$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa File: c8268689-1fbe-3c42-bbd4-3c7130784661.roa (raw, json) Hash identifier: 7NuqcJNoN+rYvbqIUMF+RWsSGI+qDEa4tAUDKSofhCI= Subject key identifier: 47:E8:50:07:44:E0:6F:86:E9:57:47:97:49:AF:E1:D2:CF:9D:DE:02 Certificate issuer: /CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900 Certificate serial: 010D0C9F43285848F926A7545A37A6F985DFD1C0 Authority key identifier: 7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 611 IP address blocks: 142.17.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a7:54:5a:37:a6:f9:85:df:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=3ea065b3-c781-49cd-8be3-4a1752599f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:71:75:53:33:ab:2a:73:61:0c:a7:fa:27: 0e:85:03:e7:0a:3a:51:79:5b:11:f4:6a:ff:a8:92: af:4a:10:ed:52:bf:62:99:d7:2a:56:ef:24:f9:07: 84:41:7a:5d:eb:92:26:b7:c5:25:21:87:64:49:ac: 3f:f3:f7:59:ea:32:7b:cb:3c:2d:32:f0:d9:bd:3e: e7:ce:76:33:a3:9f:95:d7:82:d2:ab:49:a0:97:4e: 86:60:c4:a9:c7:af:6d:25:27:b2:90:ee:cb:55:ef: cf:fc:74:76:24:b7:c7:d6:10:8f:a2:5f:48:f2:cb: 5b:53:86:d4:15:5c:3f:51:00:ae:ad:c2:cc:a7:29: 66:f5:3a:6b:47:97:29:04:b5:b6:4e:87:cc:ce:50: ff:48:29:4f:1c:79:17:63:42:14:03:ee:ea:4c:b7: 68:54:5b:22:43:f8:f9:d7:29:d3:ff:93:db:0d:10: 43:b5:10:63:a8:cb:1b:86:2a:a8:15:ff:11:9f:0d: 7a:f9:05:a9:3c:b5:8c:4d:f4:0f:eb:82:dc:77:c7: 35:2c:67:72:78:5f:e5:de:e1:c0:30:fa:bd:a5:b8: 4e:0e:87:a0:28:be:e1:6d:12:e1:81:cf:40:2d:3e: 5b:f9:a4:ca:09:d9:30:0a:70:2e:c6:f0:0e:d3:01: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E8:50:07:44:E0:6F:86:E9:57:47:97:49:AF:E1:D2:CF:9D:DE:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.crl X509v3 Authority Key Identifier: keyid:7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer sbgp-ipAddrBlock: critical IPv4: 142.17.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:09:f7:9a:be:ec:6e:10:dc:2a:28:dc:82:d6:4e:93:74:02: 09:0e:04:45:bf:2e:1d:11:80:1a:6d:b2:6b:22:81:fb:cb:88: b1:a1:23:62:b0:54:9b:3c:75:c3:47:b9:52:d3:da:f1:a8:37: c2:6c:3c:27:dd:5e:50:9e:83:a6:b2:98:a8:8f:b0:50:5e:12: 3e:0c:2e:64:a6:d5:55:7f:59:34:1a:25:b7:a1:f6:6d:1a:58: 8f:80:ea:22:79:63:d4:67:87:99:df:8c:db:bd:c8:70:75:15: fd:2e:82:7e:df:93:b0:bb:92:7d:c6:fb:ce:48:c7:59:db:62: 40:50:83:56:37:7a:b5:7c:cd:84:87:ec:cf:e9:b9:2f:20:92: ef:b8:dc:6f:c7:f6:dc:a8:08:24:26:24:23:59:e7:cc:8f:85: d2:d3:49:a0:73:78:4a:94:ef:d9:9e:9e:ee:95:8f:a0:cd:c4: e1:71:ff:74:af:fd:8b:a7:3a:d1:21:e5:ec:3c:69:c4:5a:ee: 04:6c:7c:e0:b9:8f:f7:7d:70:7c:f9:cc:1e:ae:a8:0d:f3:a6: 9c:7e:40:ca:32:f3:70:7d:0e:78:e6:ac:17:1a:dd:2c:a6:a9: f5:e1:d3:83:09:f4:55:23:9b:f2:d5:3c:89:19:9c:9e:d9:be: bc:19:14:31 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj5JqdUWjem+YXf0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc3MGM1Y2YtZDg4My00M2JjLWE3MmUtNGFlN2Y5MGQ0 OTAwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk M2VhMDY1YjMtYzc4MS00OWNkLThiZTMtNGExNzUyNTk5ZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3VxdVMzqypzYQyn+icOhQPnCjpReVsR9Gr/ qJKvShDtUr9imdcqVu8k+QeEQXpd65Imt8UlIYdkSaw/8/dZ6jJ7yzwtMvDZvT7n znYzo5+V14LSq0mgl06GYMSpx69tJSeykO7LVe/P/HR2JLfH1hCPol9I8stbU4bU FVw/UQCurcLMpylm9TprR5cpBLW2TofMzlD/SClPHHkXY0IUA+7qTLdoVFsiQ/j5 1ynT/5PbDRBDtRBjqMsbhiqoFf8Rnw16+QWpPLWMTfQP64Lcd8c1LGdyeF/l3uHA MPq9pbhODoegKL7hbRLhgc9ALT5b+aTKCdkwCnAuxvAO0wFwpwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEfoUAdE4G+G6VdHl0mv4dLPnd4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNzcw YzVjZi1kODgzLTQzYmMtYTcyZS00YWU3ZjkwZDQ5MDAvYzgyNjg2ODktMWZiZS0z YzQyLWJiZDQtM2M3MTMwNzg0NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDc3MGM1Y2YtZDg4My00M2JjLWE3 MmUtNGFlN2Y5MGQ0OTAwL2Q3NzBjNWNmLWQ4ODMtNDNiYy1hNzJlLTRhZTdmOTBk NDkwMC5jcmwwHwYDVR0jBBgwFoAUfB5id0VJISERd4Jib4zVUrG6qC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kNzcwYzVjZi1kODgzLTQzYmMtYTcyZS00YWU3 ZjkwZDQ5MDAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjhEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXAn3mr7sbhDcKijcgtZOk3QCCQ4ERb8uHRGAGm2yayKB+8uIsaEjYrBU mzx1w0e5UtPa8ag3wmw8J91eUJ6DprKYqI+wUF4SPgwuZKbVVX9ZNBolt6H2bRpY j4DqInlj1GeHmd+M273IcHUV/S6Cft+TsLuSfcb7zkjHWdtiQFCDVjd6tXzNhIfs z+m5LyCS77jcb8f23KgIJCYkI1nnzI+F0tNJoHN4SpTv2Z6e7pWPoM3E4XH/dK/9 i6c60SHl7DxpxFruBGx84LmP931wfPnMHq6oDfOmnH5AyjLzcH0OeOasFxrdLKap 9eHTgwn0VSOb8tU8iRmcntm+vBkUMQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:22:19 2025 by rpki-client