$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa File: df6ffceb-3664-34d8-8a96-01aafc7628e4.roa (raw, json) Hash identifier: X+4JpwngCxqP9jngNuxMSA2fTZVCAkr+ogzzQxD+upk= Subject key identifier: 9E:60:84:87:C4:9B:52:02:CA:4C:70:56:E3:B0:93:53:2F:C0:56:31 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858492E13C62F57F620BFFB0FD700 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 142.173.0.0/20 maxlen: 20 142.173.16.0/20 maxlen: 20 142.173.64.0/20 maxlen: 20 142.173.80.0/20 maxlen: 20 142.173.112.0/20 maxlen: 20 142.173.128.0/20 maxlen: 20 142.173.144.0/20 maxlen: 20 142.173.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c6:2f:57:f6:20:bf:fb:0f:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=cf1b1d16-a8a0-409f-bd61-279c3c8b7239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:9f:72:1c:40:ae:66:77:a1:92:a4:8c:c7: 43:07:5a:6c:b8:9c:d0:24:79:07:59:27:93:94:a8: cc:56:50:e4:cf:f3:3e:2f:3e:95:46:b0:1d:2f:bb: f1:e7:f9:f5:bc:fe:82:d3:14:f8:14:c1:8c:c9:69: a1:95:98:c3:a7:13:cb:48:7a:a8:6b:35:d5:de:e5: d8:15:36:25:be:41:ed:29:92:1d:59:81:1a:13:51: e3:17:09:3b:2d:d1:0d:8a:4b:b9:a0:67:c8:7e:24: 02:e4:20:09:15:ac:8a:8a:b7:d4:c8:c8:d2:4f:e8: e6:ce:d1:3b:d9:4f:50:dd:b6:2a:59:03:20:ae:de: 74:24:8f:db:af:3c:fa:41:1c:ba:72:e6:36:d5:f6: b2:b1:1a:0c:61:fd:3c:08:49:59:64:cf:89:6b:18: 46:b3:8a:b9:e6:24:22:ef:12:bb:75:b8:2c:b5:09: d1:36:c1:81:57:25:9b:9a:2c:21:b9:d6:94:48:3b: 79:9d:33:5d:35:3a:60:f9:31:3a:2e:eb:00:fe:3a: c6:af:31:6c:ab:c3:d5:b5:b2:7e:39:81:85:68:4c: 99:82:06:5c:c5:01:3b:84:b4:66:9e:cf:19:99:c7: 3b:73:1e:d7:4e:e5:9a:fd:7d:fb:0e:1a:20:68:03: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:60:84:87:C4:9B:52:02:CA:4C:70:56:E3:B0:93:53:2F:C0:56:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.173.0.0/19 142.173.64.0/19 142.173.112.0-142.173.159.255 142.173.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d8:39:e1:9d:b3:4b:06:8f:4c:09:b3:4a:55:0d:63:e7:a7: 48:b1:96:a2:d9:e7:54:89:d9:c4:90:d0:2f:7f:b8:7f:7a:95: ff:47:8a:e1:81:c6:b3:de:2a:29:7b:1b:f3:84:be:fa:af:0d: 5b:89:ff:a5:58:c2:d2:ff:ff:f5:ac:3e:f8:d2:f3:3e:98:ca: 4e:62:8e:ab:9e:cb:1f:65:1d:7e:4b:6e:91:d4:dd:30:6b:a0: 7f:ea:ae:ea:9f:e8:bc:6c:1f:5a:2b:17:e1:9f:21:a5:20:45: db:dd:41:af:fe:3b:a5:16:92:b9:ec:14:87:3a:db:6c:1b:9d: 3f:11:5c:ae:0d:84:4b:5c:12:18:0e:34:17:4c:e6:13:57:6d: 1c:c9:33:c3:ec:11:4b:ae:b1:49:36:65:96:f8:f4:76:c3:74: 93:7c:dc:1c:00:63:26:ed:ff:c9:19:36:59:f1:76:69:a6:a3: 8d:a8:d4:a0:1e:50:25:d2:96:cd:58:24:49:e3:ef:3a:9e:f2: c1:4e:68:1d:3c:05:08:d2:f0:7c:de:34:57:4e:95:4a:23:50: a4:5f:ec:5c:3c:ca:34:fb:b6:00:e4:53:7d:59:f5:58:fb:b0: 9d:d3:08:e4:4d:80:e7:27:63:f0:c2:b3:88:ca:43:cf:3c:39: 0b:86:b1:7d -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEkuE8YvV/Ygv/sP1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk Y2YxYjFkMTYtYThhMC00MDlmLWJkNjEtMjc5YzNjOGI3MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpefchxArmZ3oZKkjMdDB1psuJzQJHkHWSeT lKjMVlDkz/M+Lz6VRrAdL7vx5/n1vP6C0xT4FMGMyWmhlZjDpxPLSHqoazXV3uXY FTYlvkHtKZIdWYEaE1HjFwk7LdENiku5oGfIfiQC5CAJFayKirfUyMjST+jmztE7 2U9Q3bYqWQMgrt50JI/brzz6QRy6cuY21faysRoMYf08CElZZM+JaxhGs4q55iQi 7xK7dbgstQnRNsGBVyWbmiwhudaUSDt5nTNdNTpg+TE6LusA/jrGrzFsq8PVtbJ+ OYGFaEyZggZcxQE7hLRmns8Zmcc7cx7XTuWa/X37DhogaAOO3wIDAQABo4IDbzCC A2swHQYDVR0OBBYEFJ5ghIfEm1ICykxwVuOwk1MvwFYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGY2ZmZjZWItMzY2NC0z NGQ4LThhOTYtMDFhYWZjNzYyOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQFjq0AAwQF jq1AMAwDBASOrXADBAWOrYADBASOrcAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPNg54Z2zSwaPTAmzSlUN Y+enSLGWotnnVInZxJDQL3+4f3qV/0eK4YHGs94qKXsb84S++q8NW4n/pVjC0v// 9aw++NLzPpjKTmKOq57LH2UdfktukdTdMGugf+qu6p/ovGwfWisX4Z8hpSBF291B r/47pRaSuewUhzrbbBudPxFcrg2ES1wSGA40F0zmE1dtHMkzw+wRS66xSTZllvj0 dsN0k3zcHABjJu3/yRk2WfF2aaajjajUoB5QJdKWzVgkSePvOp7ywU5oHTwFCNLw fN40V06VSiNQpF/sXDzKNPu2AORTfVn1WPuwndMI5E2A5ydj8MKziMpDzzw5C4ax fQ== -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:13 2025 by rpki-client