$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/b6ccfba0-614d-37fb-bd65-ff1553b89cf2.roa File: b6ccfba0-614d-37fb-bd65-ff1553b89cf2.roa (raw, json) Hash identifier: RA7SRiQ1pgcVh7fNTNoxK0RGn181YKbOhfPrqBpe+RI= Subject key identifier: 8B:A2:AD:86:CB:1F:67:83:D3:8F:58:E6:D8:DF:8E:4A:7C:7C:7B:27 Certificate issuer: /CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824 Certificate serial: 010D0C9F4328584944692FADACC0CEE90A65CD80 Authority key identifier: BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/b6ccfba0-614d-37fb-bd65-ff1553b89cf2.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 15830 IP address blocks: 142.54.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:2f:ad:ac:c0:ce:e9:0a:65:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=052929ec-6d7e-49b5-80e6-d645592ccffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:68:54:98:78:d8:de:cf:2a:81:90:87:7c: b7:7e:32:95:2d:c9:5a:ce:0d:e6:64:ea:e7:bd:47: 6b:eb:e9:76:f0:19:14:75:c7:e7:40:3d:11:ad:16: 55:4b:41:2f:cf:d7:1d:8f:7f:b9:77:33:e5:79:ae: f1:0b:c1:e6:2f:ed:96:b3:1b:c4:59:37:97:1b:fd: df:44:2b:94:81:da:0c:34:40:bd:2c:ab:da:ca:1a: af:91:a5:77:41:3c:61:e5:7c:74:9b:24:2b:70:d6: f6:e7:15:67:fd:2e:07:ef:89:4e:0b:11:08:b3:31: 9e:01:cc:1c:17:ed:7a:26:67:85:48:af:54:58:51: 4f:23:e9:db:8a:ca:76:5b:9e:51:9d:8a:86:18:bd: 79:6f:ca:16:1f:8e:ad:58:f2:83:5b:11:f6:cc:fa: 75:69:e8:a9:94:66:54:64:8a:11:84:92:fc:d2:10: bf:29:ef:d5:f6:5a:78:4b:e0:00:a4:25:33:40:36: b1:93:de:e9:59:af:d6:37:fe:86:03:1f:24:69:f5: 10:4b:83:80:07:d2:1e:ca:6e:ff:11:e3:0c:29:8f: b7:c1:81:1a:56:ea:a4:ac:ad:ad:d1:f7:d2:cc:8d: 72:63:89:b1:c6:b9:df:98:45:60:15:07:0b:95:1c: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A2:AD:86:CB:1F:67:83:D3:8F:58:E6:D8:DF:8E:4A:7C:7C:7B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/b6ccfba0-614d-37fb-bd65-ff1553b89cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl X509v3 Authority Key Identifier: keyid:BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer sbgp-ipAddrBlock: critical IPv4: 142.54.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:78:c4:86:ff:fd:67:a4:59:ad:d9:17:c3:c9:b1:0b:3e:85: 72:11:8e:03:58:b1:bf:05:8d:45:17:52:04:19:0a:8a:71:b0: e0:16:81:43:72:37:f1:01:05:67:c1:7e:3d:9b:4b:12:b2:2b: 2f:24:5a:eb:e9:14:b9:41:3d:72:7c:6d:0f:c7:ed:21:34:ac: 1d:95:b9:d8:48:c7:30:d9:bc:10:12:b5:8b:f1:09:7a:23:af: 17:55:a4:a6:40:fb:b7:89:58:49:8c:5b:24:11:3c:a6:28:39: 3c:80:b8:d5:4b:96:fc:0d:f5:69:ae:bc:85:49:59:09:84:cc: 88:ab:f1:c5:a1:97:25:01:6f:14:78:2f:37:f4:46:06:77:14: e6:4d:c7:80:8c:64:e4:f1:13:dc:c4:aa:2a:7e:47:6c:39:62: 46:f3:2a:0a:00:58:50:b2:5c:56:98:c2:3f:1d:52:83:df:df: 8f:08:91:d1:11:42:fa:69:fe:6e:3b:32:75:e4:f8:d9:bb:29: 10:b2:f3:b9:42:98:86:00:68:b4:54:c9:17:d9:ed:f7:53:00: 34:70:2e:e3:80:4a:aa:0e:6d:1c:b4:c4:13:57:87:7f:09:f5: f1:19:62:8b:ba:08:fa:4e:d3:e0:07:b4:cd:8c:a6:39:0c:c4: d6:ca:9f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaS+trMDO6QplzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQwNGQ3ZmEtOWQ4OS00ODdhLTllYjItZGNmZWVmNTM5 ODI0MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MDUyOTI5ZWMtNmQ3ZS00OWI1LTgwZTYtZDY0NTU5MmNjZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizBoVJh42N7PKoGQh3y3fjKVLclazg3mZOrn vUdr6+l28BkUdcfnQD0RrRZVS0Evz9cdj3+5dzPlea7xC8HmL+2WsxvEWTeXG/3f RCuUgdoMNEC9LKvayhqvkaV3QTxh5Xx0myQrcNb25xVn/S4H74lOCxEIszGeAcwc F+16JmeFSK9UWFFPI+nbisp2W55RnYqGGL15b8oWH46tWPKDWxH2zPp1aeiplGZU ZIoRhJL80hC/Ke/V9lp4S+AApCUzQDaxk97pWa/WN/6GAx8kafUQS4OAB9Ieym7/ EeMMKY+3wYEaVuqkrK2t0ffSzI1yY4mxxrnfmEVgFQcLlRzYyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuirYbLH2eD049Y5tjfjkp8fHsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDA0 ZDdmYS05ZDg5LTQ4N2EtOWViMi1kY2ZlZWY1Mzk4MjQvYjZjY2ZiYTAtNjE0ZC0z N2ZiLWJkNjUtZmYxNTUzYjg5Y2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQwNGQ3ZmEtOWQ4OS00ODdhLTll YjItZGNmZWVmNTM5ODI0LzBkMDRkN2ZhLTlkODktNDg3YS05ZWIyLWRjZmVlZjUz OTgyNC5jcmwwHwYDVR0jBBgwFoAUv3ZlWUQsVpyRcRQtE2O7P+4JjCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDA0ZDdmYS05ZDg5LTQ4N2EtOWViMi1kY2Zl ZWY1Mzk4MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd4xIb//WekWa3ZF8PJsQs+hXIRjgNYsb8FjUUXUgQZCopxsOAWgUNy N/EBBWfBfj2bSxKyKy8kWuvpFLlBPXJ8bQ/H7SE0rB2VudhIxzDZvBAStYvxCXoj rxdVpKZA+7eJWEmMWyQRPKYoOTyAuNVLlvwN9WmuvIVJWQmEzIir8cWhlyUBbxR4 Lzf0RgZ3FOZNx4CMZOTxE9zEqip+R2w5YkbzKgoAWFCyXFaYwj8dUoPf348IkdER Qvpp/m47MnXk+Nm7KRCy87lCmIYAaLRUyRfZ7fdTADRwLuOASqoObRy0xBNXh38J 9fEZYou6CPpO0+AHtM2MpjkMxNbKnzU= -----END CERTIFICATE-----Generated at Sat Apr 5 19:09:06 2025 by rpki-client