$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa File: 1ce20416-7f37-33f9-9a62-528b71678539.roa (raw, json) Hash identifier: K6ju0kPZKHDUG221ojSXetAuhGz3upjL+RGaW0V0dgU= Subject key identifier: 21:6F:32:F4:CA:49:D3:06:9D:10:D7:55:D4:11:55:F5:E0:0C:60:C5 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F432858493C092D33CD11726EE06B2140 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 7018 IP address blocks: 144.208.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:2d:33:cd:11:72:6e:e0:6b:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=10da5350-0dc4-4dde-a2b3-392bf6b5aaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:f2:fd:68:f8:37:14:e9:27:76:35:ad:15: d1:32:0d:2e:c6:61:d6:13:38:89:37:8e:eb:2d:1b: b9:bf:a5:ff:16:50:b3:98:1b:1c:ea:99:0c:79:7e: aa:3c:e1:71:14:fb:dd:25:d4:c6:b8:95:a4:30:5a: b7:e3:38:dc:e1:c0:b8:3f:b1:fb:c5:69:48:9d:81: c6:d5:d3:88:0c:37:51:61:01:98:09:98:5f:d9:76: 96:80:6e:2e:0c:b7:95:7b:37:b4:41:bf:c4:b5:b6: 4a:9d:ce:32:a0:04:a8:73:31:8d:3a:5b:c1:85:1d: 42:fc:5a:43:6e:3b:3e:9f:65:1e:1a:c2:90:4b:ef: 77:5e:99:a2:60:68:c2:0d:7a:b4:aa:94:2b:5f:ac: 0e:c2:c7:be:2f:fb:5c:6c:53:37:23:ce:fa:c8:6e: ee:a0:99:0a:a9:fc:4d:77:b7:a4:4f:a1:6d:e5:52: f5:4c:0e:8e:db:5e:54:79:c6:43:10:4c:f8:6b:e6: 02:bf:71:57:87:fb:d5:61:22:5a:b4:84:43:7a:ea: f9:8e:a8:cf:9e:af:cc:67:f0:2c:fe:c0:f9:00:b8: 34:3e:21:41:06:2e:6c:a8:d6:ff:c4:21:d9:a2:69: be:96:81:09:73:91:30:ae:5d:37:3a:79:80:c5:32: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6F:32:F4:CA:49:D3:06:9D:10:D7:55:D4:11:55:F5:E0:0C:60:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c4:1d:85:c2:3e:8d:43:2a:9c:6f:b1:35:23:24:d3:78:2f: be:14:7e:b3:1d:f3:fd:fa:37:0f:b8:1d:4a:9a:51:16:0d:77: 52:64:1f:a4:48:4a:e5:d1:44:39:cb:4e:93:16:c5:6b:d3:d7: 98:ae:77:73:fd:db:10:c7:6a:40:8d:29:ea:80:8a:cd:75:50: a0:7a:a9:a2:2a:ea:39:51:88:99:c8:63:ff:5e:59:4d:44:3f: 0e:03:b0:64:ae:9e:85:30:da:55:86:24:39:b7:5c:22:25:64: 23:32:10:66:3d:75:ea:52:51:4e:bd:b7:a9:af:1c:80:7a:d8: 9d:5b:f4:77:08:df:cc:b1:5c:aa:9a:5a:2d:3a:fb:6c:b3:ff: 9b:27:a8:94:c1:dd:15:87:f3:6c:66:6f:65:d8:48:9a:1d:0b: f8:6e:3e:ff:c3:e3:d2:44:01:b2:a2:98:cd:67:61:95:fe:c1: 82:fa:09:f6:54:32:fd:6c:1f:26:be:3b:72:27:ae:03:68:d6: 47:c0:08:60:8c:4f:8b:8b:c1:45:28:c4:e1:47:23:61:14:1f: 79:12:fa:df:08:83:9e:9c:23:09:a7:fe:4d:b3:64:f0:76:79: 43:e0:53:60:a2:0c:7e:a7:3d:9b:5d:02:03:9a:b9:86:47:49: 56:e8:cf:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CS0zzRFybuBrIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MTBkYTUzNTAtMGRjNC00ZGRlLWEyYjMtMzkyYmY2YjVhYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdTy/Wj4NxTpJ3Y1rRXRMg0uxmHWEziJN47r LRu5v6X/FlCzmBsc6pkMeX6qPOFxFPvdJdTGuJWkMFq34zjc4cC4P7H7xWlInYHG 1dOIDDdRYQGYCZhf2XaWgG4uDLeVeze0Qb/EtbZKnc4yoASoczGNOlvBhR1C/FpD bjs+n2UeGsKQS+93XpmiYGjCDXq0qpQrX6wOwse+L/tcbFM3I876yG7uoJkKqfxN d7ekT6Ft5VL1TA6O215UecZDEEz4a+YCv3FXh/vVYSJatIRDeur5jqjPnq/MZ/As /sD5ALg0PiFBBi5sqNb/xCHZomm+loEJc5Ewrl03OnmAxTKkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFvMvTKSdMGnRDXVdQRVfXgDGDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMWNlMjA0MTYtN2YzNy0z M2Y5LTlhNjItNTI4YjcxNjc4NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7EHYXCPo1DKpxvsTUjJNN4L74UfrMd8/36Nw+4HUqaURYNd1JkH6RI SuXRRDnLTpMWxWvT15iud3P92xDHakCNKeqAis11UKB6qaIq6jlRiJnIY/9eWU1E Pw4DsGSunoUw2lWGJDm3XCIlZCMyEGY9depSUU69t6mvHIB62J1b9HcI38yxXKqa Wi06+2yz/5snqJTB3RWH82xmb2XYSJodC/huPv/D49JEAbKimM1nYZX+wYL6CfZU Mv1sHya+O3InrgNo1kfACGCMT4uLwUUoxOFHI2EUH3kS+t8Ig56cIwmn/k2zZPB2 eUPgU2CiDH6nPZtdAgOauYZHSVboz80= -----END CERTIFICATE-----Generated at Fri Apr 4 20:59:58 2025 by rpki-client