$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa File: c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa (raw, json) Hash identifier: G6DlMkDQR2Izm30T1kjWjMkkFCSyRFuAPuesoZFJZKc= Subject key identifier: F4:0B:59:BA:AE:96:EB:DB:D5:9F:62:E4:8F:CF:90:24:0D:9B:02:24 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584930DE60D538B9DA3F26C29900 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 63189 IP address blocks: 40.143.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:60:d5:38:b9:da:3f:26:c2:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=9439749e-dc33-4a9f-9bc7-147d5ad1cded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d8:b7:8f:cf:4f:fc:74:87:96:af:cd:05:da: 06:85:93:62:cf:18:a4:c6:03:17:37:da:dc:70:84: 7b:49:52:17:b9:0f:a7:77:5e:14:65:49:a5:6b:3c: 07:d6:25:b2:fa:cc:72:65:9f:56:aa:e5:d4:d2:54: e6:15:1c:23:4c:61:05:17:0d:aa:96:67:d6:8d:6f: a4:6a:b0:ff:88:81:cb:93:30:c4:25:9d:92:b6:5e: 4f:59:c4:93:41:59:7d:19:c2:1f:d9:0a:90:11:5f: 7c:56:e4:d7:4c:8c:62:1b:fc:d2:b7:ca:89:ea:0a: 69:9f:d0:56:4f:2b:70:76:4e:9d:1f:49:f2:2d:82: 3e:9c:f4:55:4f:07:a1:a5:c6:4f:55:d1:ea:b8:50: 72:60:8a:8a:94:55:98:76:87:d3:c1:81:2c:cd:7c: 0b:93:cb:bc:82:d7:b5:1d:71:8c:46:c6:63:f8:11: 64:fd:e9:a4:b3:f3:ed:2c:6a:93:a6:36:bc:10:3d: 7d:f8:0c:ca:e8:9f:d1:26:5c:db:4b:f1:77:5d:83: ec:93:76:00:4a:a5:c9:c4:58:a8:a5:95:10:b3:90: da:14:fa:36:0b:07:7c:a9:3b:b3:8a:5f:7a:40:d1: da:35:da:c3:87:a7:0b:66:7a:dd:ec:e2:74:dd:93: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0B:59:BA:AE:96:EB:DB:D5:9F:62:E4:8F:CF:90:24:0D:9B:02:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f8:93:92:b2:f0:73:0a:89:87:b3:a5:58:93:8c:c4:52:af: 34:98:6c:18:49:1a:6e:9c:b2:e9:47:b6:12:c5:08:54:bf:a7: 20:14:0a:02:be:af:60:08:ad:b8:8b:d8:e0:3f:b0:08:fb:44: 17:0b:49:50:e7:59:33:69:ca:0e:93:90:d3:60:cd:b6:0c:df: 09:72:1d:fa:ab:7d:e7:cf:cd:33:0c:09:dc:91:dc:4d:f4:17: 31:c6:d1:2c:f3:b9:41:db:11:80:2b:ff:6b:9f:18:97:67:db: 65:c8:4c:2b:9a:0e:c8:4d:5d:18:23:54:ae:cc:ab:5d:03:39: d0:65:d2:00:03:47:36:0c:9f:bc:0f:8f:81:67:0f:5f:85:56: d7:77:35:27:d4:96:3e:e6:1e:0a:0c:90:3d:41:ca:a5:4b:dc: bd:46:d4:01:a9:d5:99:04:20:c4:5d:80:48:f6:9c:cb:2c:76: a5:f1:e4:b2:6f:1a:1f:22:80:cb:d7:c9:58:95:d1:88:b0:43: 5d:47:94:a7:b5:a7:de:35:50:89:de:ed:31:ca:8a:4b:2d:5d: dc:c7:bd:ad:bc:27:6c:52:2d:ab:54:52:33:72:f4:44:2e:43: 04:ad:10:bd:79:8f:96:39:59:ff:e0:0a:86:20:1e:3e:1f:9a: 02:fb:a0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mDVOLnaPybCmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk OTQzOTc0OWUtZGMzMy00YTlmLTliYzctMTQ3ZDVhZDFjZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmti3j89P/HSHlq/NBdoGhZNizxikxgMXN9rc cIR7SVIXuQ+nd14UZUmlazwH1iWy+sxyZZ9WquXU0lTmFRwjTGEFFw2qlmfWjW+k arD/iIHLkzDEJZ2Stl5PWcSTQVl9GcIf2QqQEV98VuTXTIxiG/zSt8qJ6gppn9BW Tytwdk6dH0nyLYI+nPRVTwehpcZPVdHquFByYIqKlFWYdofTwYEszXwLk8u8gte1 HXGMRsZj+BFk/emks/PtLGqTpja8ED19+AzK6J/RJlzbS/F3XYPsk3YASqXJxFio pZUQs5DaFPo2Cwd8qTuzil96QNHaNdrDh6cLZnrd7OJ03ZMkEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQLWbquluvb1Z9i5I/PkCQNmwIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYzVkZDI4MWYtNGMzNi0z ZTFjLWI4NDEtZTJmYWJkZjMxMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI+PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT4k5Ky8HMKiYezpViTjMRSrzSYbBhJGm6csulHthLFCFS/pyAUCgK+ r2AIrbiL2OA/sAj7RBcLSVDnWTNpyg6TkNNgzbYM3wlyHfqrfefPzTMMCdyR3E30 FzHG0SzzuUHbEYAr/2ufGJdn22XITCuaDshNXRgjVK7Mq10DOdBl0gADRzYMn7wP j4FnD1+FVtd3NSfUlj7mHgoMkD1ByqVL3L1G1AGp1ZkEIMRdgEj2nMssdqXx5LJv Gh8igMvXyViV0YiwQ11HlKe1p941UIne7THKikstXdzHva28J2xSLatUUjNy9EQu QwStEL15j5Y5Wf/gCoYgHj4fmgL7oG4= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:39 2025 by rpki-client