45:e9: 39:15:c5:f4:fe:eb:5f:bd:f2:00:80:8c:7f:d6:eb:ec:c0:a0: 17:23:1a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdrIrB0UCD9kbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiZWM4ZjgtY2U0Mi00MjdiLTgyYjQtN2FjY2Q1MWY5 ZGI4MB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk NGY0MjBlZmYtMGVmNC00ODgzLTkxMGEtYzYzZGQxYTZjMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBl3LgJvpfMOwOSEyYWjAxoNH6oVDXdKMXmF ReW8kyvK53JqZPNadx5I1TY4R+VmJ7x/zrMgqRc1Xfh6QcFbVk5tUMN9vVfLmwle /YDAUhQE7ckigF/1WUQjKRrr2nLOtd2LNu/xTr07lkhK6v3zbLmOD9W3YyaKQa+s dzxRx3VS/OZKwt0HWEZxh4w7thM4EuK5HbOSFP1LZWg2E8IWMIiq3xd4ARUhvJNH zRvOKpZW+eDTrocHuCYvaeKoSg6Nnk0HkhUhYxHIZ803RFR0Mq3T7eqUy+OxSQYv qjPy2Q/HDt5XtlDmS7ons7yCWPL4WsT8WqTh6NOpfirAZJBuewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP422WiqXq4KgWmuusWXIDzRHXmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYWJl YzhmOC1jZTQyLTQyN2ItODJiNC03YWNjZDUxZjlkYjgvZTIxOTQ0YWItZWEzZC0z NTBmLWFiZjItZTg3NWU1ZjU4ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGFiZWM4ZjgtY2U0Mi00MjdiLTgy YjQtN2FjY2Q1MWY5ZGI4LzBhYmVjOGY4LWNlNDItNDI3Yi04MmI0LTdhY2NkNTFm OWRiOC5jcmwwHwYDVR0jBBgwFoAUtKE8rvEnBIQDLhPV8VNvN16Y5vcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYWJlYzhmOC1jZTQyLTQyN2ItODJiNC03YWNj ZDUxZjlkYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtUrH8M1UWDJ1kUV8WdkEMQT1JBmWrfsggKY96l0dEWlFm4ehIac2SS DURSHQkRSgEhjh8y/ek0EEVCfXFsunnF1r9qiwdkY9uVWBbO8tqYhipSlm5dqllZ aInRhSQrHORaGhor3HBv0ifAjGFGRbu4YOgspihgW+ThWuTEjfS8fAns10+zsBkp VGiXSaaDzpvgYzK+PSTS3DKNTBub9HzC00fVoCnxaaBpjT5uA/cdFE+Pj79Kfum7 z6ognufEPbQ4lhXetc+rikmXPv8IwDny/9OhRi9H49HqGMyfrtyV0H8j5H8/4ptF 6TkVxfT+61+98gCAjH/W6+zAoBcjGrk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:14 2025 by rpki-client