$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa File: 2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa (raw, json) Hash identifier: uQoa9lOlHXELBuTeEs3Noed7It+N9QM/XA8oI5qFvoM= Subject key identifier: 60:11:F9:6B:61:CC:7B:34:9D:F5:A3:33:CD:10:84:7F:76:04:13:E7 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3AB02EB4409DD15F5EE40 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 168.220.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ab:02:eb:44:09:dd:15:f5:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=fbeacde5-ad5a-468b-b41d-b8ebd962ddc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:d4:7d:cb:6e:ee:97:d9:85:23:7c:2d:42: 8b:93:38:37:0a:b9:1f:b4:75:cc:0c:71:4f:97:52: d7:cc:38:ab:f5:46:4d:c2:2c:6f:0a:91:62:56:84: 6e:a5:16:4d:3c:56:b3:ea:ca:fc:47:21:12:c4:84: 14:cd:83:43:b8:64:92:44:20:58:bb:57:35:78:82: e2:58:e5:86:a5:f4:16:16:35:70:db:c5:c9:58:c4: 63:4d:14:4b:37:d3:ae:5c:37:6f:7b:07:ad:7b:12: 50:d9:58:cb:dd:52:8e:42:17:74:1e:75:65:49:4b: 1e:e0:9e:9b:6c:dc:70:b4:d7:ee:5f:17:ba:97:78: 55:39:e5:d7:0b:4a:b9:f3:4f:33:8b:32:eb:ed:b7: 8e:51:a6:76:1b:dc:b2:97:1f:fd:90:79:b0:65:39: 71:e0:5b:04:e3:3c:c2:9f:4b:4e:ce:bf:39:b7:6a: 79:60:50:24:a5:06:55:9b:c5:59:78:50:a5:b2:a5: f4:7f:f0:01:77:4f:d3:ce:aa:9e:b5:f3:e6:73:d0: 99:aa:af:66:b4:e5:c9:61:bd:ab:9a:13:b7:b3:d2: 48:ab:a0:a8:5a:71:b3:22:e5:12:86:21:20:ad:a6: bc:51:ef:bb:b3:90:df:21:c4:05:b5:ba:14:05:e9: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:11:F9:6B:61:CC:7B:34:9D:F5:A3:33:CD:10:84:7F:76:04:13:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:71:45:79:ae:77:62:c8:80:19:6e:40:dd:93:2d:78:40:23: d2:2f:08:48:fd:b3:56:9e:0a:25:d8:28:16:fe:57:bb:40:19: eb:07:52:95:3b:74:90:04:cf:c8:96:ea:f0:91:56:30:7c:30: eb:80:62:37:54:9b:10:68:fa:1a:f1:c8:7e:8d:38:b6:8b:76: 7f:6f:20:32:a8:0d:b4:50:5d:20:9d:4d:c4:37:ff:94:30:7e: 8c:5b:24:1c:77:48:61:ee:a8:99:9f:78:f5:3e:27:d2:58:24: 32:95:3f:df:06:c0:24:15:45:ad:f3:fc:07:02:bd:b7:a5:1d: c4:57:00:79:ff:12:16:47:d5:6b:53:c7:7f:4a:1b:4f:60:d4: 5f:11:2c:f1:6b:07:89:cb:52:60:7a:d6:2e:c9:92:76:70:54: 70:0b:d9:ed:12:dd:f3:db:33:54:04:e7:e4:fb:3e:b5:70:b5: 26:f7:0b:4d:a2:cc:a9:e4:3d:7d:f4:57:83:0b:95:10:57:62: 5a:59:8a:f2:aa:72:98:30:a2:73:aa:b8:57:16:37:b7:49:77: 1b:76:d7:28:3a:67:b7:7e:eb:e3:93:41:db:cf:81:81:eb:7d: ff:44:3f:93:72:96:3a:59:c1:27:8b:8f:b1:23:1f:29:cc:69: f1:19:eb:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6sC60QJ3RX17kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk ZmJlYWNkZTUtYWQ1YS00NjhiLWI0MWQtYjhlYmQ5NjJkZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyTUfctu7pfZhSN8LUKLkzg3CrkftHXMDHFP l1LXzDir9UZNwixvCpFiVoRupRZNPFaz6sr8RyESxIQUzYNDuGSSRCBYu1c1eILi WOWGpfQWFjVw28XJWMRjTRRLN9OuXDdvewetexJQ2VjL3VKOQhd0HnVlSUse4J6b bNxwtNfuXxe6l3hVOeXXC0q5808zizLr7beOUaZ2G9yylx/9kHmwZTlx4FsE4zzC n0tOzr85t2p5YFAkpQZVm8VZeFClsqX0f/ABd0/TzqqetfPmc9CZqq9mtOXJYb2r mhO3s9JIq6CoWnGzIuUShiEgraa8Ue+7s5DfIcQFtboUBemeqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAR+WthzHs0nfWjM80QhH92BBPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMmU0OTFkMmYtZWM2Mi0z ZTljLThhNDktMThkNDFlNTk2Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARxRXmud2LIgBluQN2TLXhAI9IvCEj9s1aeCiXYKBb+V7tAGesHUpU7 dJAEz8iW6vCRVjB8MOuAYjdUmxBo+hrxyH6NOLaLdn9vIDKoDbRQXSCdTcQ3/5Qw foxbJBx3SGHuqJmfePU+J9JYJDKVP98GwCQVRa3z/AcCvbelHcRXAHn/EhZH1WtT x39KG09g1F8RLPFrB4nLUmB61i7JknZwVHAL2e0S3fPbM1QE5+T7PrVwtSb3C02i zKnkPX30V4MLlRBXYlpZivKqcpgwonOquFcWN7dJdxt21yg6Z7d+6+OTQdvPgYHr ff9EP5NyljpZwSeLj7EjHynMafEZ6/g= -----END CERTIFICATE-----Generated at Fri Mar 14 07:46:23 2025 by rpki-client