$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa File: 1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa (raw, json) Hash identifier: GKdQ9GpiQt9J7E0fSz4jrlQA4PwU+nceFcK9bNjfEjk= Subject key identifier: AA:63:87:2D:AA:F4:7E:5E:10:28:11:9C:1E:A8:81:34:BE:FF:4C:B8 Certificate issuer: /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895 Certificate serial: 010D0C9F43285848B35B61DB15E2017EF8528100 Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 8075 IP address blocks: 142.147.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:61:db:15:e2:01:7e:f8:52:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=ba805940-9ba3-41af-8e4a-ef3664a95445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:a0:7a:3f:be:d9:08:f2:31:42:72:bc:de: a5:49:1c:78:c3:38:d8:61:51:f1:54:78:7d:f5:f7: 95:c1:1c:78:b8:af:08:0c:c8:47:47:59:59:2f:68: 1a:c7:64:55:6b:9b:ee:3c:eb:03:c0:c6:40:c2:69: a0:7e:b9:80:7a:a8:b1:0b:8a:13:45:90:8b:0b:28: 0c:46:02:cd:73:bc:63:60:13:d4:6e:02:47:3f:bb: 28:0c:59:af:71:98:90:b9:88:d0:4b:e7:f4:3f:43: 5d:d3:87:2b:98:11:82:a7:c7:b9:7f:3f:30:5f:2c: 40:c8:74:90:88:60:22:1b:c3:a9:48:7d:0e:ba:e6: b3:43:14:b4:d2:9a:f7:59:50:c0:08:cb:eb:0a:52: 7e:9e:b2:04:d1:90:cb:df:26:1c:60:db:64:7d:9c: cf:53:39:20:e7:21:db:29:6f:b7:42:da:4a:ce:b6: 68:ea:25:16:07:42:e3:88:a3:14:23:58:45:f3:f4: eb:8f:65:a9:fa:e7:19:26:32:03:e0:6a:e5:14:9d: db:be:50:9d:91:81:72:31:b5:78:e1:83:3d:33:71: 6d:a4:da:d1:0f:dd:b1:ec:8e:87:7c:e8:5f:e9:2b: 81:0d:87:e3:e0:44:43:b0:83:fc:c6:0d:5e:b2:22: 4a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:63:87:2D:AA:F4:7E:5E:10:28:11:9C:1E:A8:81:34:BE:FF:4C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl X509v3 Authority Key Identifier: keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer sbgp-ipAddrBlock: critical IPv4: 142.147.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7d:1f:fa:e7:a6:52:45:be:be:be:f6:ea:2a:5e:f1:78:68: 52:0a:82:32:98:ed:03:7b:87:b0:db:27:e2:b6:e0:b8:21:14: 57:79:60:da:1f:82:4d:94:a4:d1:f9:24:fc:97:93:9c:c7:be: 61:95:7d:1c:12:8e:22:74:ee:85:36:73:75:3b:9d:2e:70:bf: d3:aa:59:9e:be:9c:7f:80:9c:df:e4:40:36:1a:ea:4d:45:06: 9e:14:19:f8:65:1c:0f:ef:ca:15:c1:b5:ab:0b:aa:8c:9b:35: b6:a7:3b:ca:03:be:cc:cf:e9:e5:fc:02:e6:bd:5f:0a:ab:39: 15:00:0e:5a:0b:34:e8:87:b2:07:ba:bd:f9:ff:84:c1:c7:e4: 07:cb:be:ef:a6:b7:eb:2a:b4:69:06:10:17:63:4c:bf:4e:71: ab:75:5c:d1:71:4e:91:b4:02:85:d9:d9:2c:47:07:b0:88:d5: 6b:a3:62:2c:0f:60:27:09:4d:2d:c6:17:d3:77:50:c1:03:03: 85:18:71:17:4c:8f:e6:ff:a3:77:e5:23:db:61:23:e0:d4:90: b1:60:d6:9a:81:67:75:f8:56:92:74:75:bb:11:eb:43:16:92: 02:5a:33:06:bb:22:ce:73:dc:a1:3f:f3:2f:65:9e:32:5e:d0: bc:80:e4:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2HbFeIBfvhSgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVhZTBjYzYtYjAwZi00NzQyLWFhZGItYWI4ZWEzNTRk ODk1MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YmE4MDU5NDAtOWJhMy00MWFmLThlNGEtZWYzNjY0YTk1NDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaagej++2QjyMUJyvN6lSRx4wzjYYVHxVHh9 9feVwRx4uK8IDMhHR1lZL2gax2RVa5vuPOsDwMZAwmmgfrmAeqixC4oTRZCLCygM RgLNc7xjYBPUbgJHP7soDFmvcZiQuYjQS+f0P0Nd04crmBGCp8e5fz8wXyxAyHSQ iGAiG8OpSH0OuuazQxS00pr3WVDACMvrClJ+nrIE0ZDL3yYcYNtkfZzPUzkg5yHb KW+3QtpKzrZo6iUWB0LjiKMUI1hF8/Trj2Wp+ucZJjID4GrlFJ3bvlCdkYFyMbV4 4YM9M3FtpNrRD92x7I6HfOhf6SuBDYfj4ERDsIP8xg1esiJKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpjhy2q9H5eECgRnB6ogTS+/0y4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWFl MGNjNi1iMDBmLTQ3NDItYWFkYi1hYjhlYTM1NGQ4OTUvMWY2YjA4NzgtNjEwNC0z NjNiLWIzZTItYmRjYjNmYzE0ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVhZTBjYzYtYjAwZi00NzQyLWFh ZGItYWI4ZWEzNTRkODk1L2Y1YWUwY2M2LWIwMGYtNDc0Mi1hYWRiLWFiOGVhMzU0 ZDg5NS5jcmwwHwYDVR0jBBgwFoAUi5tilTBbn1ebIuo/yJMwsTPO98UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWFlMGNjNi1iMDBmLTQ3NDItYWFkYi1hYjhl YTM1NGQ4OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpM9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl9H/rnplJFvr6+9uoqXvF4aFIKgjKY7QN7h7DbJ+K24LghFFd5YNof gk2UpNH5JPyXk5zHvmGVfRwSjiJ07oU2c3U7nS5wv9OqWZ6+nH+AnN/kQDYa6k1F Bp4UGfhlHA/vyhXBtasLqoybNbanO8oDvszP6eX8Aua9XwqrORUADloLNOiHsge6 vfn/hMHH5AfLvu+mt+sqtGkGEBdjTL9Ocat1XNFxTpG0AoXZ2SxHB7CI1WujYiwP YCcJTS3GF9N3UMEDA4UYcRdMj+b/o3flI9thI+DUkLFg1pqBZ3X4VpJ0dbsR60MW kgJaMwa7Is5z3KE/8y9lnjJe0LyA5N8= -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:55 2025 by rpki-client