$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa File: 2a008e47-d7ee-388f-8dd0-00eec15271e8.roa (raw, json) Hash identifier: c5VNDxJeaMrqxqFhBXi5on4AnCcEWSUyZi7EQdxweHo= Subject key identifier: 48:03:EA:BE:7A:9B:A0:E6:46:6C:56:A2:04:33:6E:35:36:37:09:BB Certificate issuer: /CN=143c0e16-c384-40db-8cbd-7b2f4a55e007 Certificate serial: 010D0C9F432858491246ADC102DE793A25E4B600 Authority key identifier: 8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 15154 IP address blocks: 64.113.32.0/20 maxlen: 24 198.232.165.0/24 maxlen: 24 198.232.166.0/24 maxlen: 24 2604:e780::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ad:c1:02:de:79:3a:25:e4:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143c0e16-c384-40db-8cbd-7b2f4a55e007 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=f7b29f30-9340-4e15-9b42-d55a758a1b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:72:39:08:33:51:1c:12:d8:2b:97:40:d9:e1: bf:a4:a3:2f:59:d3:04:40:bd:ae:5c:02:a0:3a:27: 9e:1b:c9:cb:be:32:6e:fd:ad:c2:6c:12:3f:38:31: c3:13:8c:7e:95:46:47:f0:5b:0c:68:4b:5e:22:d0: 56:d3:a9:ef:5a:50:35:e5:d2:a5:13:a4:c8:d3:d0: 44:6f:a7:78:ad:d7:10:84:7b:be:5d:c9:41:34:67: 6d:0a:3a:d1:dc:ba:08:1c:81:32:c4:4e:79:54:a6: 2b:d3:42:18:bf:6c:05:ec:78:c0:8b:38:9e:47:85: 55:d7:1d:e1:dd:35:db:20:b3:96:7b:f0:55:87:48: bd:7b:80:9c:1b:d5:d8:ca:61:c7:6f:b2:d6:55:90: 07:7a:4c:88:e2:31:3e:e2:77:23:6f:33:42:d9:65: 5b:03:c4:40:18:2c:7f:4d:4c:2c:3a:cd:d2:fa:82: 69:4b:06:da:22:a9:24:a2:76:19:a9:bf:57:2f:24: d9:50:d5:3f:c8:93:b2:95:68:5e:da:26:c8:2a:44: af:b6:5a:fb:35:3c:29:7b:62:9d:87:16:34:6e:d1: dc:66:3e:d5:af:31:de:49:9e:c5:bf:43:e9:0e:47: c8:ac:f1:2e:d9:a0:40:ae:a0:8c:cc:7d:51:b8:3b: 97:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:EA:BE:7A:9B:A0:E6:46:6C:56:A2:04:33:6E:35:36:37:09:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl X509v3 Authority Key Identifier: keyid:8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer sbgp-ipAddrBlock: critical IPv4: 64.113.32.0/20 198.232.165.0-198.232.166.255 IPv6: 2604:e780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e1:87:ea:25:68:2b:8c:90:26:f2:92:7e:ad:0d:c3:0e:2a: b5:4b:74:6b:1c:a1:a8:7b:6b:f7:1f:49:d7:c5:58:d4:9c:90: 26:af:3d:79:ac:57:87:2a:4c:15:5e:50:dc:20:aa:78:95:e3: 4f:79:2c:c8:01:7b:b5:a8:f7:db:97:70:6a:6c:59:76:29:05: 0d:41:71:77:c4:ea:0a:61:0b:8b:01:fb:0e:cc:d7:7b:81:b8: 7f:13:8a:2f:b6:95:a2:f1:a5:19:6c:6c:58:2e:63:e7:ec:ae: a8:e8:37:fb:c4:19:ea:6f:d8:39:53:27:52:d7:18:c1:d7:34: 54:4e:74:50:0d:0a:0c:81:76:3a:2a:41:63:19:ee:3b:bc:1a: c9:ec:ae:84:04:9e:dc:d8:42:b8:79:a0:74:c4:ec:43:aa:15: 91:13:61:3d:19:a5:07:2c:3c:0e:65:46:2f:38:71:9c:11:a0: 45:13:2a:e2:4e:69:4d:f2:d4:1c:c4:33:3c:7f:4e:8e:30:bb: c2:5c:32:b1:c7:75:c6:17:b6:ec:ac:75:60:86:e3:ef:6c:3c: a9:ab:66:c2:78:a5:1f:a3:16:13:6a:17:d9:10:b8:a7:da:54: 16:ba:a1:95:36:ac:a4:ea:32:72:35:d1:40:b7:c6:18:1c:dc: 73:d6:01:21 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWEkSRq3BAt55OiXktgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzYzBlMTYtYzM4NC00MGRiLThjYmQtN2IyZjRhNTVl MDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZjdiMjlmMzAtOTM0MC00ZTE1LTliNDItZDU1YTc1OGExYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXI5CDNRHBLYK5dA2eG/pKMvWdMEQL2uXAKg OieeG8nLvjJu/a3CbBI/ODHDE4x+lUZH8FsMaEteItBW06nvWlA15dKlE6TI09BE b6d4rdcQhHu+XclBNGdtCjrR3LoIHIEyxE55VKYr00IYv2wF7HjAizieR4VV1x3h 3TXbILOWe/BVh0i9e4CcG9XYymHHb7LWVZAHekyI4jE+4ncjbzNC2WVbA8RAGCx/ TUwsOs3S+oJpSwbaIqkkonYZqb9XLyTZUNU/yJOylWhe2ibIKkSvtlr7NTwpe2Kd hxY0btHcZj7VrzHeSZ7Fv0PpDkfIrPEu2aBArqCMzH1RuDuXRwIDAQABo4IDcjCC A24wHQYDVR0OBBYEFEgD6r56m6DmRmxWogQzbjU2Nwm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNj MGUxNi1jMzg0LTQwZGItOGNiZC03YjJmNGE1NWUwMDcvMmEwMDhlNDctZDdlZS0z ODhmLThkZDAtMDBlZWMxNTI3MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTQzYzBlMTYtYzM4NC00MGRiLThj YmQtN2IyZjRhNTVlMDA3LzE0M2MwZTE2LWMzODQtNDBkYi04Y2JkLTdiMmY0YTU1 ZTAwNy5jcmwwHwYDVR0jBBgwFoAUi9Pfs4d9asHh2MLHv8+hNwKNfB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNjMGUxNi1jMzg0LTQwZGItOGNiZC03YjJm NGE1NWUwMDcuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQEQHEgMAwD BADG6KUDBADG6KYwDQQCAAIwBwMFACYE54AwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAluGH6iVoK4yQJvKS fq0Nww4qtUt0axyhqHtr9x9J18VY1JyQJq89eaxXhypMFV5Q3CCqeJXjT3ksyAF7 taj325dwamxZdikFDUFxd8TqCmELiwH7DszXe4G4fxOKL7aVovGlGWxsWC5j5+yu qOg3+8QZ6m/YOVMnUtcYwdc0VE50UA0KDIF2OipBYxnuO7wayeyuhASe3NhCuHmg dMTsQ6oVkRNhPRmlByw8DmVGLzhxnBGgRRMq4k5pTfLUHMQzPH9OjjC7wlwyscd1 xhe27Kx1YIbj72w8qatmwnilH6MWE2oX2RC4p9pUFrqhlTaspOoycjXRQLfGGBzc c9YBIQ== -----END CERTIFICATE-----Generated at Tue Apr 8 14:46:31 2025 by rpki-client