$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa File: 33366e57-3c98-34dd-9cde-0f6424040688.roa (raw, json) Hash identifier: U/3+1IHRl8Ntvltndo0xNqkMP4VwJzmxjfAIc/8Zlwo= Subject key identifier: E8:9D:D3:17:4F:7D:48:4B:50:86:FF:38:85:95:2F:DD:A9:2F:85:8B Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3AA60D8DA0F77F5BC1400 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 168.220.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:aa:60:d8:da:0f:77:f5:bc:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=6de52f96-6cd2-472a-9d7c-86ef97316dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c6:2d:0e:cd:28:0d:69:05:2c:f7:0b:ba:f4: 25:58:12:c3:fc:c1:11:f9:7c:9a:2e:84:0b:13:44: 30:e0:e6:5d:e2:8c:30:75:be:5a:3f:69:5f:9b:f1: da:86:76:29:ef:99:92:44:8c:5c:fa:85:c4:35:91: cb:32:ce:4d:d9:12:09:51:1f:4c:03:6f:d5:55:5f: 91:48:6b:b7:eb:0d:e4:03:8c:47:ea:1e:7c:2e:f7: 81:e5:b6:0f:ea:a3:6f:55:8b:9c:91:62:1a:dd:fd: a6:49:a9:23:95:56:f4:bc:6b:2e:c4:0c:94:24:97: d8:1e:f7:5d:f8:d3:ea:42:5f:3b:ab:bf:01:f1:08: b6:4c:76:85:a6:9d:95:04:3a:64:f3:c3:ef:f4:0c: 30:9e:ac:d0:01:be:cc:a5:5e:43:c4:85:ab:ae:8e: 95:b9:fc:f4:eb:16:53:f2:5b:22:d6:cb:8d:21:97: 19:88:4f:2e:e7:67:60:98:44:da:c6:76:91:0c:d0: 81:cf:ac:81:84:fd:03:3f:4e:9a:bc:0f:97:ff:8e: f7:de:ca:b7:ef:9c:e0:ae:41:7d:ed:3f:e1:91:07: dd:62:52:6e:28:20:6a:1c:d9:9e:ce:0d:53:45:05: 53:c0:0e:29:38:95:c3:48:8e:23:68:93:54:bf:4e: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9D:D3:17:4F:7D:48:4B:50:86:FF:38:85:95:2F:DD:A9:2F:85:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:85:eb:f4:11:02:64:64:3e:53:4f:7b:af:98:af:de:ce:60: d0:b7:2a:66:e0:7a:0e:e0:77:37:52:ef:a6:01:41:bf:7b:61: b8:a0:a1:cf:7e:1d:50:86:ad:e8:ff:3a:75:77:7c:70:3d:41: 12:cf:37:2c:05:95:08:86:1e:cf:82:dd:bf:d5:30:de:f0:54: 40:58:dd:3a:00:17:77:90:20:22:76:f5:d1:dd:29:3b:6b:97: dd:36:88:0c:8e:0e:35:0b:de:23:2b:bc:d7:73:6a:b0:2e:d3: a5:5e:d6:12:d8:f0:1c:00:98:36:7e:df:2e:c7:51:ef:22:fc: dc:3a:fc:17:fa:eb:42:a5:b6:52:f6:64:a0:34:a4:f2:2b:c4: e1:d5:6a:3d:94:69:6f:63:9f:2d:97:ce:33:69:25:89:fa:17: 3a:38:a3:5c:84:e8:bb:16:55:5b:d9:de:dc:3b:cb:3d:10:a1: 61:90:18:ca:8f:16:55:0e:27:d2:20:36:d1:d4:b6:2d:ff:0f: df:ab:ed:5f:31:46:83:b4:6f:da:71:c3:b1:43:af:57:f1:e4: e8:b6:c6:2d:e6:df:fd:6c:78:cf:c6:a3:16:c9:a5:91:e8:02: c3:e2:47:3b:73:5f:81:5c:17:54:90:c6:d0:b3:95:ad:53:4f: 98:78:98:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6pg2NoPd/W8FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk NmRlNTJmOTYtNmNkMi00NzJhLTlkN2MtODZlZjk3MzE2ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMYtDs0oDWkFLPcLuvQlWBLD/MER+XyaLoQL E0Qw4OZd4owwdb5aP2lfm/HahnYp75mSRIxc+oXENZHLMs5N2RIJUR9MA2/VVV+R SGu36w3kA4xH6h58LveB5bYP6qNvVYuckWIa3f2mSakjlVb0vGsuxAyUJJfYHvdd +NPqQl87q78B8Qi2THaFpp2VBDpk88Pv9AwwnqzQAb7MpV5DxIWrro6Vufz06xZT 8lsi1suNIZcZiE8u52dgmETaxnaRDNCBz6yBhP0DP06avA+X/4733sq375zgrkF9 7T/hkQfdYlJuKCBqHNmezg1TRQVTwA4pOJXDSI4jaJNUv04AowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOid0xdPfUhLUIb/OIWVL92pL4WLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMzMzNjZlNTctM2M5OC0z NGRkLTljZGUtMGY2NDI0MDQwNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKF6/QRAmRkPlNPe6+Yr97OYNC3Kmbgeg7gdzdS76YBQb97Ybigoc9+ HVCGrej/OnV3fHA9QRLPNywFlQiGHs+C3b/VMN7wVEBY3ToAF3eQICJ29dHdKTtr l902iAyODjUL3iMrvNdzarAu06Ve1hLY8BwAmDZ+3y7HUe8i/Nw6/Bf660KltlL2 ZKA0pPIrxOHVaj2UaW9jny2XzjNpJYn6Fzo4o1yE6LsWVVvZ3tw7yz0QoWGQGMqP FlUOJ9IgNtHUti3/D9+r7V8xRoO0b9pxw7FDr1fx5Oi2xi3m3/1seM/GoxbJpZHo AsPiRztzX4FcF1SQxtCzla1TT5h4mEM= -----END CERTIFICATE-----Generated at Sat Apr 12 00:11:37 2025 by rpki-client