$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa File: 0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa (raw, json) Hash identifier: t83ACwZ+/vfRR9eJMKzvMSN0obtHdUhbJ1hOdgAlTBE= Subject key identifier: 2E:35:61:8D:1C:EC:C6:11:94:51:93:F6:EA:B7:95:C4:A6:A0:FF:B3 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3AB366ADA5A6E120C6D20 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 168.220.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ab:36:6a:da:5a:6e:12:0c:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=06ac1386-2993-422f-9eee-bc6247b45d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:d7:4c:4d:f7:97:73:e6:b8:7b:f3:7d:51: 04:4e:11:16:38:45:79:c9:06:eb:2a:9a:e4:18:7f: 45:3f:7c:78:b9:98:8c:53:41:26:72:77:41:95:04: f8:ab:e2:b0:ab:b5:58:47:cf:d9:52:ee:d3:41:62: 59:82:3b:3b:d9:df:13:be:55:3c:91:99:65:d6:84: cb:15:1e:cc:4e:48:59:61:06:7e:53:34:79:e3:0f: b1:b4:0c:74:b9:b1:33:b3:ba:27:8b:17:ae:5d:a9: 0f:60:74:b0:dc:75:d9:2a:6d:fb:0c:f5:31:40:df: 1d:a3:cb:7f:03:41:e9:0a:05:98:cd:3a:e5:83:00: 25:ba:dd:c4:25:7a:44:22:48:e9:f7:89:cd:b4:32: 9b:de:d0:a0:9a:80:43:da:6a:26:ee:91:ad:95:79: 7a:8e:d9:54:81:17:37:1e:29:b1:33:95:82:55:27: 9d:dd:65:22:4f:62:0d:6c:bf:02:92:f2:5b:63:ee: 13:50:bd:cc:4d:22:69:0b:87:48:ee:47:11:5e:40: 5a:fb:8c:1c:e7:c3:3c:14:38:4b:40:4e:26:52:b9: c0:31:a1:1e:ab:58:06:44:93:e6:71:8f:84:1f:68: 96:fd:50:20:24:ad:81:55:bc:fa:c2:7c:8a:f1:9d: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:35:61:8D:1C:EC:C6:11:94:51:93:F6:EA:B7:95:C4:A6:A0:FF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e9:94:7b:2f:79:7d:1f:8f:6a:09:28:9e:a0:b2:ec:d7:4b: c5:8c:82:8f:21:f9:71:80:b5:3a:3b:70:97:6e:65:23:99:00: f1:b6:74:ef:46:ab:e7:b3:6e:00:c0:96:9e:88:57:7b:06:b3: 82:43:b3:ab:8a:ac:3a:c2:28:d6:55:40:a9:4e:58:ac:94:7d: 2a:ed:d3:e7:8f:73:66:41:69:96:56:6c:a3:14:0f:4e:10:f0: f6:5f:74:d3:da:fd:d7:89:d4:98:3b:3d:39:4c:18:87:7a:bb: fd:0c:ff:8a:f1:dc:12:f0:72:25:3a:33:c0:37:dd:0b:34:a9: a2:85:c8:3b:67:d2:17:9d:c5:b0:21:36:38:0f:57:63:02:38: 56:b2:5d:bb:16:84:94:c9:9e:92:93:e5:30:a3:db:af:2c:ed: 3b:ae:95:d4:e1:c3:66:01:e2:2d:6f:1e:51:7e:03:76:d5:53: 63:87:9b:8b:2f:ff:5e:b3:4d:50:30:90:71:fa:47:74:b4:0d: ef:d0:52:49:18:0a:e8:6c:3d:aa:62:b5:b5:29:b0:9b:fa:26: db:8e:51:63:fb:af:dd:be:a7:9f:96:e2:36:d8:ee:62:e7:55: 24:1c:fc:ea:30:08:f9:b0:49:1b:ac:56:a4:db:3c:b4:35:45: f4:ba:73:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6s2atpabhIMbSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MDZhYzEzODYtMjk5My00MjJmLTllZWUtYmM2MjQ3YjQ1ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI/XTE33l3PmuHvzfVEEThEWOEV5yQbrKprk GH9FP3x4uZiMU0EmcndBlQT4q+Kwq7VYR8/ZUu7TQWJZgjs72d8TvlU8kZll1oTL FR7MTkhZYQZ+UzR54w+xtAx0ubEzs7onixeuXakPYHSw3HXZKm37DPUxQN8do8t/ A0HpCgWYzTrlgwAlut3EJXpEIkjp94nNtDKb3tCgmoBD2mom7pGtlXl6jtlUgRc3 HimxM5WCVSed3WUiT2INbL8CkvJbY+4TUL3MTSJpC4dI7kcRXkBa+4wc58M8FDhL QE4mUrnAMaEeq1gGRJPmcY+EH2iW/VAgJK2BVbz6wnyK8Z1RrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC41YY0c7MYRlFGT9uq3lcSmoP+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMGZjZTk1YjYtM2JmNi0z ZWY4LTk4OGMtZmQyY2I3Y2FlMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvplHsveX0fj2oJKJ6gsuzXS8WMgo8h+XGAtTo7cJduZSOZAPG2dO9G q+ezbgDAlp6IV3sGs4JDs6uKrDrCKNZVQKlOWKyUfSrt0+ePc2ZBaZZWbKMUD04Q 8PZfdNPa/deJ1Jg7PTlMGId6u/0M/4rx3BLwciU6M8A33Qs0qaKFyDtn0hedxbAh NjgPV2MCOFayXbsWhJTJnpKT5TCj268s7TuuldThw2YB4i1vHlF+A3bVU2OHm4sv /16zTVAwkHH6R3S0De/QUkkYCuhsPapitbUpsJv6JtuOUWP7r92+p5+W4jbY7mLn VSQc/OowCPmwSRusVqTbPLQ1RfS6cwE= -----END CERTIFICATE-----Generated at Sat Apr 12 01:45:04 2025 by rpki-client