$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa File: 3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa (raw, json) Hash identifier: u15dpIzH6+YcGadY2nVAfTH6WqxWSrkUj5f6s0WNSFE= Subject key identifier: C0:41:39:ED:B5:99:73:59:AA:D6:C1:F8:7B:D1:05:69:C1:D3:6D:1E Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848FD56D0C55B43F55A34DFFC00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 142.147.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:d0:c5:5b:43:f5:5a:34:df:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=3c25f616-37d3-4523-9d21-9039690a76f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:32:6c:5e:85:41:0f:fb:c6:78:6d:a2:a3: 34:29:44:fa:25:bd:75:84:c0:95:ff:7c:2a:a8:4c: fb:c1:be:ff:67:91:3e:46:fb:ff:65:22:40:f9:06: 17:2a:51:f9:3d:b3:42:02:da:aa:f3:fa:9c:3b:85: d0:03:c4:a9:1c:1a:08:3f:05:b7:1a:68:bc:1c:26: 68:b6:97:44:ed:4e:10:e3:e8:19:0c:e0:d2:6f:b7: 57:5d:63:e4:81:d1:6e:a7:48:25:96:ed:eb:0e:a9: 9a:c1:e5:f3:c5:cf:48:7a:aa:c6:e9:14:e5:1f:65: 6e:cd:d4:85:32:4e:cd:e3:1e:19:40:fd:28:12:62: e9:35:d0:ec:4f:12:15:03:67:66:c5:86:97:4f:8d: 1e:98:71:b7:14:0f:3f:54:9f:19:8e:06:6c:cf:3a: 2c:66:06:6a:93:38:ea:30:5d:7b:cb:3e:4f:bf:81: b9:88:ec:3a:33:1e:5a:72:14:3c:1f:36:c4:f8:5a: aa:0a:ea:10:c1:6f:60:24:30:9e:5f:38:36:09:09: 0a:c5:d4:64:5f:3a:6a:a0:8c:bc:d0:db:11:3a:f6: 56:05:8f:5d:c4:83:a5:ca:54:6e:39:ba:7f:a4:f6: 0a:70:a4:09:d4:23:c9:30:f8:bd:06:a4:7b:3a:4a: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:41:39:ED:B5:99:73:59:AA:D6:C1:F8:7B:D1:05:69:C1:D3:6D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 142.147.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:57:91:67:a0:1e:a0:90:06:9b:8f:52:bb:ca:31:4c:ca:80: 2f:a8:09:4b:1a:5f:d1:3b:4a:4b:c0:8c:9e:cb:cd:70:9d:17: 1e:9f:f2:25:12:70:12:7b:94:ee:4e:3b:a9:51:bc:dd:18:13: 96:1b:a7:6e:fb:10:60:fc:d9:90:de:1b:45:9f:1d:79:f1:b5: 6f:74:bb:af:e1:bf:18:28:96:7b:d8:14:7e:48:44:39:87:4a: f4:00:f9:7e:dd:aa:ab:79:d0:d8:2a:b9:a6:e0:ec:71:93:0f: 36:9b:20:f4:90:0e:0a:0f:cf:c7:08:47:24:1d:13:53:ed:2b: 68:fd:db:9f:71:1f:ac:35:27:6a:2f:cf:8a:92:49:65:b1:53: 78:b0:c5:88:92:a6:27:08:80:c1:a7:86:98:af:5b:52:33:fe: da:24:3b:90:5b:1e:9f:1d:0c:88:aa:c8:97:29:2d:d0:8f:c7: e6:71:f8:82:7b:f5:07:07:b5:26:f7:a5:70:c7:93:79:b2:50: d7:75:11:36:03:af:f4:16:80:49:1b:1e:ce:b1:1a:3d:45:0c: fc:8e:d1:2b:76:75:68:9f:53:aa:85:fd:0f:9e:eb:54:76:b6: ab:c9:6a:32:89:05:6e:6e:dd:c1:34:08:00:4a:20:48:4b:bb: e3:85:70:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VtDFW0P1WjTf/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2MyNWY2MTYtMzdkMy00NTIzLTlkMjEtOTAzOTY5MGE3NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZcybF6FQQ/7xnhtoqM0KUT6Jb11hMCV/3wq qEz7wb7/Z5E+Rvv/ZSJA+QYXKlH5PbNCAtqq8/qcO4XQA8SpHBoIPwW3Gmi8HCZo tpdE7U4Q4+gZDODSb7dXXWPkgdFup0gllu3rDqmaweXzxc9IeqrG6RTlH2VuzdSF Mk7N4x4ZQP0oEmLpNdDsTxIVA2dmxYaXT40emHG3FA8/VJ8ZjgZszzosZgZqkzjq MF17yz5Pv4G5iOw6Mx5achQ8HzbE+FqqCuoQwW9gJDCeXzg2CQkKxdRkXzpqoIy8 0NsROvZWBY9dxIOlylRuObp/pPYKcKQJ1CPJMPi9BqR7OkrFBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBBOe21mXNZqtbB+HvRBWnB020eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2QxZWIzMTgtYjBhMC0z M2ZiLThiZjAtMzAyNzExZDAxY2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5XkWegHqCQBpuPUrvKMUzKgC+oCUsaX9E7SkvAjJ7LzXCdFx6f8iUS cBJ7lO5OO6lRvN0YE5Ybp277EGD82ZDeG0WfHXnxtW90u6/hvxgolnvYFH5IRDmH SvQA+X7dqqt50Ngquabg7HGTDzabIPSQDgoPz8cIRyQdE1PtK2j9259xH6w1J2ov z4qSSWWxU3iwxYiSpicIgMGnhpivW1Iz/tokO5BbHp8dDIiqyJcpLdCPx+Zx+IJ7 9QcHtSb3pXDHk3myUNd1ETYDr/QWgEkbHs6xGj1FDPyO0St2dWifU6qF/Q+e61R2 tqvJajKJBW5u3cE0CABKIEhLu+OFcJM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:11 2025 by rpki-client