$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa File: d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa (raw, json) Hash identifier: /+npMqP4gDz1t0nSavuQC8E/tlxc06fAfJLBi3v3LNw= Subject key identifier: 21:8F:0F:80:C2:CB:DC:5A:5D:DB:DA:E6:AA:F2:D1:11:97:34:71:6B Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F43285848EF6158D096A7D9DCF7224E40 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 62707 IP address blocks: 142.202.192.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:58:d0:96:a7:d9:dc:f7:22:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=cf9e6edc-0880-4bb6-ab6a-50236b73881f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:20:ec:9c:0e:e1:51:d6:2a:da:95:19:09: 47:36:76:75:9e:bd:84:93:18:c1:9f:e1:b8:09:cf: 12:3e:87:bf:bd:ac:49:e8:1e:e7:53:5a:ca:83:51: d4:f8:4d:51:7a:6d:10:eb:10:a1:14:62:ce:77:84: 2d:9d:53:43:7c:7b:65:0d:0e:94:b2:0f:30:88:b2: ea:ef:49:d0:77:7e:86:e7:7a:ee:11:b4:ff:e2:97: 0f:7c:b3:e0:b1:25:1a:50:82:64:b7:b0:ab:87:f6: a1:2e:6d:ea:1a:0b:1c:d8:58:8c:55:49:3f:1f:04: 0c:59:9f:83:4b:2c:2c:e9:6e:1c:d2:a8:16:bc:56: fa:b8:89:ed:06:06:03:86:64:e4:0b:b2:6c:fa:94: 18:09:5b:bc:e8:d1:05:dc:c5:a4:ca:51:bc:a4:51: ea:10:39:04:a6:a5:0f:6a:6b:26:7a:d0:db:af:9a: d3:8d:f3:57:af:94:72:44:0f:71:0d:32:38:ef:35: 45:c7:dd:ae:fe:26:eb:78:3c:20:6f:79:57:ae:f6: 8a:72:32:43:ea:31:c2:d4:57:1c:c9:87:f6:7d:fb: b4:f1:c9:32:7c:ec:bb:a0:58:5c:80:35:b6:73:ee: e4:54:cf:4a:29:01:42:6a:99:61:d9:76:3d:84:33: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8F:0F:80:C2:CB:DC:5A:5D:DB:DA:E6:AA:F2:D1:11:97:34:71:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 142.202.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:47:08:22:fd:9a:34:37:e1:ab:a7:1a:f9:8f:25:b4:18:18: e5:f1:c0:3b:91:f5:7f:f1:28:64:ca:bc:92:fe:35:da:46:72: 20:c4:62:f0:93:26:22:09:c3:d2:e7:e9:4d:7c:c6:b7:28:94: 70:bb:1c:d6:98:79:e8:c3:66:2d:f5:78:87:b0:85:cb:57:c7: 5c:b0:d8:4f:5a:ad:02:39:ba:c8:48:02:43:28:41:63:90:5a: b4:93:03:5f:75:74:85:10:2f:06:3f:db:c9:7f:f7:b8:f6:de: ea:ff:14:82:f2:d4:6d:e5:f1:6f:80:92:5f:12:8a:2e:0f:54: a8:67:ca:02:87:d8:57:39:1f:0b:ee:2a:27:33:eb:19:ad:c8: c5:e3:6a:84:73:1d:63:f8:3a:9d:f8:f3:22:a1:ba:69:28:1c: a6:ed:29:8c:a3:38:6c:78:4c:29:2b:46:03:60:9f:a8:91:76: de:81:db:6d:40:40:de:01:54:f3:8e:8f:bc:a1:bc:16:2e:d9: 16:5c:31:d2:da:fa:62:a3:42:88:f4:e3:eb:d1:5b:f4:90:d7: 7c:58:90:f6:c1:68:ac:f4:34:52:24:2f:3b:3e:7e:e9:51:e4: 25:35:e1:fa:ba:34:70:8e:f5:40:a3:31:1c:d2:cf:f9:bd:2f: 4f:61:34:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVjQlqfZ3PciTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk Y2Y5ZTZlZGMtMDg4MC00YmI2LWFiNmEtNTAyMzZiNzM4ODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Ag7JwO4VHWKtqVGQlHNnZ1nr2EkxjBn+G4 Cc8SPoe/vaxJ6B7nU1rKg1HU+E1Rem0Q6xChFGLOd4QtnVNDfHtlDQ6Usg8wiLLq 70nQd36G53ruEbT/4pcPfLPgsSUaUIJkt7Crh/ahLm3qGgsc2FiMVUk/HwQMWZ+D Syws6W4c0qgWvFb6uIntBgYDhmTkC7Js+pQYCVu86NEF3MWkylG8pFHqEDkEpqUP amsmetDbr5rTjfNXr5RyRA9xDTI47zVFx92u/ibreDwgb3lXrvaKcjJD6jHC1Fcc yYf2ffu08ckyfOy7oFhcgDW2c+7kVM9KKQFCaplh2XY9hDNbpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGPD4DCy9xaXdva5qry0RGXNHFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvZDBlNDRlMmQtNjkxNy0z YmE2LWE0YWYtNWE5MDcxNjQ2MmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJHCCL9mjQ34aunGvmPJbQYGOXxwDuR9X/xKGTKvJL+NdpGciDEYvCT JiIJw9Ln6U18xrcolHC7HNaYeejDZi31eIewhctXx1yw2E9arQI5ushIAkMoQWOQ WrSTA191dIUQLwY/28l/97j23ur/FILy1G3l8W+Akl8Sii4PVKhnygKH2Fc5Hwvu Kicz6xmtyMXjaoRzHWP4Op348yKhumkoHKbtKYyjOGx4TCkrRgNgn6iRdt6B221A QN4BVPOOj7yhvBYu2RZcMdLa+mKjQoj04+vRW/SQ13xYkPbBaKz0NFIkLzs+fulR 5CU14fq6NHCO9UCjMRzSz/m9L09hNH0= -----END CERTIFICATE-----Generated at Sat Apr 5 09:47:31 2025 by rpki-client