$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2d8ea12a-50d0-305e-960f-a6e4a19a7a21.roa File: 2d8ea12a-50d0-305e-960f-a6e4a19a7a21.roa (raw, json) Hash identifier: qMOVqOrVt09D1/SNJF/+8Wa9aWuLYMUO4R/XH4EQzcs= Subject key identifier: 24:26:FF:1B:3F:21:36:54:F2:8B:8C:98:05:EE:40:EC:63:0C:AE:A8 Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F43285849674EEAF88C6EDC49580CD680 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2d8ea12a-50d0-305e-960f-a6e4a19a7a21.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 13760 IP address blocks: 142.190.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:ea:f8:8c:6e:dc:49:58:0c:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=4a1934da-cef1-496b-b935-bab5a32444df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1a:00:36:e3:32:f6:7e:b8:2f:2f:49:5d:65: 79:a1:f2:c1:79:ac:f8:3e:82:6e:c8:76:a6:22:cb: 8c:08:1e:56:dc:b0:67:2d:a1:a2:19:57:47:50:e3: cb:f1:b6:62:53:36:a9:79:df:ae:29:d9:9f:64:fd: 9a:7f:8a:50:17:c2:e2:4c:ca:2c:2e:20:ee:88:c1: 6b:cc:9d:a8:2d:19:38:2d:b1:49:56:72:d5:6f:10: d4:54:81:f2:0f:a0:35:a9:c4:c9:1b:c1:36:c9:98: 1b:3e:bf:b5:fe:83:2c:6b:59:5f:5b:68:f8:f0:96: e4:b5:33:c7:00:f8:7c:21:79:77:81:08:c7:2d:2d: f1:c2:8a:6b:6c:c2:60:a7:27:58:67:ab:5a:a0:f6: 8d:02:b2:e2:73:6c:d3:ca:24:a9:57:05:d8:40:91: 0b:7f:53:aa:fd:28:78:16:14:d0:5b:da:2a:21:30: 81:93:54:0d:2f:52:a2:2d:45:85:68:73:98:eb:ea: 41:0c:1e:e6:38:72:54:19:2e:4a:0d:5d:e4:f3:26: af:bc:d5:8b:ce:f3:33:e7:f9:30:bd:92:3f:bd:db: 4c:8f:32:67:b6:d5:e1:5b:5b:c0:76:48:5a:0c:f7: 05:56:08:c3:f2:dd:f6:8a:c9:9a:30:18:a8:9c:88: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:26:FF:1B:3F:21:36:54:F2:8B:8C:98:05:EE:40:EC:63:0C:AE:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2d8ea12a-50d0-305e-960f-a6e4a19a7a21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 142.190.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a4:8e:e1:5f:a3:c3:f0:ba:d6:4d:fa:01:70:8f:1b:f3:15: 81:47:98:a6:73:88:fa:ca:35:f0:80:09:46:9f:70:23:7b:d5: f0:0b:a7:ea:46:b9:f8:b7:2c:52:32:47:78:ee:33:9a:5e:11: bf:aa:ef:af:f8:5f:37:f7:2e:03:ff:d4:fe:e4:0d:b2:cf:fa: 99:36:d2:0d:fd:1d:5a:dd:e7:14:dc:00:07:25:d8:f4:13:e0: 50:31:91:4a:0f:ad:5d:c3:dd:74:e3:bc:53:05:ae:40:d2:0e: 80:60:f2:b8:95:ce:81:ff:d7:33:18:7c:c6:53:3d:71:81:d4: 22:2e:f0:60:52:25:d7:ae:db:98:83:ac:d1:83:99:e7:da:02: 0f:ea:ac:de:0d:32:43:c6:1f:df:c5:81:92:52:be:d6:6f:3d: 88:ae:71:04:2b:e6:d1:88:98:72:a4:75:6b:f0:c2:6f:42:12: 31:92:1b:31:11:86:a3:39:1a:61:f4:9f:4b:4a:5a:1d:00:3d: 00:4e:6f:54:3a:04:98:97:f8:ec:e5:8d:1f:6f:7f:34:f3:c5: 6a:82:f7:8b:c4:98:81:fc:c0:f4:87:b4:79:54:d8:1b:4d:c0: 5e:37:9e:a9:ac:1c:c5:9d:7c:ae:fa:71:48:72:59:e0:ce:c6: ce:bb:5d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTur4jG7cSVgM1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk NGExOTM0ZGEtY2VmMS00OTZiLWI5MzUtYmFiNWEzMjQ0NGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xoANuMy9n64Ly9JXWV5ofLBeaz4PoJuyHam IsuMCB5W3LBnLaGiGVdHUOPL8bZiUzaped+uKdmfZP2af4pQF8LiTMosLiDuiMFr zJ2oLRk4LbFJVnLVbxDUVIHyD6A1qcTJG8E2yZgbPr+1/oMsa1lfW2j48JbktTPH APh8IXl3gQjHLS3xwoprbMJgpydYZ6taoPaNArLic2zTyiSpVwXYQJELf1Oq/Sh4 FhTQW9oqITCBk1QNL1KiLUWFaHOY6+pBDB7mOHJUGS5KDV3k8yavvNWLzvMz5/kw vZI/vdtMjzJnttXhW1vAdkhaDPcFVgjD8t32ismaMBionIhdkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQm/xs/ITZU8ouMmAXuQOxjDK6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvMmQ4ZWExMmEtNTBkMC0z MDVlLTk2MGYtYTZlNGExOWE3YTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjr4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABikjuFfo8PwutZN+gFwjxvzFYFHmKZziPrKNfCACUafcCN71fALp+pG ufi3LFIyR3juM5peEb+q76/4Xzf3LgP/1P7kDbLP+pk20g39HVrd5xTcAAcl2PQT 4FAxkUoPrV3D3XTjvFMFrkDSDoBg8riVzoH/1zMYfMZTPXGB1CIu8GBSJdeu25iD rNGDmefaAg/qrN4NMkPGH9/FgZJSvtZvPYiucQQr5tGImHKkdWvwwm9CEjGSGzER hqM5GmH0n0tKWh0APQBOb1Q6BJiX+OzljR9vfzTzxWqC94vEmIH8wPSHtHlU2BtN wF43nqmsHMWdfK76cUhyWeDOxs67XaA= -----END CERTIFICATE-----Generated at Mon Apr 7 10:41:10 2025 by rpki-client