$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/11245c19-82e6-36f0-819b-edac9c8b926a.roa File: 11245c19-82e6-36f0-819b-edac9c8b926a.roa (raw, json) Hash identifier: SeV+FHfeiPHkNw9Z/fwpc537SG1oiZ7pVonzVVJI7QQ= Subject key identifier: FA:AD:72:6B:1D:91:D7:3D:9B:A8:07:EC:94:80:81:F0:46:7B:2C:F9 Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F43285848F926A13979C989A1304BF740 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/11245c19-82e6-36f0-819b-edac9c8b926a.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 216.120.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a1:39:79:c9:89:a1:30:4b:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b4479aca-d396-4e52-8bb9-be856566a6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:ab:fb:04:ca:66:49:65:df:38:19:3c:ef: e9:3c:e7:f6:34:18:43:60:5b:8e:6e:5b:95:e9:0e: 3f:e7:ae:e7:db:10:b5:1a:a9:85:46:d1:77:15:f0: ca:a6:39:70:6a:14:78:20:e5:ef:65:d8:1f:61:f0: 11:31:7e:99:5b:97:e0:1d:be:b9:10:2f:54:da:ca: 42:bc:2f:6e:16:83:42:9b:83:24:cd:80:3f:12:8d: da:1f:9b:65:d8:3d:17:2a:3e:9f:08:2c:5c:f4:86: 16:f5:15:3f:a4:78:71:fc:27:f1:a5:4d:21:8c:93: 59:44:a0:99:47:2a:e2:34:32:d3:5d:1b:98:ba:d0: 71:12:9d:05:c5:d8:d8:09:10:1e:eb:28:15:e6:98: 05:36:33:20:70:fb:44:5a:d8:63:85:b2:a0:66:9d: 1a:12:c1:1c:67:d1:00:a5:b2:33:aa:38:71:3d:c1: 6f:7e:b0:9a:44:1c:89:6f:71:54:21:13:63:af:ea: bc:1b:eb:e6:e9:77:06:dd:86:57:2a:70:b8:3d:f5: 30:0c:4b:b7:2e:75:11:37:9c:e1:6e:30:b5:7c:82: 4f:18:ec:84:63:0f:cb:dc:1a:5b:5d:b2:35:fc:c5: c0:aa:c3:dd:8c:4c:00:09:3b:ec:80:23:8f:43:aa: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AD:72:6B:1D:91:D7:3D:9B:A8:07:EC:94:80:81:F0:46:7B:2C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/11245c19-82e6-36f0-819b-edac9c8b926a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 216.120.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:82:13:c6:b3:95:e0:fe:de:09:b9:97:52:4a:89:42:e8:c9: 7c:a3:72:a5:ee:1f:4c:dc:62:c5:7a:82:c0:9d:14:57:a4:74: 29:ad:9e:a0:55:5c:6c:4b:b3:c5:b7:dd:7a:86:9a:a1:97:6e: ae:b7:30:53:42:ec:f0:e3:bb:d9:1b:c4:93:d9:e6:9d:1d:d9: 09:6e:a3:73:59:ae:29:66:20:20:9b:5a:7b:eb:77:84:86:13: b4:3b:ad:18:fa:d7:a2:8d:05:e3:77:7d:da:c6:4e:ff:82:2e: 8c:39:f8:c3:b7:70:3e:4f:63:4d:3c:09:23:e4:cf:59:27:d7: 93:d8:ac:29:af:b4:84:33:55:a0:cd:85:7c:38:0f:9b:3c:6c: ea:ba:45:40:dd:74:37:73:5b:eb:d1:43:c7:be:f1:65:ab:93: 09:41:56:74:c2:39:53:94:df:4a:19:04:35:01:53:98:71:7f: ff:f6:9f:76:18:f1:08:ac:c6:ee:bb:54:02:29:f4:02:f8:d8: 67:55:d8:e4:95:b7:3c:03:ee:3d:22:0a:7e:89:90:5b:b0:42: d1:e3:a2:84:2f:6f:8e:df:d1:e4:fa:9d:3d:2d:63:dc:50:12: 04:3a:87:37:d3:ab:e6:1c:2f:9e:19:20:c2:bf:d5:6d:13:77: 86:38:61:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqE5ecmJoTBL90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YjQ0NzlhY2EtZDM5Ni00ZTUyLThiYjktYmU4NTY1NjZhNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+er+wTKZkll3zgZPO/pPOf2NBhDYFuObluV 6Q4/567n2xC1GqmFRtF3FfDKpjlwahR4IOXvZdgfYfARMX6ZW5fgHb65EC9U2spC vC9uFoNCm4MkzYA/Eo3aH5tl2D0XKj6fCCxc9IYW9RU/pHhx/CfxpU0hjJNZRKCZ RyriNDLTXRuYutBxEp0FxdjYCRAe6ygV5pgFNjMgcPtEWthjhbKgZp0aEsEcZ9EA pbIzqjhxPcFvfrCaRByJb3FUIRNjr+q8G+vm6XcG3YZXKnC4PfUwDEu3LnURN5zh bjC1fIJPGOyEYw/L3BpbXbI1/MXAqsPdjEwACTvsgCOPQ6qFEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqtcmsdkdc9m6gH7JSAgfBGeyz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvMTEyNDVjMTktODJlNi0z NmYwLTgxOWItZWRhYzljOGI5MjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOCE8azleD+3gm5l1JKiULoyXyjcqXuH0zcYsV6gsCdFFekdCmtnqBV XGxLs8W33XqGmqGXbq63MFNC7PDju9kbxJPZ5p0d2Qluo3NZrilmICCbWnvrd4SG E7Q7rRj616KNBeN3fdrGTv+CLow5+MO3cD5PY008CSPkz1kn15PYrCmvtIQzVaDN hXw4D5s8bOq6RUDddDdzW+vRQ8e+8WWrkwlBVnTCOVOU30oZBDUBU5hxf//2n3YY 8Qisxu67VAIp9AL42GdV2OSVtzwD7j0iCn6JkFuwQtHjooQvb47f0eT6nT0tY9xQ EgQ6hzfTq+YcL54ZIMK/1W0Td4Y4Yag= -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:04 2025 by rpki-client