$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/8a7ecd6d-87e8-3b4a-abc4-6ece09ce781a.roa File: 8a7ecd6d-87e8-3b4a-abc4-6ece09ce781a.roa (raw, json) Hash identifier: 6e/6VDrwucU6iAw7KInodkWU6ScxPh79OIInQT0IZPc= Subject key identifier: 2A:48:49:26:FF:9F:1B:9F:D4:BC:51:35:4E:DF:B2:B0:3E:9A:A6:39 Certificate issuer: /CN=fe165f6f-fcf3-4c06-b884-36e60521c216 Certificate serial: 010D0C9F4328584961B994C959446DF901B3DEC0 Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/8a7ecd6d-87e8-3b4a-abc4-6ece09ce781a.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 16621 IP address blocks: 142.147.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:94:c9:59:44:6d:f9:01:b3:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=b74ec6f1-1a48-4ed5-99db-5140f944d888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:0e:3d:71:1d:f7:74:32:50:63:1f:a9:c4: bb:1f:6b:e6:60:1a:71:a5:c6:34:68:6a:b8:e5:f4: 78:81:9f:c5:88:98:35:7b:4d:46:83:5c:9f:91:32: 92:e3:de:fb:20:29:75:08:1f:39:92:f9:e8:52:6e: 22:15:d6:1c:86:e9:87:44:88:35:c4:3e:46:c1:98: 29:08:15:ca:a6:a0:d9:e1:75:fb:2d:47:27:53:15: 90:34:19:ba:64:3d:d8:65:22:91:ac:3b:b1:ca:33: a9:04:bc:ec:d0:50:f3:9f:d4:27:ad:da:77:e5:3e: c1:04:a1:e3:94:c7:fa:ef:51:ba:27:ea:2c:92:fd: bd:3e:75:ea:67:b0:c7:8e:b8:e2:9f:86:54:86:43: d6:26:8c:54:df:8d:b7:c3:b8:34:2e:6f:3d:e8:39: 08:18:8d:6e:c2:23:a3:90:95:1b:86:47:bb:05:dd: bf:f2:80:9a:9e:a4:39:14:7c:f8:52:47:de:32:9b: 7d:68:5d:fd:b7:7c:26:e1:e1:d9:7b:45:6b:b4:c3: e1:7c:1e:6e:de:16:5f:e6:ff:46:0b:24:04:29:f8: 05:60:9e:83:a3:32:0f:00:26:d6:71:62:d9:41:37: 3a:12:0c:83:53:8e:fd:fc:57:11:8d:19:93:0f:78: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:48:49:26:FF:9F:1B:9F:D4:BC:51:35:4E:DF:B2:B0:3E:9A:A6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/8a7ecd6d-87e8-3b4a-abc4-6ece09ce781a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl X509v3 Authority Key Identifier: keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer sbgp-ipAddrBlock: critical IPv4: 142.147.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0a:b9:3d:d3:5e:8a:51:29:8c:2f:38:9e:fe:d4:f0:76:34: eb:d0:58:48:38:1a:1a:f1:f4:f2:ea:a7:4c:dc:4c:a0:1c:b5: 03:3c:9b:f7:30:80:75:2d:c6:90:47:5e:fa:45:01:c9:51:68: f0:ef:e9:68:7d:63:3d:1d:ec:5b:40:84:e5:83:70:7d:d2:df: 69:1e:b3:27:07:ea:c8:ae:01:5f:be:90:09:de:9f:4f:50:69: 20:ba:2a:a7:7e:40:37:cb:40:97:12:c9:f3:fd:e5:d3:09:86: 27:41:69:0c:dc:64:eb:2f:f0:f0:cc:8e:1f:10:ae:87:4f:7f: 6e:91:2a:dc:38:e9:31:73:23:f7:d6:4d:2f:63:a3:e0:d1:ce: 5b:1e:7c:9f:6c:9c:7c:bb:e6:4e:cb:ca:67:2f:13:a4:51:55: 55:64:f2:4b:ea:81:62:dd:14:90:e1:0e:6d:83:c5:97:97:0e: f5:45:8d:a9:a5:b1:8b:90:2e:72:ed:9d:72:5a:6f:b3:40:15: 28:87:2b:94:7c:ee:d6:f4:3e:4c:a1:45:e8:3c:d1:b5:5b:21: c4:76:fa:f2:6f:c4:c3:f0:f5:8c:15:6c:96:f5:aa:b9:3d:2f: b1:a1:3d:4a:dd:df:77:94:65:af:2c:4b:4b:5b:0a:f7:b1:d3: 4b:ad:e1:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZTJWURt+QGz3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUxNjVmNmYtZmNmMy00YzA2LWI4ODQtMzZlNjA1MjFj MjE2MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk Yjc0ZWM2ZjEtMWE0OC00ZWQ1LTk5ZGItNTE0MGY5NDRkODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7wOPXEd93QyUGMfqcS7H2vmYBpxpcY0aGq4 5fR4gZ/FiJg1e01Gg1yfkTKS4977ICl1CB85kvnoUm4iFdYchumHRIg1xD5GwZgp CBXKpqDZ4XX7LUcnUxWQNBm6ZD3YZSKRrDuxyjOpBLzs0FDzn9Qnrdp35T7BBKHj lMf671G6J+oskv29PnXqZ7DHjrjin4ZUhkPWJoxU3423w7g0Lm896DkIGI1uwiOj kJUbhke7Bd2/8oCanqQ5FHz4UkfeMpt9aF39t3wm4eHZe0VrtMPhfB5u3hZf5v9G CyQEKfgFYJ6DozIPACbWcWLZQTc6EgyDU479/FcRjRmTD3iqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpISSb/nxuf1LxRNU7fsrA+mqY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2 NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2MDUyMWMyMTYvOGE3ZWNkNmQtODdlOC0z YjRhLWFiYzQtNmVjZTA5Y2U3ODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmUxNjVmNmYtZmNmMy00YzA2LWI4 ODQtMzZlNjA1MjFjMjE2L2ZlMTY1ZjZmLWZjZjMtNGMwNi1iODg0LTM2ZTYwNTIx YzIxNi5jcmwwHwYDVR0jBBgwFoAUJcA6kzKP5erlOLBtS7jvwrD3PVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2 MDUyMWMyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjpMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEKuT3TXopRKYwvOJ7+1PB2NOvQWEg4Ghrx9PLqp0zcTKActQM8m/cw gHUtxpBHXvpFAclRaPDv6Wh9Yz0d7FtAhOWDcH3S32kesycH6siuAV++kAnen09Q aSC6Kqd+QDfLQJcSyfP95dMJhidBaQzcZOsv8PDMjh8QrodPf26RKtw46TFzI/fW TS9jo+DRzlsefJ9snHy75k7LymcvE6RRVVVk8kvqgWLdFJDhDm2DxZeXDvVFjaml sYuQLnLtnXJab7NAFSiHK5R87tb0PkyhReg80bVbIcR2+vJvxMPw9YwVbJb1qrk9 L7GhPUrd33eUZa8sS0tbCvex00ut4ZU= -----END CERTIFICATE-----Generated at Sat Apr 5 04:36:55 2025 by rpki-client