$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa File: e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa (raw, json) Hash identifier: nzs9EJbXKyrF1Wo9B8tlOYwiuc56klHLvHAYBpy5Rp8= Subject key identifier: 11:08:21:96:B7:AE:71:79:2F:B2:4E:B4:A1:0A:FC:16:6F:66:38:C2 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285848F92692B8A42543EA62FD1B80 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 23280 IP address blocks: 143.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:92:b8:a4:25:43:ea:62:fd:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=35ed8a33-5c3f-4d89-a484-c07abd0e91d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:da:27:6a:17:89:85:7f:c8:df:42:ce:79: 4b:53:92:07:59:9e:29:04:1b:03:5f:55:b8:9e:95: 09:92:33:31:63:c7:42:c3:00:93:a1:f9:da:92:74: e4:8e:43:be:88:9f:39:d9:32:09:24:44:ef:75:cd: 24:9e:e2:40:d6:8a:b2:f5:e2:6d:35:05:83:f0:ac: 04:1b:e8:4a:c3:88:b7:00:17:9f:b0:92:74:e8:92: cc:fc:ef:ea:37:5b:91:45:76:f3:67:18:b4:b4:f9: 77:b8:3e:7a:cc:ca:f2:30:0b:16:d8:16:37:49:38: b8:cd:19:39:8c:12:52:83:3c:0c:c6:82:76:79:5f: 6a:2b:3c:8d:0f:81:22:bf:4c:ce:c1:a1:70:27:13: 51:e0:e2:16:69:4f:b8:b7:2a:c1:0c:56:67:9a:fc: fb:33:ad:45:a4:5e:fc:c0:57:16:1c:0c:5f:7a:e4: 89:5a:16:4d:ec:a3:20:dc:91:66:ba:1c:66:e0:ab: fa:7f:5e:19:6f:f8:99:87:ba:e6:95:76:41:3a:9e: ae:f7:95:47:6d:2b:c7:f0:e2:09:47:98:5f:02:aa: 4a:38:90:9f:6f:d6:a3:33:a5:22:a0:5f:69:8e:5e: a9:d0:48:21:78:c6:03:d1:ef:68:bc:a1:dd:8b:e0: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:08:21:96:B7:AE:71:79:2F:B2:4E:B4:A1:0A:FC:16:6F:66:38:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b3:f3:67:74:f0:47:a9:6a:7a:de:34:99:7a:78:40:69:27: a9:03:31:d9:40:96:d9:9f:d3:af:55:9c:75:8b:fb:87:eb:f4: 40:49:c5:5f:5f:78:33:57:43:77:18:d6:49:04:8b:cf:66:d4: 9d:f4:33:39:73:d2:41:96:be:5a:a5:dc:40:dd:bb:7b:09:ca: 1c:2a:8c:f9:93:0b:03:39:7f:8b:fd:dd:59:ab:bb:f4:2e:a2: d6:f7:5e:3a:11:be:ae:cc:33:2e:5d:a7:93:75:58:6a:65:93: 9a:1f:95:81:39:c1:51:77:7a:03:06:eb:50:ec:8e:3d:f0:9f: 40:77:60:8c:0b:c4:f7:56:62:71:9b:d9:d8:d2:b2:4f:b7:95: f4:24:1a:8f:96:36:f5:21:93:ed:55:56:cc:d2:26:a6:35:d1: 16:e2:f5:3d:eb:79:2f:c2:2c:ef:e9:8b:eb:bc:9b:0e:5e:1f: eb:db:32:9b:07:71:56:63:45:92:c1:88:22:f4:8f:a9:bf:6b: d4:fa:c5:c3:b0:5c:1c:32:b9:82:4b:92:74:f5:0a:39:7b:b5: b8:26:3c:a1:4c:ff:3a:fa:d6:75:87:4b:94:66:f3:ec:00:30: ac:7a:6c:c1:70:55:9a:bf:52:ec:ac:19:67:98:f2:e7:33:59: 13:40:f6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpK4pCVD6mL9G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MzVlZDhhMzMtNWMzZi00ZDg5LWE0ODQtYzA3YWJkMGU5MWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe/aJ2oXiYV/yN9CznlLU5IHWZ4pBBsDX1W4 npUJkjMxY8dCwwCTofnaknTkjkO+iJ852TIJJETvdc0knuJA1oqy9eJtNQWD8KwE G+hKw4i3ABefsJJ06JLM/O/qN1uRRXbzZxi0tPl3uD56zMryMAsW2BY3STi4zRk5 jBJSgzwMxoJ2eV9qKzyND4Eiv0zOwaFwJxNR4OIWaU+4tyrBDFZnmvz7M61FpF78 wFcWHAxfeuSJWhZN7KMg3JFmuhxm4Kv6f14Zb/iZh7rmlXZBOp6u95VHbSvH8OIJ R5hfAqpKOJCfb9ajM6UioF9pjl6p0EgheMYD0e9ovKHdi+C6QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEIIZa3rnF5L7JOtKEK/BZvZjjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvZTBhZDBmOTMtOWJmZC0z ZDZlLWEwMmItOGYxOTE1ZGUyNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESz82d08EepanreNJl6eEBpJ6kDMdlAltmf069VnHWL+4fr9EBJxV9f eDNXQ3cY1kkEi89m1J30Mzlz0kGWvlql3EDdu3sJyhwqjPmTCwM5f4v93Vmru/Qu otb3XjoRvq7MMy5dp5N1WGplk5oflYE5wVF3egMG61Dsjj3wn0B3YIwLxPdWYnGb 2djSsk+3lfQkGo+WNvUhk+1VVszSJqY10Rbi9T3reS/CLO/pi+u8mw5eH+vbMpsH cVZjRZLBiCL0j6m/a9T6xcOwXBwyuYJLknT1Cjl7tbgmPKFM/zr61nWHS5Rm8+wA MKx6bMFwVZq/UuysGWeY8uczWRNA9nI= -----END CERTIFICATE-----Generated at Sat Apr 5 18:05:53 2025 by rpki-client