$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/93f91ac0-3af0-311d-8a38-a2a2448b7b75.roa File: 93f91ac0-3af0-311d-8a38-a2a2448b7b75.roa (raw, json) Hash identifier: xMjpdvV1mSuN6dir9aNq04LiCVwRkTjYOFeH+gyTbqU= Subject key identifier: D6:14:90:FC:1B:20:00:AB:B0:69:35:98:2D:49:4B:1A:C5:4C:A0:44 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285848FD569C003807A262BBA0F100 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/93f91ac0-3af0-311d-8a38-a2a2448b7b75.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 142.147.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:9c:00:38:07:a2:62:bb:a0:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=aa164333-e772-4804-97d9-ff5c7721cb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:0e:b0:27:1d:70:1b:0f:5f:de:75:fc:85: 08:ea:20:33:bc:ee:ef:f8:94:c1:69:7a:a0:a6:f1: 16:38:f3:49:49:25:c4:cb:7c:77:f8:b5:7f:85:ba: e5:cb:6d:20:3a:ec:cd:94:c9:e7:2a:ce:2c:2d:fb: 84:c6:e2:c1:c6:a0:aa:a2:16:a0:64:e5:21:62:6d: 49:c5:ee:6a:a5:8f:07:33:61:c4:62:ab:57:c7:e1: 30:df:ac:5c:b7:aa:88:ec:9f:10:a7:6a:16:ed:c7: 27:8f:1a:22:cf:29:74:64:98:96:ea:13:f3:5d:c3: 93:b7:da:21:44:d8:82:d9:0f:ec:c1:d1:aa:1b:49: 23:63:56:21:d3:e8:b6:72:8e:3f:94:cc:70:1c:63: 24:a6:0c:e2:b0:05:76:04:71:d2:ed:37:f7:99:14: 79:34:96:f4:04:c0:78:71:5e:eb:37:10:cc:93:d6: ce:ea:10:ee:96:e8:30:f4:07:e2:02:38:65:50:37: 98:c9:00:89:16:2e:2c:e3:2e:c3:aa:c4:e0:e7:1b: 1f:f5:91:6f:35:9d:a1:2b:4c:9f:19:59:85:eb:2d: 24:97:32:a1:e7:23:5d:52:68:5c:ac:52:4c:09:62: 1f:b6:f2:6a:9a:38:66:d6:03:1f:3c:6a:ec:a6:fd: 2b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:14:90:FC:1B:20:00:AB:B0:69:35:98:2D:49:4B:1A:C5:4C:A0:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/93f91ac0-3af0-311d-8a38-a2a2448b7b75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 142.147.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c1:03:d8:f5:ff:a5:e8:78:50:98:93:62:d3:c9:b8:b3:69: b4:d1:39:ae:f0:1a:53:9b:11:52:ee:93:1f:0d:9b:39:07:93: bd:69:03:81:3b:13:d7:4e:cf:83:21:86:b5:2c:cc:3e:92:ee: 66:1b:58:10:98:bf:70:cf:c9:0a:8c:e5:83:50:73:b0:70:8e: 00:90:21:8f:8f:5a:48:a7:1a:0c:e4:24:9b:56:e0:3d:1e:74: cb:5c:11:cc:76:e9:4b:85:1c:5e:40:5d:b1:5d:8c:3d:49:be: ec:3d:40:d9:df:7d:8d:7f:53:07:78:19:76:b6:a0:c0:19:48: 50:d6:65:d3:f4:0f:5d:47:5b:d5:e7:2f:f5:4e:ef:2f:28:34: 25:d8:01:4f:bc:0d:53:c3:ef:94:4f:d3:39:42:9c:22:86:69: 1a:6c:79:c7:1d:13:d8:e3:6d:ad:91:90:01:54:e2:85:ce:e1: fd:1b:88:43:c8:ce:23:df:56:ec:fd:d8:87:5f:63:a9:d4:8b: 82:11:de:5e:6a:4c:f9:0a:74:56:97:aa:d5:3f:27:7c:0f:91: cc:74:6a:6f:3c:84:f9:18:05:75:3c:be:30:1e:b5:8b:a8:39: 91:e1:69:15:16:78:77:be:38:32:82:7f:35:dc:5e:d4:ce:33: cd:59:25:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VpwAOAeiYrug8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWExNjQzMzMtZTc3Mi00ODA0LTk3ZDktZmY1Yzc3MjFjYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxwOsCcdcBsPX951/IUI6iAzvO7v+JTBaXqg pvEWOPNJSSXEy3x3+LV/hbrly20gOuzNlMnnKs4sLfuExuLBxqCqohagZOUhYm1J xe5qpY8HM2HEYqtXx+Ew36xct6qI7J8Qp2oW7ccnjxoizyl0ZJiW6hPzXcOTt9oh RNiC2Q/swdGqG0kjY1Yh0+i2co4/lMxwHGMkpgzisAV2BHHS7Tf3mRR5NJb0BMB4 cV7rNxDMk9bO6hDulugw9AfiAjhlUDeYyQCJFi4s4y7DqsTg5xsf9ZFvNZ2hK0yf GVmF6y0klzKh5yNdUmhcrFJMCWIftvJqmjhm1gMfPGrspv0r2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYUkPwbIACrsGk1mC1JSxrFTKBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvOTNmOTFhYzAtM2FmMC0z MTFkLThhMzgtYTJhMjQ0OGI3Yjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLBA9j1/6XoeFCYk2LTybizabTROa7wGlObEVLukx8NmzkHk71pA4E7 E9dOz4MhhrUszD6S7mYbWBCYv3DPyQqM5YNQc7BwjgCQIY+PWkinGgzkJJtW4D0e dMtcEcx26UuFHF5AXbFdjD1Jvuw9QNnffY1/Uwd4GXa2oMAZSFDWZdP0D11HW9Xn L/VO7y8oNCXYAU+8DVPD75RP0zlCnCKGaRpseccdE9jjba2RkAFU4oXO4f0biEPI ziPfVuz92IdfY6nUi4IR3l5qTPkKdFaXqtU/J3wPkcx0am88hPkYBXU8vjAetYuo OZHhaRUWeHe+ODKCfzXcXtTOM81ZJYQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:13:02 2025 by rpki-client