$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa File: 15122190-e0af-3278-8750-551255abdfdb.roa (raw, json) Hash identifier: xeEvAAuSjZHPwu8otwYXnhyvjDnwATFaFZ1lMdZfhP8= Subject key identifier: 67:AC:AD:37:3D:85:37:C6:D6:35:83:E1:6F:6A:AE:0C:07:97:F3:DE Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848F4F6934C059E660B4C868600 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 25649 IP address blocks: 142.147.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:93:4c:05:9e:66:0b:4c:86:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=4d293846-3b55-41ae-acac-425355bbb382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:14:2c:b1:79:c1:8b:35:f6:03:d2:1f:ad: ce:f6:c7:08:f7:2a:40:e1:c5:f0:c2:f6:3a:3d:7b: db:12:ee:6c:71:97:9d:ac:2e:dd:ac:de:67:5c:79: 08:a7:d4:fe:46:a7:47:dd:1c:3f:2c:05:3f:1d:77: 31:53:6a:c1:b3:60:e7:2b:98:3f:4e:5a:d9:30:51: 42:65:a0:db:71:da:e9:ed:4a:da:58:3a:0b:52:20: c7:a5:4a:3b:e0:de:71:22:80:a2:ec:62:db:41:27: 47:6a:57:37:5b:de:5b:3a:3c:eb:24:9f:15:88:f3: 7c:03:1d:1d:83:f7:9e:0f:3c:3d:db:b0:ee:2b:cd: 57:48:f8:e3:2a:c6:33:4e:64:36:45:a3:b2:a5:74: f6:46:70:f8:88:13:de:ed:82:31:ab:d2:63:ad:4b: 52:2f:7f:e7:55:f6:08:a4:c5:31:77:d0:62:dd:83: 68:59:f7:45:dd:88:02:22:a2:2f:94:b8:73:64:a3: 51:d3:7b:bc:36:64:49:7b:82:1a:e6:65:90:5d:11: 82:75:48:2a:79:41:9d:06:45:6a:8e:24:a2:a5:96: 5f:e9:a4:32:41:be:3b:b3:1e:ca:ea:c8:05:f5:1f: fb:24:e6:24:89:90:38:34:70:2f:f3:9c:d4:ee:16: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AC:AD:37:3D:85:37:C6:D6:35:83:E1:6F:6A:AE:0C:07:97:F3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 142.147.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d7:89:50:7c:e5:97:5b:d6:d1:0a:b2:09:9a:5c:77:1b:4a: ea:a9:2a:3b:09:91:6d:76:f3:cb:1e:28:ee:a7:83:d4:17:5b: cf:1e:d4:62:51:de:79:58:f2:f3:b4:99:b1:ab:a4:72:d7:98: 87:ff:ce:77:2d:a1:47:43:4a:ca:45:4f:10:b6:d0:ad:ab:a2: 4f:a8:51:85:e3:4e:a6:1d:d4:a2:67:66:ef:73:bd:25:bd:7c: a0:85:ad:e1:04:46:dd:0c:92:e9:e9:29:b5:3a:df:73:be:04: c0:e1:7d:ce:5c:11:32:49:92:c4:ca:c3:df:5d:7b:c6:51:b0: f9:7b:59:8f:c7:90:a7:1d:fe:af:de:a2:cf:b7:0d:66:99:2b: fb:f7:76:8c:c2:b2:53:9b:ce:1a:91:04:a4:b3:f1:72:3a:34: f8:39:ad:a1:91:b4:db:b3:20:00:9b:e4:43:21:75:a4:db:c1: 42:00:18:81:3f:23:fd:a0:fa:03:06:ee:32:4d:bf:f4:1f:32: 93:6e:fe:ff:de:61:c9:61:24:bb:b8:d0:9a:e2:a7:79:0c:9d: 50:de:43:a5:4b:ce:b6:bd:81:2c:8d:86:64:70:a6:da:2e:7b: 2e:42:32:53:f4:4b:11:66:c8:e1:38:8b:8f:4f:55:7b:7c:f1: 05:0d:9a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pNMBZ5mC0yGhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NGQyOTM4NDYtM2I1NS00MWFlLWFjYWMtNDI1MzU1YmJiMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PAULLF5wYs19gPSH63O9scI9ypA4cXwwvY6 PXvbEu5scZedrC7drN5nXHkIp9T+RqdH3Rw/LAU/HXcxU2rBs2DnK5g/TlrZMFFC ZaDbcdrp7UraWDoLUiDHpUo74N5xIoCi7GLbQSdHalc3W95bOjzrJJ8ViPN8Ax0d g/eeDzw927DuK81XSPjjKsYzTmQ2RaOypXT2RnD4iBPe7YIxq9JjrUtSL3/nVfYI pMUxd9Bi3YNoWfdF3YgCIqIvlLhzZKNR03u8NmRJe4Ia5mWQXRGCdUgqeUGdBkVq jiSipZZf6aQyQb47sx7K6sgF9R/7JOYkiZA4NHAv85zU7hYakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGesrTc9hTfG1jWD4W9qrgwHl/PeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvMTUxMjIxOTAtZTBhZi0z Mjc4LTg3NTAtNTUxMjU1YWJkZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjpNUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3XiVB85Zdb1tEKsgmaXHcbSuqpKjsJkW1288seKO6ng9QXW88e1GJR 3nlY8vO0mbGrpHLXmIf/znctoUdDSspFTxC20K2rok+oUYXjTqYd1KJnZu9zvSW9 fKCFreEERt0MkunpKbU633O+BMDhfc5cETJJksTKw99de8ZRsPl7WY/HkKcd/q/e os+3DWaZK/v3dozCslObzhqRBKSz8XI6NPg5raGRtNuzIACb5EMhdaTbwUIAGIE/ I/2g+gMG7jJNv/QfMpNu/v/eYclhJLu40Jrip3kMnVDeQ6VLzra9gSyNhmRwptou ey5CMlP0SxFmyOE4i49PVXt88QUNmhQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:13:16 2025 by rpki-client