$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa File: 9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa (raw, json) Hash identifier: d6AY5bTXDL+apg9lfqBTf08uh4xAUwtoiITj28HXfUc= Subject key identifier: 68:43:06:51:79:87:91:61:4A:75:F3:EB:9F:A8:B4:F5:D3:82:CE:8D Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848F4F6935F8B5CF05292087680 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 25649 IP address blocks: 143.55.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:93:5f:8b:5c:f0:52:92:08:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=13b8cc82-ad16-4e4a-817a-9b145f819c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:99:2a:12:e8:8d:97:e9:91:b9:5c:9c:19: dd:3c:89:92:3e:23:97:df:f5:9f:3d:90:65:24:a9: 24:91:27:12:cb:53:04:c9:ba:ba:f4:b9:38:7f:64: 38:f8:88:2e:78:14:51:fd:4f:66:3e:45:84:79:56: 28:1b:ca:cb:47:58:08:e6:56:16:4f:13:c9:47:47: 5e:96:4e:ba:7e:8a:e5:75:ee:04:5c:73:b4:30:40: 94:65:21:9b:41:07:ac:31:4e:5a:67:6a:d7:5d:48: 5c:9f:3d:64:2c:68:2f:be:b9:b5:85:05:56:5f:ce: 56:e3:e0:c6:91:9c:82:76:22:30:ba:04:e4:d9:26: 90:4b:74:1e:9a:21:ed:bc:10:28:96:fb:be:54:fd: 07:e0:a9:f7:48:c3:56:07:0a:09:82:55:70:e5:38: 53:d0:20:26:81:57:f4:ee:a3:cc:27:5d:24:a1:d7: c3:79:38:c6:fc:1b:74:c9:47:72:72:1a:e3:9f:a2: 5b:57:7b:1e:b4:7c:b0:23:ed:03:b7:18:37:de:af: 4e:3d:8c:44:55:c5:45:4d:23:fc:da:1d:96:1d:74: 9b:67:34:f2:84:8a:88:8a:c7:e3:d9:16:82:b4:61: 9b:4c:f3:cf:9a:75:ff:88:9b:d9:db:00:1c:6e:e4: 38:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:43:06:51:79:87:91:61:4A:75:F3:EB:9F:A8:B4:F5:D3:82:CE:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 143.55.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d9:fd:4c:83:c9:88:f5:19:69:8f:33:93:e1:78:6e:c7:3f: 35:05:04:45:ed:24:45:63:2c:2b:eb:43:5f:b6:a6:3b:39:7d: af:df:53:d2:52:42:8a:f2:c9:33:b8:47:2e:7c:a4:07:60:bb: 5c:46:4f:a6:5e:48:ff:12:d6:53:2a:2d:7b:6b:cf:25:85:df: 53:fe:94:2a:5b:8d:48:52:50:22:cb:36:6d:a7:70:99:6f:e1: 99:59:a6:04:67:90:38:b6:57:10:c7:63:41:cc:64:4f:1e:79: 94:97:e1:be:db:62:c2:6b:af:71:f4:76:ed:ab:2f:db:54:e5: 2f:bb:f1:39:bb:c2:8f:32:53:e8:e6:48:b7:0f:3f:11:13:7c: 0f:f7:5e:6b:be:5d:73:89:b4:3d:2d:cf:68:9a:d1:a1:74:b8: b5:67:d6:c3:0c:b8:95:a9:16:05:83:3d:3d:80:51:16:65:d7: 7f:4f:ff:28:5e:9e:40:09:6c:a0:88:8f:8f:4a:8d:e4:be:37: bd:d8:94:ec:93:d4:11:95:44:ff:9b:ea:15:a6:ac:08:c6:37: 8c:86:08:05:8a:44:3e:c5:b6:eb:98:94:44:64:5d:fc:37:76: 41:9e:de:6e:7f:74:17:b8:c9:58:3b:9c:63:06:64:fb:f6:45: e7:69:7c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pNfi1zwUpIIdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MTNiOGNjODItYWQxNi00ZTRhLTgxN2EtOWIxNDVmODE5YzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5CZKhLojZfpkblcnBndPImSPiOX3/WfPZBl JKkkkScSy1MEybq69Lk4f2Q4+IgueBRR/U9mPkWEeVYoG8rLR1gI5lYWTxPJR0de lk66forlde4EXHO0MECUZSGbQQesMU5aZ2rXXUhcnz1kLGgvvrm1hQVWX85W4+DG kZyCdiIwugTk2SaQS3QemiHtvBAolvu+VP0H4Kn3SMNWBwoJglVw5ThT0CAmgVf0 7qPMJ10kodfDeTjG/Bt0yUdychrjn6JbV3setHywI+0Dtxg33q9OPYxEVcVFTSP8 2h2WHXSbZzTyhIqIisfj2RaCtGGbTPPPmnX/iJvZ2wAcbuQ4wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhDBlF5h5FhSnXz65+otPXTgs6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvOWYwZmU0ZWMtNTQwOC0z NDAxLTkzYjctMGQxZmQ5NWU0ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjzdUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbZ/UyDyYj1GWmPM5PheG7HPzUFBEXtJEVjLCvrQ1+2pjs5fa/fU9JS QoryyTO4Ry58pAdgu1xGT6ZeSP8S1lMqLXtrzyWF31P+lCpbjUhSUCLLNm2ncJlv 4ZlZpgRnkDi2VxDHY0HMZE8eeZSX4b7bYsJrr3H0du2rL9tU5S+78Tm7wo8yU+jm SLcPPxETfA/3Xmu+XXOJtD0tz2ia0aF0uLVn1sMMuJWpFgWDPT2AURZl139P/yhe nkAJbKCIj49KjeS+N73YlOyT1BGVRP+b6hWmrAjGN4yGCAWKRD7FtuuYlERkXfw3 dkGe3m5/dBe4yVg7nGMGZPv2RedpfCw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:03:59 2025 by rpki-client