$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be1a3eb5-8091-3931-ad63-524754d4165f.roa File: be1a3eb5-8091-3931-ad63-524754d4165f.roa (raw, json) Hash identifier: pKI/IG9yJQRr20e+DpQsw8HHpEMarayDJK8BHEcZphI= Subject key identifier: 33:94:71:D9:E9:0C:C8:CA:D7:DE:A0:11:A2:F7:84:A8:38:CE:7F:B6 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F43285849213433910FFF2DEE20228738 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be1a3eb5-8091-3931-ad63-524754d4165f.roa Signing time: Sun 09 Mar 2025 10:20:41 +0000 ROA not before: Sun 09 Mar 2025 10:20:41 +0000 ROA not after: Sat 07 Jun 2025 10:20:41 +0000 asID: 398006 IP address blocks: 142.163.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:33:91:0f:ff:2d:ee:20:22:87:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:41 2025 GMT Not After : Jun 7 10:20:41 2025 GMT Subject: CN=c528accb-364f-4a03-b591-d44142dfe73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:ed:ab:89:27:85:20:c2:dd:ec:df:61:9d: 50:6d:11:12:02:37:f4:95:f8:04:2b:55:43:5c:01: 26:20:76:bf:f4:d7:10:e4:e7:b0:5c:44:42:92:e9: c1:96:b3:ff:69:16:30:1d:1e:fc:81:ca:b7:29:fe: c3:c6:4b:c9:d5:d9:54:ab:29:7c:eb:a9:dd:d4:20: 29:4a:81:90:83:7f:78:d9:d4:67:77:79:bf:c5:a0: 05:57:db:cc:8f:21:8e:e4:f6:ce:8c:8a:a4:06:92: 99:58:cd:c3:72:45:36:f5:2f:4a:93:32:95:5f:6c: f4:d6:19:89:cf:b9:29:e7:27:e9:c8:82:50:5e:4c: b9:d7:02:d3:41:ee:58:a8:12:f4:8a:b8:d4:8d:7d: c0:3a:eb:b3:37:90:a6:9c:4a:05:aa:25:e6:90:54: 7f:5a:fb:e1:f6:d9:7e:c4:0e:91:6d:df:d5:e1:dc: ae:a9:46:e4:57:a6:a5:45:f0:ac:22:9b:db:43:0a: 31:31:d7:18:cf:01:fd:74:ea:dd:cf:ff:56:31:2b: 9c:09:d3:f4:64:b8:53:bc:e9:30:32:2c:7f:e4:2d: a3:86:bc:c1:12:69:ee:da:64:48:31:b7:e7:3b:f6: 9f:38:03:de:bb:ba:56:5d:cf:ca:a4:87:ce:4d:cd: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:71:D9:E9:0C:C8:CA:D7:DE:A0:11:A2:F7:84:A8:38:CE:7F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be1a3eb5-8091-3931-ad63-524754d4165f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 142.163.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ed:39:a1:f0:26:88:1f:e9:f3:23:d8:58:69:cf:68:b3:51: bf:93:ad:32:76:8f:35:a7:8c:c3:26:f6:18:49:7f:48:c8:1b: 51:5a:c7:83:ff:5a:b6:03:27:8a:c3:90:16:5a:82:38:83:ab: 1c:5a:d1:cf:d1:bf:85:1b:de:73:86:ec:d5:34:04:2f:b6:35: 1b:15:40:4e:2a:19:c8:21:33:2f:c2:95:18:42:90:ff:4b:ed: d6:34:92:fb:8c:d9:a4:91:e6:5f:b7:92:78:97:83:8b:7f:35: 90:f6:d6:fa:2a:e5:1d:8e:19:58:f9:50:89:a2:9a:e4:c6:b8: 6f:5e:60:d0:14:03:58:9e:f7:08:c1:03:7d:a8:38:74:4b:9e: 47:9b:60:59:71:ab:a4:86:25:02:8b:66:e8:b1:83:c0:49:c6: fd:60:3d:4f:c4:81:99:5f:ca:22:67:bd:f2:0a:1a:ab:fd:25: 18:61:fa:fc:f3:37:8b:27:8c:06:16:7b:20:62:32:04:55:e1: ae:78:b3:c2:10:43:a3:9e:c9:00:d0:9b:7c:8b:a8:c5:db:da: ca:b0:ea:7b:b4:b1:62:d1:c4:d2:10:ff:5f:17:ff:5e:2f:a0: 68:1d:a3:81:61:b2:79:3f:8a:10:2b:3e:34:a6:e3:4d:df:b1: 27:e3:7e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNDORD/8t7iAihzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjA0MVoXDTI1MDYwNzEwMjA0MVowLzEtMCsGA1UEAxMk YzUyOGFjY2ItMzY0Zi00YTAzLWI1OTEtZDQ0MTQyZGZlNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEvtq4knhSDC3ezfYZ1QbRESAjf0lfgEK1VD XAEmIHa/9NcQ5OewXERCkunBlrP/aRYwHR78gcq3Kf7DxkvJ1dlUqyl866nd1CAp SoGQg3942dRnd3m/xaAFV9vMjyGO5PbOjIqkBpKZWM3DckU29S9KkzKVX2z01hmJ z7kp5yfpyIJQXky51wLTQe5YqBL0irjUjX3AOuuzN5CmnEoFqiXmkFR/Wvvh9tl+ xA6Rbd/V4dyuqUbkV6alRfCsIpvbQwoxMdcYzwH9dOrdz/9WMSucCdP0ZLhTvOkw Mix/5C2jhrzBEmnu2mRIMbfnO/afOAPeu7pWXc/KpIfOTc3CPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOUcdnpDMjK196gEaL3hKg4zn+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYmUxYTNlYjUtODA5MS0z OTMxLWFkNjMtNTI0NzU0ZDQxNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjqM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLtOaHwJogf6fMj2Fhpz2izUb+TrTJ2jzWnjMMm9hhJf0jIG1Fax4P/ WrYDJ4rDkBZagjiDqxxa0c/Rv4Ub3nOG7NU0BC+2NRsVQE4qGcghMy/ClRhCkP9L 7dY0kvuM2aSR5l+3kniXg4t/NZD21voq5R2OGVj5UImimuTGuG9eYNAUA1ie9wjB A32oOHRLnkebYFlxq6SGJQKLZuixg8BJxv1gPU/EgZlfyiJnvfIKGqv9JRhh+vzz N4snjAYWeyBiMgRV4a54s8IQQ6OeyQDQm3yLqMXb2sqw6nu0sWLRxNIQ/18X/14v oGgdo4Fhsnk/ihArPjSm403fsSfjfiQ= -----END CERTIFICATE-----Generated at Mon Apr 7 19:18:56 2025 by rpki-client