$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/1b83e3fc-75d8-37de-b0fe-f403c6820286.roa File: 1b83e3fc-75d8-37de-b0fe-f403c6820286.roa (raw, json) Hash identifier: MOm9HKiNaJVIEDtQyfgdd+xCBeU7iIPkuiME48CmhMQ= Subject key identifier: 75:7C:55:6B:F7:AD:8F:20:15:DC:3C:F8:B4:E3:27:A6:13:BC:8E:54 Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Certificate serial: 010D0C9F43285848A29B47ECBAF9D88D55D51100 Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/1b83e3fc-75d8-37de-b0fe-f403c6820286.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 19437 IP address blocks: 142.214.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:47:ec:ba:f9:d8:8d:55:d5:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=4c35e45b-a64c-4579-8c69-fc8a9447fa5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:15:cd:c2:7f:fe:db:12:59:09:03:70:18: 65:5c:dc:36:a3:f0:39:16:62:54:ad:89:2d:2d:9e: c7:c4:ff:18:9b:f3:eb:d0:37:62:9f:ac:83:6c:d7: 43:7c:27:ad:c9:52:cf:51:57:f3:4b:cb:23:3d:e8: 16:22:60:71:de:ba:3c:47:28:15:b6:6f:ff:3a:88: e5:f0:c8:ff:e5:8c:75:1e:ac:39:07:44:c8:65:b9: f6:86:69:3e:da:ba:df:47:3d:7e:0f:24:f7:5e:f7: ad:24:75:c4:1d:5f:f3:af:3f:22:27:99:44:e5:f0: 65:7a:3e:f2:a0:b0:5d:90:01:c3:8f:65:8a:e2:b4: 24:ca:6e:4a:ed:4d:7a:69:ac:b5:ad:41:7d:1d:75: cd:e1:ed:b4:98:57:70:13:3d:3f:92:cc:be:c2:24: 55:1b:2b:ac:dc:d8:73:39:be:91:74:e1:40:59:52: b1:14:df:34:ce:a8:9b:8d:0f:35:ff:96:13:bf:66: 0b:36:74:7d:de:eb:a1:75:9e:a4:0c:a9:b8:fe:74: 96:87:05:e6:ae:d4:2a:7c:7c:56:d4:57:55:86:eb: 00:4d:84:bf:1c:4b:01:96:02:e3:48:5a:b5:81:76: 9d:32:98:56:e2:67:63:d8:fc:11:42:76:89:46:b6: 6d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7C:55:6B:F7:AD:8F:20:15:DC:3C:F8:B4:E3:27:A6:13:BC:8E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/1b83e3fc-75d8-37de-b0fe-f403c6820286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl X509v3 Authority Key Identifier: keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer sbgp-ipAddrBlock: critical IPv4: 142.214.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:07:89:c1:23:be:3a:34:2e:dd:31:42:7a:8b:d4:ef:80:c0: 8a:cc:8f:12:8e:b0:b2:29:ee:a1:55:19:17:20:6b:39:8b:fc: 4f:83:5b:6b:c3:90:dc:99:f7:8e:fb:c4:41:27:47:dc:d7:8c: 91:35:5f:57:eb:0f:b3:bc:35:82:e7:74:d4:39:08:1c:a4:5a: 83:5b:76:7e:41:9f:88:80:54:5f:b3:00:3f:26:53:09:e1:da: a4:20:68:9f:14:11:46:f6:43:9b:73:e9:12:f5:f8:43:08:6b: ed:a8:fb:ba:56:23:68:4f:5c:12:dc:76:f7:80:0f:28:ee:67: 6e:ad:7c:49:eb:91:69:ec:3e:a9:93:76:e2:81:7f:f2:74:59: f3:f8:76:3b:87:45:63:db:6e:d7:7f:63:11:c2:9b:8b:78:4e: 02:02:36:39:be:0d:32:bc:08:d7:62:64:aa:e3:d1:21:fb:81: a5:d1:9c:35:49:a6:ee:07:b9:2b:e7:0a:8e:50:31:8d:e5:9b: 86:4f:b3:ae:35:31:07:d5:54:dd:dd:c1:7c:f7:53:0c:cc:cb: 77:d4:9b:04:98:17:64:01:9f:74:c7:ba:1b:fe:ae:49:18:eb: fe:c7:4e:52:0d:dc:e2:60:0f:39:4f:e7:ec:a9:a9:2a:3f:24: 90:1f:0f:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0fsuvnYjVXVEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3 ODYxMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NGMzNWU0NWItYTY0Yy00NTc5LThjNjktZmM4YTk0NDdmYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfwVzcJ//tsSWQkDcBhlXNw2o/A5FmJUrYkt LZ7HxP8Ym/Pr0Ddin6yDbNdDfCetyVLPUVfzS8sjPegWImBx3ro8RygVtm//Oojl 8Mj/5Yx1Hqw5B0TIZbn2hmk+2rrfRz1+DyT3XvetJHXEHV/zrz8iJ5lE5fBlej7y oLBdkAHDj2WK4rQkym5K7U16aay1rUF9HXXN4e20mFdwEz0/ksy+wiRVGyus3Nhz Ob6RdOFAWVKxFN80zqibjQ81/5YTv2YLNnR93uuhdZ6kDKm4/nSWhwXmrtQqfHxW 1FdVhusATYS/HEsBlgLjSFq1gXadMphW4mdj2PwRQnaJRrZt1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV8VWv3rY8gFdw8+LTjJ6YTvI5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvMWI4M2UzZmMtNzVkOC0z N2RlLWIwZmUtZjQwM2M2ODIwMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3 Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4 ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAHicEjvjo0Lt0xQnqL1O+AwIrMjxKOsLIp7qFVGRcgazmL/E+DW2vD kNyZ9477xEEnR9zXjJE1X1frD7O8NYLndNQ5CBykWoNbdn5Bn4iAVF+zAD8mUwnh 2qQgaJ8UEUb2Q5tz6RL1+EMIa+2o+7pWI2hPXBLcdveADyjuZ26tfEnrkWnsPqmT duKBf/J0WfP4djuHRWPbbtd/YxHCm4t4TgICNjm+DTK8CNdiZKrj0SH7gaXRnDVJ pu4HuSvnCo5QMY3lm4ZPs641MQfVVN3dwXz3UwzMy3fUmwSYF2QBn3THuhv+rkkY 6/7HTlIN3OJgDzlP5+ypqSo/JJAfDwM= -----END CERTIFICATE-----Generated at Sun Apr 6 22:40:13 2025 by rpki-client