$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/bc2e542f-0ba4-312c-a417-2816f293134f.roa File: bc2e542f-0ba4-312c-a417-2816f293134f.roa (raw, json) Hash identifier: 4eG3JD/6OaeZtrD68+/4UUJ9FSobE5yTJWrymJIJRxg= Subject key identifier: 4A:21:EA:B3:22:EB:9F:14:B9:F7:0E:47:DB:BC:1D:52:AC:06:D7:09 Certificate issuer: /CN=53f93371-9395-4cf9-890d-3d0895304982 Certificate serial: 010D0C9F43285848F22C671C4A880D6223656880 Authority key identifier: 3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/bc2e542f-0ba4-312c-a417-2816f293134f.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 398093 IP address blocks: 142.202.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:67:1c:4a:88:0d:62:23:65:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f93371-9395-4cf9-890d-3d0895304982 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=7154fe62-a768-4a83-b400-8cb22d0b4e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:91:0a:17:c7:96:1f:0d:68:58:79:06:63: 29:a8:17:d6:70:1e:a9:2a:4e:12:35:1a:c6:bb:dd: b0:dd:04:f6:4a:b6:ae:e6:9b:42:af:7c:ed:ca:0e: b3:a1:27:8a:36:34:88:42:76:a9:1d:0e:32:cf:e8: 52:fe:6d:e0:45:a4:a8:3f:9b:35:6e:15:42:01:78: 21:19:de:cb:89:4f:a6:4d:46:47:d4:0c:5a:08:03: 91:81:70:38:77:eb:c2:cc:3c:d8:8b:fd:3d:2a:e1: 5d:7a:04:2b:41:fb:57:23:9d:46:27:67:e9:5a:7b: 81:c2:c5:ca:ed:9a:1e:52:7b:51:37:d6:eb:47:a2: b5:3c:d4:7a:88:a1:70:a4:8b:0c:b2:c2:5b:38:78: 1d:36:c9:46:d5:8e:bc:4f:99:78:b0:70:44:f3:c5: 4e:7a:d5:46:b2:e7:66:f6:38:94:f7:76:2b:5f:a8: ed:e8:1b:04:40:ae:50:44:59:e6:7d:d7:f7:a3:ec: c3:a4:5f:9a:ab:c4:05:90:5a:9d:32:00:a0:b5:80: 77:60:2a:02:d6:ef:96:2e:55:6b:01:f3:1b:8c:97: 1a:ab:cd:f6:3c:c7:c1:bc:fa:3a:e8:2b:e0:76:7c: e9:2f:44:36:16:e8:cc:11:e7:7b:a1:d8:f9:5d:26: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:EA:B3:22:EB:9F:14:B9:F7:0E:47:DB:BC:1D:52:AC:06:D7:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/bc2e542f-0ba4-312c-a417-2816f293134f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.crl X509v3 Authority Key Identifier: keyid:3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer sbgp-ipAddrBlock: critical IPv4: 142.202.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:44:fe:7a:7c:e8:02:08:98:4b:fb:fc:5f:31:f5:1a:19:ba: 6c:e0:fc:6d:1a:0d:42:33:c9:b9:81:21:ee:37:54:86:64:9b: 9d:18:e2:26:b3:29:c3:2c:9b:bb:9a:04:ad:45:c9:73:36:a2: c5:69:e3:84:c0:f2:a7:e1:25:1b:f4:02:e8:f6:bd:61:d4:96: fa:3b:c1:ce:50:78:7a:cc:fc:b5:d5:a3:10:66:fd:76:ab:a3: 27:b8:43:62:08:1f:29:9a:2a:79:5a:ea:16:13:44:f5:a5:24: 58:4f:41:37:fa:01:a0:19:a9:98:ab:f7:01:3e:67:ed:71:7c: cf:a5:05:d8:fa:b6:23:f4:1e:c2:e2:4f:0c:a3:c2:41:6c:77: 43:1e:b8:10:9e:7d:a9:fb:90:e7:bb:1f:41:e0:e3:ab:bd:49: b4:d2:ce:5c:29:d1:8d:d1:ee:e8:53:e8:5f:9d:a9:20:d4:06: 4f:ed:1b:8a:ad:e0:07:0a:f3:0b:f5:9c:29:c8:24:1a:91:1b: 4f:b6:af:be:53:e5:26:57:8e:d2:c7:ed:64:ac:33:62:e7:bf: 9f:9f:24:e8:58:da:92:2b:6e:3a:74:a5:37:e6:52:95:a7:a4: 6d:79:be:1f:9c:fe:ba:b1:55:fd:4a:4d:57:15:09:a8:36:eb: 97:2f:d9:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGccSogNYiNlaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmOTMzNzEtOTM5NS00Y2Y5LTg5MGQtM2QwODk1MzA0 OTgyMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NzE1NGZlNjItYTc2OC00YTgzLWI0MDAtOGNiMjJkMGI0ZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5GRChfHlh8NaFh5BmMpqBfWcB6pKk4SNRrG u92w3QT2Srau5ptCr3ztyg6zoSeKNjSIQnapHQ4yz+hS/m3gRaSoP5s1bhVCAXgh Gd7LiU+mTUZH1AxaCAORgXA4d+vCzDzYi/09KuFdegQrQftXI51GJ2fpWnuBwsXK 7ZoeUntRN9brR6K1PNR6iKFwpIsMssJbOHgdNslG1Y68T5l4sHBE88VOetVGsudm 9jiU93YrX6jt6BsEQK5QRFnmfdf3o+zDpF+aq8QFkFqdMgCgtYB3YCoC1u+WLlVr AfMbjJcaq832PMfBvPo66CvgdnzpL0Q2FujMEed7odj5XSZiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoh6rMi658UufcOR9u8HVKsBtcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Y5 MzM3MS05Mzk1LTRjZjktODkwZC0zZDA4OTUzMDQ5ODIvYmMyZTU0MmYtMGJhNC0z MTJjLWE0MTctMjgxNmYyOTMxMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNmOTMzNzEtOTM5NS00Y2Y5LTg5 MGQtM2QwODk1MzA0OTgyLzUzZjkzMzcxLTkzOTUtNGNmOS04OTBkLTNkMDg5NTMw NDk4Mi5jcmwwHwYDVR0jBBgwFoAUP7ZrZW0derW+USfiwlxGvExGjrgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2Y5MzM3MS05Mzk1LTRjZjktODkwZC0zZDA4 OTUzMDQ5ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsouMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNE/np86AIImEv7/F8x9RoZumzg/G0aDUIzybmBIe43VIZkm50Y4iaz KcMsm7uaBK1FyXM2osVp44TA8qfhJRv0Auj2vWHUlvo7wc5QeHrM/LXVoxBm/Xar oye4Q2IIHymaKnla6hYTRPWlJFhPQTf6AaAZqZir9wE+Z+1xfM+lBdj6tiP0HsLi TwyjwkFsd0MeuBCefan7kOe7H0Hg46u9SbTSzlwp0Y3R7uhT6F+dqSDUBk/tG4qt 4AcK8wv1nCnIJBqRG0+2r75T5SZXjtLH7WSsM2Lnv5+fJOhY2pIrbjp0pTfmUpWn pG15vh+c/rqxVf1KTVcVCag265cv2To= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:22 2025 by rpki-client