$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/b298d8d4-0fef-3acd-84cb-e3ac68385919.roa File: b298d8d4-0fef-3acd-84cb-e3ac68385919.roa (raw, json) Hash identifier: BID32vIHSokB7MC2OhHONkO9oQABIpIDGxFiEsRNiCo= Subject key identifier: 4A:9A:6B:25:3E:8E:7A:31:6F:F8:F2:13:86:05:D6:6F:FB:48:61:43 Certificate issuer: /CN=22a2b00e-11a0-4c50-abf7-a74adfea69e4 Certificate serial: 010D0C9F43285848ADC60108584D527B412268B0 Authority key identifier: 8E:DC:20:EF:33:21:29:1E:50:62:9A:DC:C8:EC:B1:59:A6:6E:CD:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/b298d8d4-0fef-3acd-84cb-e3ac68385919.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 32156 IP address blocks: 142.214.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:01:08:58:4d:52:7b:41:22:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a2b00e-11a0-4c50-abf7-a74adfea69e4 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=98bf22ad-08f5-49c2-947f-186deaa0f875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c0:61:ec:e4:e4:53:3f:0e:dd:6d:6a:76:72: c7:9c:21:81:8f:cb:ee:a3:2e:c3:9a:90:ba:dd:a5: 53:2a:80:2d:c4:73:77:91:81:ba:d4:19:f3:68:1f: 1c:85:15:d4:25:00:42:57:26:f1:fa:cd:94:b4:18: 84:e5:7e:7c:5c:47:94:1f:ba:93:2a:8f:29:82:c8: dc:3a:54:38:4d:df:3a:57:75:b1:cb:93:b5:83:53: a3:21:6f:bf:be:dd:f9:c2:30:1a:14:b0:fe:30:87: 5b:69:84:5b:8e:f6:ec:56:d7:95:2e:6e:82:a6:5a: 4c:49:50:da:8e:4e:41:b6:85:8e:b6:24:f5:a6:59: 86:46:58:77:39:6a:26:10:11:69:7d:80:fd:a8:6f: a5:ca:b9:4e:64:4a:47:21:af:e9:b7:74:84:83:ef: fc:6d:00:5e:77:c9:12:bc:ca:71:4c:86:ec:f3:8f: 35:dd:4e:21:bd:99:53:d8:a8:27:81:cc:af:19:ac: c7:b6:e5:1a:e4:86:81:36:65:20:7a:1b:5e:1c:c2: 81:4c:9a:fa:f6:e0:c6:61:45:0c:a7:5c:84:77:74: 06:a4:80:b8:d8:59:da:c5:70:c8:c1:71:a7:f9:20: 09:0d:5d:06:70:29:8d:a2:e5:e4:f2:60:4a:30:5d: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:6B:25:3E:8E:7A:31:6F:F8:F2:13:86:05:D6:6F:FB:48:61:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/b298d8d4-0fef-3acd-84cb-e3ac68385919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.crl X509v3 Authority Key Identifier: keyid:8E:DC:20:EF:33:21:29:1E:50:62:9A:DC:C8:EC:B1:59:A6:6E:CD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer sbgp-ipAddrBlock: critical IPv4: 142.214.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:5a:ed:12:ae:2f:ab:97:9b:35:d9:72:b6:0b:51:6c:01:df: ef:18:0a:3d:3c:5d:0e:72:05:3b:bd:88:f9:3f:1e:9b:f4:64: 18:6c:9a:f9:0d:24:8e:a8:96:5e:82:b1:75:e0:9d:7a:b0:ac: e5:56:f8:1a:9d:8e:e8:27:10:ed:db:ae:1b:58:0d:94:59:54: dd:49:30:5b:56:3f:d2:a8:a2:6d:f9:0b:65:70:a5:29:58:06: 43:1a:fe:9c:c4:58:ba:d9:c0:17:e3:36:79:f7:a9:37:99:df: 64:16:80:90:59:9f:ea:53:59:3e:1f:56:7f:a2:5e:ff:41:2d: 54:5a:b7:9c:78:43:b7:81:e7:e4:f5:cf:87:69:dd:d9:ef:f0: 47:cc:00:a4:16:a9:29:a2:5d:c9:64:8d:46:df:34:5f:b3:fc: 6a:21:e1:cc:06:96:0f:ef:23:80:17:e6:5d:cd:ca:99:b4:98: 96:39:79:37:99:b5:5c:e0:47:fe:6a:01:f8:8a:ca:ef:28:e9: f7:9e:52:a9:74:fd:8d:3c:5a:f7:f0:a1:ee:26:4b:17:83:34: 8f:95:27:9e:81:53:da:c6:44:31:2a:72:49:54:1a:cb:e8:91: 72:2e:99:20:40:9d:43:72:5f:44:45:dc:76:57:e2:23:c9:38: 87:7e:6a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgEIWE1Se0EiaLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhMmIwMGUtMTFhMC00YzUwLWFiZjctYTc0YWRmZWE2 OWU0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk OThiZjIyYWQtMDhmNS00OWMyLTk0N2YtMTg2ZGVhYTBmODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MBh7OTkUz8O3W1qdnLHnCGBj8vuoy7DmpC6 3aVTKoAtxHN3kYG61BnzaB8chRXUJQBCVybx+s2UtBiE5X58XEeUH7qTKo8pgsjc OlQ4Td86V3Wxy5O1g1OjIW+/vt35wjAaFLD+MIdbaYRbjvbsVteVLm6CplpMSVDa jk5BtoWOtiT1plmGRlh3OWomEBFpfYD9qG+lyrlOZEpHIa/pt3SEg+/8bQBed8kS vMpxTIbs84813U4hvZlT2KgngcyvGazHtuUa5IaBNmUgehteHMKBTJr69uDGYUUM p1yEd3QGpIC42FnaxXDIwXGn+SAJDV0GcCmNouXk8mBKMF32XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqaayU+jnoxb/jyE4YF1m/7SGFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmEy YjAwZS0xMWEwLTRjNTAtYWJmNy1hNzRhZGZlYTY5ZTQvYjI5OGQ4ZDQtMGZlZi0z YWNkLTg0Y2ItZTNhYzY4Mzg1OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJhMmIwMGUtMTFhMC00YzUwLWFi ZjctYTc0YWRmZWE2OWU0LzIyYTJiMDBlLTExYTAtNGM1MC1hYmY3LWE3NGFkZmVh NjllNC5jcmwwHwYDVR0jBBgwFoAUjtwg7zMhKR5QYprcyOyxWaZuzRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmEyYjAwZS0xMWEwLTRjNTAtYWJmNy1hNzRh ZGZlYTY5ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjtZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNa7RKuL6uXmzXZcrYLUWwB3+8YCj08XQ5yBTu9iPk/Hpv0ZBhsmvkN JI6oll6CsXXgnXqwrOVW+BqdjugnEO3brhtYDZRZVN1JMFtWP9Koom35C2VwpSlY BkMa/pzEWLrZwBfjNnn3qTeZ32QWgJBZn+pTWT4fVn+iXv9BLVRat5x4Q7eB5+T1 z4dp3dnv8EfMAKQWqSmiXclkjUbfNF+z/Goh4cwGlg/vI4AX5l3Nypm0mJY5eTeZ tVzgR/5qAfiKyu8o6feeUql0/Y08Wvfwoe4mSxeDNI+VJ56BU9rGRDEqcklUGsvo kXIumSBAnUNyX0RF3HZX4iPJOId+aio= -----END CERTIFICATE-----Generated at Fri Apr 11 21:40:22 2025 by rpki-client