$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa File: 15122190-e0af-3278-8750-551255abdfdb.roa (raw, json) Hash identifier: n32qRl/d3iNwtED58B2XvQ/NXEzR8WmZ598gygFTWJI= Subject key identifier: FF:68:C3:23:D9:93:7C:61:DA:CE:E0:CC:7A:EE:CE:9B:C6:A8:47:93 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285849D42FA437481B3F51DAE15D40 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 25649 IP address blocks: 142.147.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a4:37:48:1b:3f:51:da:e1:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=99d3ad24-ae58-4990-8f8f-a7e3950137a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dc:ab:ab:5b:51:92:3f:ea:bf:9f:12:ca:16: b3:87:18:e2:94:57:59:2d:a6:09:87:d7:a3:de:9e: 89:c3:ea:39:fe:0e:ed:b9:0f:6d:42:cf:93:13:74: 36:85:ab:76:49:d6:14:16:59:46:1c:c9:70:65:e9: f1:8b:fe:ad:d7:90:98:8b:9c:f2:0e:df:b9:5f:49: 57:67:c8:5f:88:e0:56:13:04:0a:12:b7:d4:32:14: ce:62:f4:f6:2c:ec:e7:d0:22:dc:b2:2d:ff:a2:de: b9:5a:35:ff:11:6d:88:1f:49:9a:55:a1:93:ba:19: 59:23:11:e1:99:c0:bc:5c:53:2b:d1:6a:8a:aa:e0: ef:29:cd:1c:87:4d:16:0c:7a:40:0a:ed:47:cc:80: e7:00:90:a6:08:04:4b:84:bf:14:26:32:62:03:43: 91:ca:67:2b:2f:8a:f0:ce:57:1e:95:c6:cd:ad:c0: 76:36:fc:d2:7b:ca:af:12:52:81:ba:62:52:0c:b2: df:c8:0b:aa:ee:7e:5b:16:a9:6a:28:81:60:7a:e6: 44:63:43:8e:0f:c9:5e:d1:b2:fc:32:8f:e8:a6:98: 51:0d:16:42:a4:56:c1:05:47:06:4b:f3:d2:27:d5: d2:24:0f:36:52:18:f9:fd:1e:75:dc:16:53:dd:7c: 91:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:68:C3:23:D9:93:7C:61:DA:CE:E0:CC:7A:EE:CE:9B:C6:A8:47:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/15122190-e0af-3278-8750-551255abdfdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 142.147.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:55:b8:74:d9:88:91:49:c8:f2:d8:77:59:04:34:b7:12:62: 63:3c:b7:ea:fd:cf:ae:cd:2a:b7:21:41:fa:47:a2:96:4e:1e: ba:6e:3c:bd:10:53:1b:89:5d:8d:69:dd:5f:c7:63:4b:2d:c3: 3e:b6:91:fa:93:a6:62:5a:28:4d:70:7c:c5:1f:f6:c1:ff:fb: 1c:0a:0e:fb:1d:1b:e9:7e:dd:1e:69:d1:04:d2:82:37:b0:3c: 63:ec:c3:09:fd:ba:58:70:34:bf:60:cd:07:2c:b4:00:79:39: b5:f8:4c:2a:2f:11:61:48:f6:18:c1:73:3b:22:f3:a6:e3:d7: 2d:a0:49:3f:1e:2e:aa:73:72:f0:06:3f:e6:18:74:a8:df:34: 01:91:bd:3a:a8:e8:f1:0f:05:c1:c9:89:38:ca:c1:42:37:43: 48:e9:8c:4f:ff:02:c4:e3:74:c9:fd:86:02:25:bc:da:be:07: cb:de:3a:3a:e3:16:d4:80:f7:3d:21:f4:4d:00:fc:ba:74:93: 86:32:d2:b0:51:8e:98:2c:20:8f:ed:bb:f8:c0:65:5a:4a:b4: 54:2f:e4:f6:ef:00:36:c7:25:2d:42:1a:5f:39:3f:b3:2b:fd: a4:08:8a:1e:57:f4:a0:e1:11:86:e2:a6:12:b8:da:ca:64:af: 3f:46:69:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6Q3SBs/UdrhXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTlkM2FkMjQtYWU1OC00OTkwLThmOGYtYTdlMzk1MDEzN2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdyrq1tRkj/qv58SyhazhxjilFdZLaYJh9ej 3p6Jw+o5/g7tuQ9tQs+TE3Q2hat2SdYUFllGHMlwZenxi/6t15CYi5zyDt+5X0lX Z8hfiOBWEwQKErfUMhTOYvT2LOzn0CLcsi3/ot65WjX/EW2IH0maVaGTuhlZIxHh mcC8XFMr0WqKquDvKc0ch00WDHpACu1HzIDnAJCmCARLhL8UJjJiA0ORymcrL4rw zlcelcbNrcB2NvzSe8qvElKBumJSDLLfyAuq7n5bFqlqKIFgeuZEY0OOD8le0bL8 Mo/opphRDRZCpFbBBUcGS/PSJ9XSJA82Uhj5/R513BZT3XyRpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9owyPZk3xh2s7gzHruzpvGqEeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvMTUxMjIxOTAtZTBhZi0z Mjc4LTg3NTAtNTUxMjU1YWJkZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjpNUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdVuHTZiJFJyPLYd1kENLcSYmM8t+r9z67NKrchQfpHopZOHrpuPL0Q UxuJXY1p3V/HY0stwz62kfqTpmJaKE1wfMUf9sH/+xwKDvsdG+l+3R5p0QTSgjew PGPswwn9ulhwNL9gzQcstAB5ObX4TCovEWFI9hjBczsi86bj1y2gST8eLqpzcvAG P+YYdKjfNAGRvTqo6PEPBcHJiTjKwUI3Q0jpjE//AsTjdMn9hgIlvNq+B8veOjrj FtSA9z0h9E0A/Lp0k4Yy0rBRjpgsII/tu/jAZVpKtFQv5PbvADbHJS1CGl85P7Mr /aQIih5X9KDhEYbiphK42spkrz9GaVg= -----END CERTIFICATE-----Generated at Wed Jul 9 16:38:24 2025 by rpki-client