$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa File: 3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa (raw, json) Hash identifier: seSx3c3wUReH0XdzG5964MU/pgmr5XoEtOGNTuIKpgE= Subject key identifier: 2D:02:68:69:CC:58:EB:D3:1A:F8:1B:65:0E:83:05:2D:CA:88:C8:DF Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Certificate serial: 010D0C9F43285848CF4632E88584196DE4238D80 Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa Signing time: Sat 08 Feb 2025 02:00:38 +0000 ROA not before: Sat 08 Feb 2025 02:00:38 +0000 ROA not after: Fri 09 May 2025 01:00:38 +0000 asID: 397453 IP address blocks: 143.223.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cf:46:32:e8:85:84:19:6d:e4:23:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Validity Not Before: Feb 8 02:00:38 2025 GMT Not After : May 9 01:00:38 2025 GMT Subject: CN=1e5275ae-8465-445e-8dcc-d7145572b481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:27:92:91:16:6f:b0:18:d1:e3:0a:05:5f: 42:fd:8d:b5:51:c2:47:75:7f:b4:9f:7d:31:1d:88: 00:4e:3d:c9:48:58:a4:1e:4f:e1:50:aa:4e:2a:83: 4a:c3:54:2b:39:78:32:ff:7f:c3:9a:96:8d:86:8f: 0e:92:f9:26:64:c1:da:13:c3:1f:55:62:24:91:14: a6:58:1a:f2:a1:58:81:9a:54:38:20:44:72:a6:07: 6a:f7:03:3b:f9:3b:13:03:77:66:d3:17:6b:be:26: 62:07:37:be:a0:2a:6b:b7:04:da:cb:d4:d4:cd:e4: 15:df:4f:57:61:76:1f:c9:a3:9d:07:06:3f:06:33: 8a:f0:6c:ed:aa:63:cd:f7:94:0a:ba:9e:85:04:bd: 21:12:61:f3:be:f2:80:79:cd:fb:f2:ad:57:b6:38: a3:1c:a1:1d:dd:16:77:5a:05:83:b6:d8:b3:82:71: 1f:95:0d:ba:ec:08:dc:0a:bf:80:f3:ae:3a:70:26: ee:7e:77:17:6d:31:85:b2:eb:67:b0:58:9d:31:bb: f5:f2:af:b3:1f:c6:ae:4d:2f:e2:14:45:41:fc:f3: a0:78:98:e3:90:b2:91:46:14:7e:14:b7:f4:64:72: 38:ea:4d:c0:eb:fc:91:c8:d9:6e:58:68:9c:20:36: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:02:68:69:CC:58:EB:D3:1A:F8:1B:65:0E:83:05:2D:CA:88:C8:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl X509v3 Authority Key Identifier: keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer sbgp-ipAddrBlock: critical IPv4: 143.223.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:6e:b0:07:36:6d:91:5d:70:a6:e0:8c:94:94:f0:fb:73:25: 98:42:8d:57:44:d0:c4:80:a9:4a:eb:16:0f:48:78:4a:b1:d9: f2:a2:5e:f1:a6:50:69:82:24:8e:fa:18:70:d0:2a:2a:65:bd: 6b:92:e7:b7:ef:09:47:77:ed:70:14:d3:01:07:2e:b8:66:7d: 8f:6a:17:24:31:d3:b1:05:9f:56:29:0a:a5:b1:29:dc:2a:6b: 8c:79:00:d7:d1:4f:d1:40:9a:2e:e1:1f:1f:e5:53:d1:4d:dc: 3a:e8:9d:76:71:5d:78:6d:28:e6:76:12:59:8f:f6:1f:f5:ba: b7:59:3f:95:6e:32:97:d9:19:cc:4c:7e:b4:06:ab:ec:71:04: b3:19:b1:39:15:09:ca:e8:8d:69:36:61:1e:60:c4:8f:14:f0: 7e:64:37:d1:b3:10:20:ca:b2:dd:6f:ff:4d:80:cb:ab:f9:94: 76:50:fb:8c:d4:1b:a4:57:50:11:86:a9:c0:2b:d4:50:60:59: a2:57:a8:bc:2a:b1:fc:78:a2:0d:1a:4b:91:9b:aa:58:30:93: 2e:ce:c4:b2:46:56:82:ff:46:97:5f:dc:91:96:f3:e5:9a:24: 61:05:ba:ee:5b:b4:31:a6:43:be:e3:17:68:c9:26:c0:06:c4: a7:c1:21:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjPRjLohYQZbeQjjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz NTgzMB4XDTI1MDIwODAyMDAzOFoXDTI1MDUwOTAxMDAzOFowLzEtMCsGA1UEAxMk MWU1Mjc1YWUtODQ2NS00NDVlLThkY2MtZDcxNDU1NzJiNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNAnkpEWb7AY0eMKBV9C/Y21UcJHdX+0n30x HYgATj3JSFikHk/hUKpOKoNKw1QrOXgy/3/DmpaNho8OkvkmZMHaE8MfVWIkkRSm WBryoViBmlQ4IERypgdq9wM7+TsTA3dm0xdrviZiBze+oCprtwTay9TUzeQV309X YXYfyaOdBwY/BjOK8GztqmPN95QKup6FBL0hEmHzvvKAec378q1XtjijHKEd3RZ3 WgWDttizgnEflQ267AjcCr+A8646cCbufncXbTGFsutnsFidMbv18q+zH8auTS/i FEVB/POgeJjjkLKRRhR+FLf0ZHI46k3A6/yRyNluWGicIDYZowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0CaGnMWOvTGvgbZQ6DBS3KiMjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvM2RkOTMxMmItMGI0NC0z MTc4LWEyZDctYzZhZDg4ODZmODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0 ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0 MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj9/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5usAc2bZFdcKbgjJSU8PtzJZhCjVdE0MSAqUrrFg9IeEqx2fKiXvGm UGmCJI76GHDQKiplvWuS57fvCUd37XAU0wEHLrhmfY9qFyQx07EFn1YpCqWxKdwq a4x5ANfRT9FAmi7hHx/lU9FN3DronXZxXXhtKOZ2ElmP9h/1urdZP5VuMpfZGcxM frQGq+xxBLMZsTkVCcrojWk2YR5gxI8U8H5kN9GzECDKst1v/02Ay6v5lHZQ+4zU G6RXUBGGqcAr1FBgWaJXqLwqsfx4og0aS5Gbqlgwky7OxLJGVoL/Rpdf3JGW8+Wa JGEFuu5btDGmQ77jF2jJJsAGxKfBIf4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:57:18 2025 by rpki-client