$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa File: a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa (raw, json) Hash identifier: VqNYaW9+tTEfSUpWTWiu9DebNoF0LXHGjEw9BXe+VaI= Subject key identifier: 84:45:9E:70:3B:CF:BF:34:7F:3E:95:ED:5D:FE:D0:6B:94:95:46:A3 Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F43285848F926995CAF6DDC937DEA1D80 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 216.120.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:99:5c:af:6d:dc:93:7d:ea:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a390c8f2-8b1e-41dd-89d8-71c704f0fb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:87:d4:96:13:65:2e:59:4e:49:cd:39:5e: a7:26:0c:9e:40:2b:9a:5e:ae:0a:6b:5d:19:14:95: ef:65:32:42:c7:5e:7e:11:3c:a4:c7:a9:b4:5b:85: 3a:6c:0b:46:d7:17:8a:cf:cc:a1:80:4c:ee:0c:4e: e2:b3:36:2f:7e:ae:b6:d7:cd:ba:90:0d:ed:2f:ad: 5a:3d:2f:56:92:c8:d1:26:92:a7:0f:0d:75:06:98: 9d:52:34:2e:ab:51:9e:9c:cb:81:76:e1:0c:54:66: fa:0d:b5:7a:88:4d:58:a1:83:d4:e6:e4:15:8b:02: 5a:79:83:1e:79:e8:52:59:9e:a7:71:3c:84:1a:0d: 76:d3:f0:45:67:61:aa:29:7f:f1:ef:90:62:fd:b4: 3f:d9:d3:36:5c:51:04:3f:1e:ea:8c:b0:a3:59:cb: fb:30:8e:30:e4:55:23:c1:a6:27:4d:8c:de:33:7b: 2f:6d:02:04:99:f1:30:77:56:f1:d2:42:9e:88:73: 95:e2:11:af:d0:a4:2d:d3:0b:67:a2:c2:66:6a:e9: 22:b7:2f:b9:b3:b2:b5:14:c9:2c:87:1d:8f:22:dc: 77:dc:71:77:f2:bb:c9:c8:fa:ac:36:64:d0:6b:7b: 0b:8d:57:1b:38:f8:8c:01:88:bf:4a:62:53:e5:55: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:45:9E:70:3B:CF:BF:34:7F:3E:95:ED:5D:FE:D0:6B:94:95:46:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 216.120.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:86:af:95:3e:dd:33:73:9e:bf:44:f3:72:70:38:61:f5:3a: 38:5b:9c:01:96:6f:78:df:b5:bb:b8:eb:6c:ad:51:07:6c:33: 04:c3:bb:78:6e:23:b9:1e:b4:f9:dd:3f:0e:a0:b8:ee:f2:38: 51:af:38:a0:2d:4b:8b:5c:0c:e0:8b:57:28:fb:53:53:e1:70: 24:57:0a:a0:ce:6e:9e:0f:19:8f:b7:b6:19:b3:da:fd:1a:74: 5d:29:97:b0:20:33:4d:d7:e8:a1:d5:40:7d:5e:35:99:91:99: c7:50:2b:ea:5d:5f:67:7a:21:d7:91:4f:86:46:02:b9:39:ef: 98:f5:11:cb:1d:b7:53:12:25:78:9c:86:8d:5a:df:9d:13:6e: 54:5e:01:e9:f1:f6:22:a0:56:1a:29:94:0e:cb:72:8a:ff:f9: 25:75:1a:d6:23:e0:37:a3:33:93:a1:d9:ef:c8:56:46:d6:f5: ed:38:97:a9:67:f7:6b:07:c7:67:c4:73:06:67:b2:0c:f6:7b: 43:72:20:9b:1f:22:85:35:6e:e5:b1:de:fd:63:d8:f7:0c:3d: 1d:82:1d:4d:cf:82:bb:c2:8d:83:cb:ab:05:48:ca:56:49:6e: 80:24:2b:9f:d6:8d:fe:6c:1d:ed:e2:3a:1f:65:95:86:c8:43: fa:8b:85:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jplcr23ck33qHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTM5MGM4ZjItOGIxZS00MWRkLTg5ZDgtNzFjNzA0ZjBmYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNqH1JYTZS5ZTknNOV6nJgyeQCuaXq4Ka10Z FJXvZTJCx15+ETykx6m0W4U6bAtG1xeKz8yhgEzuDE7iszYvfq621826kA3tL61a PS9WksjRJpKnDw11BpidUjQuq1GenMuBduEMVGb6DbV6iE1YoYPU5uQViwJaeYMe eehSWZ6ncTyEGg120/BFZ2GqKX/x75Bi/bQ/2dM2XFEEPx7qjLCjWcv7MI4w5FUj waYnTYzeM3svbQIEmfEwd1bx0kKeiHOV4hGv0KQt0wtnosJmaukity+5s7K1FMks hx2PItx33HF38rvJyPqsNmTQa3sLjVcbOPiMAYi/SmJT5VXlYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRFnnA7z780fz6V7V3+0GuUlUajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvYTVkODBiNmEtMWE5Ny0z YjI2LTkwMzctNjA4ZTBmMzgwYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWGr5U+3TNznr9E83JwOGH1OjhbnAGWb3jftbu462ytUQdsMwTDu3hu I7ketPndPw6guO7yOFGvOKAtS4tcDOCLVyj7U1PhcCRXCqDObp4PGY+3thmz2v0a dF0pl7AgM03X6KHVQH1eNZmRmcdQK+pdX2d6IdeRT4ZGArk575j1Ecsdt1MSJXic ho1a350TblReAenx9iKgVhoplA7Lcor/+SV1GtYj4DejM5Oh2e/IVkbW9e04l6ln 92sHx2fEcwZnsgz2e0NyIJsfIoU1buWx3v1j2PcMPR2CHU3PgrvCjYPLqwVIylZJ boAkK5/Wjf5sHe3iOh9llYbIQ/qLhb8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:51:37 2025 by rpki-client