$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa File: b596de48-c39a-3bef-8e7f-6c5138de76a0.roa (raw, json) Hash identifier: u67wfroS0X+EUDcWm7sUxFll8qRGLk5l6CZgA4SJRNs= Subject key identifier: 13:24:2E:85:7A:20:1F:DC:0A:DA:FF:B6:EF:16:C8:98:54:4A:B5:F5 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3AACEE93AF26D2AEFAE80 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 168.220.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:aa:ce:e9:3a:f2:6d:2a:ef:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=8e248140-b2d1-41e7-80f3-d32cf7f2e8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:93:8c:80:93:aa:4e:e9:f6:d9:60:83:c0: 62:74:93:b8:5c:73:f3:22:e7:a4:b8:ce:fa:10:bd: de:f6:2e:82:7f:0b:30:bf:cc:44:05:ce:0a:bd:a7: bf:68:1d:12:c8:4d:72:73:4d:b5:2a:52:eb:db:08: 49:11:f1:36:c6:ef:a7:da:ac:88:66:23:ed:0c:d5: cc:6a:a2:ec:9e:1e:ca:94:7e:db:44:30:43:34:25: b9:b2:ce:7a:5b:f8:72:92:63:d6:00:65:58:64:39: 36:c2:89:c4:de:2d:c2:9c:3b:f9:5e:14:96:da:71: bb:dd:40:e4:81:a6:ba:94:21:aa:ab:57:00:b6:3d: 4f:67:9e:f8:c8:08:a0:e2:14:c9:0b:2f:26:4a:41: cc:58:1b:c5:07:72:f2:68:5f:ea:35:5f:d4:f9:ea: 4f:7e:d3:ce:0a:90:fb:36:27:bf:9e:81:5e:e5:53: 1d:f8:8e:c5:c4:31:c0:52:3b:91:30:7f:c5:ed:d1: 85:99:53:7d:10:5f:a3:41:e1:db:f7:c7:8b:22:ab: 57:b1:3e:e2:f9:69:07:ea:2e:61:ea:69:46:9c:18: 73:7e:ac:e1:3b:3c:7a:d1:34:52:5e:9e:9b:e8:e4: b9:77:b4:89:e8:ea:be:ad:a3:b0:ba:0f:ad:f6:e7: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:24:2E:85:7A:20:1F:DC:0A:DA:FF:B6:EF:16:C8:98:54:4A:B5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cc:65:90:8c:bf:2f:b0:9b:77:d7:2f:d8:17:07:a0:10:27: 0d:dd:77:d7:55:c4:80:b4:17:a8:b5:6b:35:40:cc:ef:6e:e3: e2:cd:f0:f9:ed:d9:ad:40:e7:ad:4f:94:2a:0e:87:fa:81:aa: 7a:63:ee:5d:64:ce:22:19:58:76:76:bf:f1:ea:66:8a:64:b6: 92:0f:a1:bb:50:e8:74:b3:94:3f:fc:16:8b:50:e3:67:dc:17: 18:67:e9:ce:95:b0:9a:61:b8:b8:c3:e2:b4:b3:3e:00:62:30: e0:2c:0d:1b:01:2f:db:20:67:65:d8:a5:d0:f8:8a:70:4d:cc: 6c:55:8f:03:ff:45:7b:56:5e:bc:04:f7:48:48:db:2a:65:db: 72:cb:fe:0f:3a:6e:86:8d:ab:61:a5:7e:5a:bf:40:a9:43:6f: 5f:30:27:24:2f:bf:fd:e2:dd:39:b0:30:cd:5d:f2:6d:61:8d: 14:1e:87:0c:ba:c3:c5:d2:e0:65:90:68:b4:38:30:a8:ee:f8: 5e:a6:10:76:eb:4a:aa:d1:61:e3:9f:c5:eb:52:32:98:f4:7c: 0e:f2:d0:e9:ec:99:fb:77:1c:71:cb:08:4e:32:88:5d:53:8c: 05:13:38:2a:75:34:07:bf:06:6d:3e:d5:15:ce:3c:68:99:ee: 07:b6:49:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6rO6TrybSrvroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk OGUyNDgxNDAtYjJkMS00MWU3LTgwZjMtZDMyY2Y3ZjJlOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkyTjICTqk7p9tlgg8BidJO4XHPzIuekuM76 EL3e9i6Cfwswv8xEBc4Kvae/aB0SyE1yc021KlLr2whJEfE2xu+n2qyIZiPtDNXM aqLsnh7KlH7bRDBDNCW5ss56W/hykmPWAGVYZDk2wonE3i3CnDv5XhSW2nG73UDk gaa6lCGqq1cAtj1PZ574yAig4hTJCy8mSkHMWBvFB3LyaF/qNV/U+epPftPOCpD7 Nie/noFe5VMd+I7FxDHAUjuRMH/F7dGFmVN9EF+jQeHb98eLIqtXsT7i+WkH6i5h 6mlGnBhzfqzhOzx60TRSXp6b6OS5d7SJ6Oq+raOwug+t9uem6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMkLoV6IB/cCtr/tu8WyJhUSrX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYjU5NmRlNDgtYzM5YS0z YmVmLThlN2YtNmM1MTM4ZGU3NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3MZZCMvy+wm3fXL9gXB6AQJw3dd9dVxIC0F6i1azVAzO9u4+LN8Pnt 2a1A561PlCoOh/qBqnpj7l1kziIZWHZ2v/HqZopktpIPobtQ6HSzlD/8FotQ42fc Fxhn6c6VsJphuLjD4rSzPgBiMOAsDRsBL9sgZ2XYpdD4inBNzGxVjwP/RXtWXrwE 90hI2ypl23LL/g86boaNq2Glflq/QKlDb18wJyQvv/3i3TmwMM1d8m1hjRQehwy6 w8XS4GWQaLQ4MKju+F6mEHbrSqrRYeOfxetSMpj0fA7y0Onsmft3HHHLCE4yiF1T jAUTOCp1NAe/Bm0+1RXOPGiZ7ge2SSI= -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:51 2025 by rpki-client