$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0806eddb-bc10-370c-a922-0ff688f3c442.roa File: 0806eddb-bc10-370c-a922-0ff688f3c442.roa (raw, json) Hash identifier: OdWUsh9qsvd59csd/6P4RFDqk2NM+0LIM7I3bHy2N0k= Subject key identifier: B4:54:8D:DC:2A:EA:7D:60:26:7E:CD:AB:1D:0B:AE:AD:44:89:44:69 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3AE78B77E65DDD906EA00 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0806eddb-bc10-370c-a922-0ff688f3c442.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 168.220.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ae:78:b7:7e:65:dd:d9:06:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=aa760315-a1fe-4a78-8404-8a560fdad7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:4e:f4:7b:0b:26:05:19:c6:d8:72:99:0c: c4:30:76:a6:2e:84:45:4b:d7:2a:a9:d4:9b:57:ac: 0f:7b:cd:1f:94:5e:50:51:39:db:c9:61:52:f2:ed: c4:72:32:d8:c5:87:36:1b:2c:c0:74:a5:fe:cf:5d: 98:f2:71:1f:0d:5e:0e:3d:c3:b1:ae:38:61:e4:40: d8:98:51:a5:ce:31:75:82:6b:53:1b:79:b5:43:36: 50:39:6c:b5:db:b3:df:03:bd:ab:0e:39:5b:4c:ff: a0:ab:15:01:76:3a:63:97:71:a4:92:ce:64:f8:d1: 36:35:f7:9d:24:d7:56:4a:27:5d:47:ea:7b:ba:f2: 63:a9:12:65:18:c4:9c:cf:c8:76:e6:a8:2c:3a:95: 4c:3f:70:2e:fa:fd:42:e1:ba:3d:f3:ac:4b:81:a5: a8:9a:71:8a:86:1a:ed:2e:7d:78:c2:31:81:44:10: 3b:aa:4c:51:3e:bf:66:f4:60:0d:08:6c:59:46:b0: 51:2b:85:fc:b6:44:d1:1a:23:a6:f9:ec:f9:f7:3e: 9d:a4:30:46:e7:b4:e4:5e:02:71:ed:54:a5:40:5e: 9d:a1:e3:e0:75:78:2c:e7:36:2c:79:99:72:47:7b: 97:34:21:b5:eb:e4:b1:97:7d:96:3d:36:48:11:5b: 44:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:8D:DC:2A:EA:7D:60:26:7E:CD:AB:1D:0B:AE:AD:44:89:44:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0806eddb-bc10-370c-a922-0ff688f3c442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f3:cf:7c:70:cd:68:1c:80:fd:23:d8:87:f4:26:0e:62:b6: af:2a:dc:9a:b0:cd:4d:07:08:af:f0:f8:c6:7e:67:8b:1b:c0: 43:66:65:ca:3a:bb:e1:5a:43:20:e8:d9:23:b8:17:f3:46:fa: e7:c5:88:84:6f:26:07:35:17:33:2c:74:90:f7:e5:2e:ce:3a: 96:0e:5f:34:5a:8d:2e:97:02:9c:8e:36:41:86:6b:40:c3:21: f6:18:85:0f:2c:eb:93:07:0b:5d:4f:49:20:6c:08:0a:29:92: 41:c9:6e:2b:9b:57:39:e8:44:c6:de:cb:a8:b9:0f:cd:02:59: bb:5f:44:59:b6:91:0e:33:62:af:87:8a:6a:4d:7c:e3:fd:b7: da:99:74:34:30:05:14:91:87:0a:89:d4:d2:39:92:64:d0:27: 75:46:4f:21:29:9b:21:c9:0a:cd:24:f7:4c:67:db:ef:cb:41: b8:a0:53:87:5a:70:a2:2c:32:ba:86:44:1d:1f:aa:69:7a:53: e6:88:92:74:27:e3:e3:51:c2:1c:c6:de:55:2a:df:46:7d:88: 66:48:bd:cd:50:f7:15:06:30:6e:ce:11:79:02:7c:28:e3:c5: 03:ce:88:e5:28:84:4c:7e:7f:cb:c3:d4:64:fd:9d:dd:c0:d6: 4c:23:8f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls654t35l3dkG6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk YWE3NjAzMTUtYTFmZS00YTc4LTg0MDQtOGE1NjBmZGFkN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KFO9HsLJgUZxthymQzEMHamLoRFS9cqqdSb V6wPe80flF5QUTnbyWFS8u3EcjLYxYc2GyzAdKX+z12Y8nEfDV4OPcOxrjhh5EDY mFGlzjF1gmtTG3m1QzZQOWy127PfA72rDjlbTP+gqxUBdjpjl3Gkks5k+NE2Nfed JNdWSiddR+p7uvJjqRJlGMScz8h25qgsOpVMP3Au+v1C4bo986xLgaWomnGKhhrt Ln14wjGBRBA7qkxRPr9m9GANCGxZRrBRK4X8tkTRGiOm+ez59z6dpDBG57TkXgJx 7VSlQF6doePgdXgs5zYseZlyR3uXNCG16+Sxl32WPTZIEVtEAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRUjdwq6n1gJn7Nqx0Lrq1EiURpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMDgwNmVkZGItYmMxMC0z NzBjLWE5MjItMGZmNjg4ZjNjNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETzz3xwzWgcgP0j2If0Jg5itq8q3JqwzU0HCK/w+MZ+Z4sbwENmZco6 u+FaQyDo2SO4F/NG+ufFiIRvJgc1FzMsdJD35S7OOpYOXzRajS6XApyONkGGa0DD IfYYhQ8s65MHC11PSSBsCAopkkHJbiubVznoRMbey6i5D80CWbtfRFm2kQ4zYq+H impNfOP9t9qZdDQwBRSRhwqJ1NI5kmTQJ3VGTyEpmyHJCs0k90xn2+/LQbigU4da cKIsMrqGRB0fqml6U+aIknQn4+NRwhzG3lUq30Z9iGZIvc1Q9xUGMG7OEXkCfCjj xQPOiOUohEx+f8vD1GT9nd3A1kwjjzQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:53 2025 by rpki-client