$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa File: 09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa (raw, json) Hash identifier: ZeAwmguPNMvvRWfeBXUEPuWYSe74WyXEZwM771tB1mo= Subject key identifier: 72:DD:FE:4D:9B:65:EE:23:4A:BC:70:B7:D5:E1:97:0A:0E:9F:5D:10 Certificate issuer: /CN=564c92f5-eb04-448d-8939-379434b228b3 Certificate serial: 010D0C9F4328584949FE8371BEF72771725B8270 Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 803 IP address blocks: 142.165.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:83:71:be:f7:27:71:72:5b:82:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=1da2eb2f-e801-403b-9887-de8041a105d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:84:65:03:26:0d:e7:4d:f8:c9:ef:3c:24:65: b9:a4:23:f3:e5:18:7a:6a:1a:c9:f4:e7:ad:4b:96: f8:84:9e:da:40:83:a2:0c:16:5b:72:72:fa:a1:06: 50:b6:76:0e:0d:17:d2:b8:67:40:f2:38:61:75:57: 3a:9f:5a:3a:70:37:45:d1:6f:f2:0d:84:8e:db:ea: 7a:19:8a:70:7e:ee:e1:ae:96:48:e4:7a:57:8d:17: 8b:05:b2:58:6e:61:5c:33:9f:97:aa:16:7e:99:aa: 2f:c5:2d:12:8b:61:58:56:44:bf:d5:6a:1d:19:bb: 73:89:a6:d2:dd:b6:d5:63:6e:f7:44:df:f3:7a:09: ba:1f:51:15:f7:4b:2f:3e:d0:64:48:6f:70:21:4f: a6:cc:12:c4:a3:19:cc:03:4b:ca:1b:eb:d5:34:37: 2c:12:e7:02:31:e5:e9:2f:c8:a6:e4:44:6b:9e:65: 7e:78:1e:b1:a8:f4:4a:4e:d9:93:dd:a9:84:e0:20: de:7e:53:1e:20:ac:fc:88:3a:e3:06:15:46:98:d5: a1:36:d7:5d:fa:93:47:51:3e:93:25:b8:9f:fc:4e: 99:de:88:2d:43:3d:62:af:fb:40:e3:b2:61:7b:23: 9f:68:ab:aa:5c:a9:38:62:d8:4f:56:eb:76:91:3d: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:FE:4D:9B:65:EE:23:4A:BC:70:B7:D5:E1:97:0A:0E:9F:5D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl X509v3 Authority Key Identifier: keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer sbgp-ipAddrBlock: critical IPv4: 142.165.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:44:b8:0c:59:9f:36:3a:3f:b3:30:e5:70:bb:1b:dd:d3:5d: 57:d7:98:eb:0e:bf:65:40:ba:da:66:a0:e4:d0:87:8f:b2:a6: c0:f6:52:f9:df:0f:c5:15:db:13:d3:c1:de:f6:dc:4f:8f:c3: 0d:1d:c3:70:52:f6:71:63:06:46:72:3e:33:a8:38:f5:f9:29: cc:61:ba:60:e3:37:a9:4c:51:cf:6a:6a:f0:35:04:a0:7d:38: de:5f:84:2d:06:ad:49:1d:47:cf:92:12:4a:7d:d4:30:6f:da: 6a:27:5a:13:6c:da:f6:63:93:23:4c:1c:2f:ff:77:80:50:61: 39:ae:01:c6:d1:fb:96:55:c6:54:1a:42:27:4b:28:c8:fa:93: 7d:8e:21:f6:f7:d3:b7:4a:58:56:78:1b:26:63:cf:10:af:f8: 5e:8c:cd:8c:d3:44:9d:9b:04:6b:b6:42:92:0d:11:24:f4:c7: 30:46:c8:85:e7:25:e2:c5:71:22:5c:37:ef:8c:99:5c:31:3c: 14:c7:ae:81:41:40:fd:ba:8d:95:41:05:9c:61:f6:32:c5:aa: d3:94:ad:97:9f:09:d6:96:63:dc:cc:0e:4b:4d:cb:e4:ce:d0: fc:a6:6e:f9:99:12:eb:2c:f0:2b:d2:e3:5a:df:33:e5:fa:9c: ee:3b:8d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/oNxvvcncXJbgnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy OGIzMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MWRhMmViMmYtZTgwMS00MDNiLTk4ODctZGU4MDQxYTEwNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIRlAyYN5034ye88JGW5pCPz5Rh6ahrJ9Oet S5b4hJ7aQIOiDBZbcnL6oQZQtnYODRfSuGdA8jhhdVc6n1o6cDdF0W/yDYSO2+p6 GYpwfu7hrpZI5HpXjReLBbJYbmFcM5+XqhZ+maovxS0Si2FYVkS/1WodGbtziabS 3bbVY273RN/zegm6H1EV90svPtBkSG9wIU+mzBLEoxnMA0vKG+vVNDcsEucCMeXp L8im5ERrnmV+eB6xqPRKTtmT3amE4CDeflMeIKz8iDrjBhVGmNWhNtdd+pNHUT6T Jbif/E6Z3ogtQz1ir/tA47JheyOfaKuqXKk4YthPVut2kT0v4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLd/k2bZe4jSrxwt9XhlwoOn10QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvMDlmNGIwODQtZmQzNC0z YzkyLTlkZmMtZWNiYzg2NDExNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5 MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0 MzRiMjI4YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjqXbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClEuAxZnzY6P7Mw5XC7G93TXVfXmOsOv2VAutpmoOTQh4+ypsD2Uvnf D8UV2xPTwd723E+Pww0dw3BS9nFjBkZyPjOoOPX5KcxhumDjN6lMUc9qavA1BKB9 ON5fhC0GrUkdR8+SEkp91DBv2monWhNs2vZjkyNMHC//d4BQYTmuAcbR+5ZVxlQa QidLKMj6k32OIfb307dKWFZ4GyZjzxCv+F6MzYzTRJ2bBGu2QpINEST0xzBGyIXn JeLFcSJcN++MmVwxPBTHroFBQP26jZVBBZxh9jLFqtOUrZefCdaWY9zMDktNy+TO 0PymbvmZEuss8CvS41rfM+X6nO47jT8= -----END CERTIFICATE-----Generated at Sun Apr 13 02:51:10 2025 by rpki-client