$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6791d9c7-aac5-375d-b3e9-c6e7d9b6693b.roa File: 6791d9c7-aac5-375d-b3e9-c6e7d9b6693b.roa (raw, json) Hash identifier: 9KFJMrX/U1g8S9/SJyOnPvSHODY1tqaJXY/r2USTGt4= Subject key identifier: 2D:9F:9D:EB:15:AD:24:67:8D:18:CF:07:D8:A3:2A:62:C3:92:6F:94 Certificate issuer: /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Certificate serial: 010D0C9F432858495D8970A98DCCC85B3235E260 Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6791d9c7-aac5-375d-b3e9-c6e7d9b6693b.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 31898 IP address blocks: 143.223.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:70:a9:8d:cc:c8:5b:32:35:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=4cb4efe1-1ff7-4804-8c84-c9361d974f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:13:37:5b:4e:85:fb:78:62:40:9f:37:76: 15:21:f0:5c:98:ee:ca:f7:6b:aa:4a:c6:52:1d:a5: 51:9a:f7:88:54:2b:cb:96:d3:84:62:90:8f:c2:ef: 24:d3:41:36:e1:6c:a0:c3:8f:f3:d5:e6:0c:ad:1c: 84:f1:97:7e:1f:73:9d:ce:df:6c:42:e1:2a:42:46: 75:6a:43:86:58:d5:61:c9:87:bb:f4:96:cd:39:7d: da:0f:d8:c7:c2:95:57:24:f0:5a:4d:55:19:f2:83: cc:4d:66:28:6d:d0:98:5b:38:13:6c:ef:7d:b1:d8: 61:72:9f:fd:33:dd:de:40:ee:a0:5c:99:41:5d:14: d7:cb:2e:e1:0a:8f:d2:47:a7:56:6b:55:36:15:56: cb:75:6a:90:d6:18:b3:e1:b2:1c:95:5f:2b:43:4d: 42:3f:f0:69:41:30:09:49:54:82:3a:b1:e2:f6:56: da:ef:89:7f:7c:82:fa:fa:70:67:6f:47:f4:36:50: 05:a3:9d:64:12:13:9d:8e:5f:55:8d:a0:07:93:c0: 08:ef:c4:6c:fc:fc:14:27:0c:30:04:f5:07:77:7b: 25:a4:4e:bd:eb:77:4a:b8:87:b4:08:79:14:72:74: 7a:c6:23:a1:71:d2:48:94:bd:2f:b9:ce:12:61:81: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:9D:EB:15:AD:24:67:8D:18:CF:07:D8:A3:2A:62:C3:92:6F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/6791d9c7-aac5-375d-b3e9-c6e7d9b6693b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl X509v3 Authority Key Identifier: keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer sbgp-ipAddrBlock: critical IPv4: 143.223.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:43:7d:5f:9c:ff:38:55:3d:2b:67:6e:07:9d:e0:40:cb:a3: 6e:23:63:19:8a:a4:ab:92:3f:a7:ba:b7:f9:66:7c:60:0b:b2: 34:49:a0:3f:fc:f7:93:c5:c0:58:cf:14:5b:21:e6:fe:28:dd: a3:5b:54:c3:ea:9f:97:32:d5:24:d2:22:cc:b7:52:4e:7b:9e: e0:ab:ae:e2:3a:78:ee:5c:78:35:cb:04:19:18:fb:70:e8:00: 28:b3:cc:9c:38:0b:3d:ae:af:ab:60:2b:18:12:09:d9:07:f8: d5:f7:4d:f1:92:52:e9:1b:e0:17:17:5c:dd:a2:1e:d3:17:7b: 0f:f4:ec:c1:3d:74:00:d1:78:a4:c2:d4:99:ac:43:a7:3f:ad: 54:6f:a6:c8:31:26:ec:22:f7:37:05:4c:2e:cf:7f:7d:8c:f2: 47:3f:b8:5d:39:01:7c:17:be:41:79:84:85:6d:c6:21:a3:ee: 14:0b:8b:83:c3:0d:0b:10:8b:1b:fd:75:21:45:6e:d0:96:f8: dd:94:53:61:ee:e0:8d:0e:9b:2c:df:e1:34:26:16:63:96:2e: e1:f0:28:8b:11:bb:ce:2e:c6:5c:62:fa:3d:28:82:27:c2:b1: cb:a1:d6:75:5a:9c:0c:ec:c1:d9:8c:52:00:c4:e9:d7:bd:f9: 16:ba:98:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiXCpjczIWzI14mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc5NTkxZWItZjhmZi00OGY1LTlhYzYtZTFhZmEyM2U1 M2ZiMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGNiNGVmZTEtMWZmNy00ODA0LThjODQtYzkzNjFkOTc0ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT8TN1tOhft4YkCfN3YVIfBcmO7K92uqSsZS HaVRmveIVCvLltOEYpCPwu8k00E24Wygw4/z1eYMrRyE8Zd+H3Odzt9sQuEqQkZ1 akOGWNVhyYe79JbNOX3aD9jHwpVXJPBaTVUZ8oPMTWYobdCYWzgTbO99sdhhcp/9 M93eQO6gXJlBXRTXyy7hCo/SR6dWa1U2FVbLdWqQ1hiz4bIclV8rQ01CP/BpQTAJ SVSCOrHi9lba74l/fIL6+nBnb0f0NlAFo51kEhOdjl9VjaAHk8AI78Rs/PwUJwww BPUHd3slpE6963dKuIe0CHkUcnR6xiOhcdJIlL0vuc4SYYFuCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2fnesVrSRnjRjPB9ijKmLDkm+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1 OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFmYTIzZTUzZmIvNjc5MWQ5YzctYWFjNS0z NzVkLWIzZTktYzZlN2Q5YjY2OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjc5NTkxZWItZjhmZi00OGY1LTlh YzYtZTFhZmEyM2U1M2ZiL2Y3OTU5MWViLWY4ZmYtNDhmNS05YWM2LWUxYWZhMjNl NTNmYi5jcmwwHwYDVR0jBBgwFoAUC3rnSZ44dN+bLPVV81syl2w4I3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFm YTIzZTUzZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj99YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFDfV+c/zhVPStnbged4EDLo24jYxmKpKuSP6e6t/lmfGALsjRJoD/8 95PFwFjPFFsh5v4o3aNbVMPqn5cy1STSIsy3Uk57nuCrruI6eO5ceDXLBBkY+3Do ACizzJw4Cz2ur6tgKxgSCdkH+NX3TfGSUukb4BcXXN2iHtMXew/07ME9dADReKTC 1JmsQ6c/rVRvpsgxJuwi9zcFTC7Pf32M8kc/uF05AXwXvkF5hIVtxiGj7hQLi4PD DQsQixv9dSFFbtCW+N2UU2Hu4I0Omyzf4TQmFmOWLuHwKIsRu84uxlxi+j0ogifC scuh1nVanAzswdmMUgDE6de9+Ra6mAM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:04:10 2025 by rpki-client